Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e203232343339.roa
File:                     3230392e38372e3137322e302f32342d3234203d3e203232343339.roa (raw, json)
Hash identifier:          olQhIpX2FyxxRXJPxQEyKhx1VmAgSz9pOnd0yHiAep0=
Subject key identifier:   73:40:C0:5C:A5:12:12:9F:B1:39:01:1F:7A:5A:3B:AE:CC:5E:F2:00
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       3E6DEEF9B656543B53C5B7D2372DBAAE3CCA32E7
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e203232343339.roa
Signing time:             Mon 19 May 2025 13:10:17 +0000
ROA not before:           Mon 19 May 2025 13:05:17 +0000
ROA not after:            Mon 18 May 2026 13:10:17 +0000
asID:                     22439
IP address blocks:        209.87.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6d:ee:f9:b6:56:54:3b:53:c5:b7:d2:37:2d:ba:ae:3c:ca:32:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May 19 13:05:17 2025 GMT
            Not After : May 18 13:10:17 2026 GMT
        Subject: CN=7340C05CA512129FB139011F7A5A3BAECC5EF200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:5e:2b:45:75:ff:3c:cf:3f:3c:95:3c:16:
                    ba:df:a2:26:e8:69:21:92:e4:20:2d:bb:f4:f1:c7:
                    d1:b0:2b:cf:44:a3:d7:1f:c7:c2:78:fa:21:99:81:
                    a6:01:4e:d2:a9:9c:4c:b6:dd:6e:45:2d:5b:62:4e:
                    64:16:74:63:4f:00:e9:af:d9:89:ef:71:49:23:e7:
                    21:8b:5d:3b:2d:39:32:46:09:02:7e:2c:4c:7e:99:
                    8b:25:24:53:f4:20:80:4b:c3:65:76:c4:5c:0a:d3:
                    f8:63:5a:88:00:fb:b6:cf:87:8a:9a:91:4e:f8:69:
                    bf:9e:98:71:ab:19:a8:6f:47:73:0a:f3:c9:c5:a3:
                    12:ad:a2:80:da:20:4a:c9:41:ed:7f:59:b1:73:b3:
                    10:44:ef:e3:4a:ec:0a:e9:1f:d2:27:d8:e8:5a:44:
                    8a:4b:71:7b:13:cc:a4:15:f5:8f:e3:76:8f:54:3c:
                    57:a3:15:e3:e9:dc:78:8b:85:d5:f6:5c:17:ef:24:
                    0e:f1:4d:dc:55:a9:8a:3d:07:b9:49:c9:4d:91:c0:
                    7c:42:3a:b6:65:da:ad:ff:37:58:ab:d4:e9:ef:e1:
                    b7:32:21:a2:89:3c:40:3b:e0:dd:5f:09:dc:a8:b9:
                    e4:01:ce:8d:f1:a1:91:ea:ae:5e:83:48:79:3e:ef:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:40:C0:5C:A5:12:12:9F:B1:39:01:1F:7A:5A:3B:AE:CC:5E:F2:00
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e203232343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:c4:2a:73:cc:a7:b6:90:23:98:53:58:b0:11:03:15:8d:
         2d:59:37:5d:5b:66:03:73:b8:54:f9:b0:dd:ec:de:d7:65:21:
         99:7b:4e:f8:a4:e8:9c:d7:d7:73:06:01:72:f8:05:36:09:94:
         26:96:c7:e5:80:53:58:1a:d7:8b:c4:55:0f:94:dd:d6:a6:d7:
         6d:35:4e:45:e4:3b:31:a8:84:c5:d7:5b:90:48:9b:26:87:6f:
         63:ef:d9:0a:c4:9e:62:01:e6:e4:57:d8:76:d3:57:ba:d2:6d:
         33:c4:d8:14:f9:21:14:18:b8:04:cc:58:4d:09:36:00:21:6d:
         8c:f0:7d:d2:e0:62:04:07:bb:1e:aa:e1:ee:33:e4:7b:79:b4:
         c9:f0:83:c5:51:86:25:26:81:1b:86:b0:6c:6b:ea:eb:31:51:
         02:c5:af:87:ed:72:55:03:77:e7:99:1b:d0:0e:9a:79:4d:f0:
         f1:1f:6a:b1:53:04:02:b5:bc:2b:75:0f:fa:c3:aa:33:59:65:
         87:74:16:79:2c:b5:cc:1e:e3:0e:f2:55:37:7c:5f:cf:61:2c:
         e4:71:a2:55:44:44:99:35:7f:a9:1d:e2:66:b4:79:e3:65:c3:
         2e:34:49:c0:da:ba:fb:86:e4:6d:1b:4c:9b:75:03:19:65:87:
         b3:3b:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:16:44 2025 by rpki-client