Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa
File:                     3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          nm00dT/MisZuGgtqsGcx2UnoIkkxFJ0ElsLcwGq9Ty4=
Subject key identifier:   0B:46:C6:C0:1E:FB:75:AC:5D:4A:33:CE:1C:A5:A6:B9:63:96:FE:2A
Certificate issuer:       /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial:       7A44CF1D4A2A89B7EF5EE772A1043F5AD2A7E9C9
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa
Signing time:             Wed 16 Jul 2025 09:13:33 +0000
ROA not before:           Wed 16 Jul 2025 09:08:33 +0000
ROA not after:            Wed 15 Jul 2026 09:13:33 +0000
asID:                     393577
IP address blocks:        167.253.78.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 02:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:cf:1d:4a:2a:89:b7:ef:5e:e7:72:a1:04:3f:5a:d2:a7:e9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
        Validity
            Not Before: Jul 16 09:08:33 2025 GMT
            Not After : Jul 15 09:13:33 2026 GMT
        Subject: CN=0B46C6C01EFB75AC5D4A33CE1CA5A6B96396FE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:ac:8a:f4:52:f6:25:aa:5a:66:b7:a1:a5:
                    a3:0c:8f:f7:bd:3c:7c:f6:8d:04:42:b7:e8:18:0f:
                    a4:3c:b6:47:cd:2a:5c:98:77:dd:42:24:3c:8b:86:
                    c5:ae:f3:18:4a:6d:d1:5b:27:43:85:1c:ec:3c:d1:
                    0f:11:39:19:b6:94:9c:c4:a0:3a:88:88:d4:96:b9:
                    16:f8:2c:b2:c3:a0:11:8d:1d:3b:17:fe:c3:69:1f:
                    75:6f:d1:7d:b4:77:c4:57:d0:5a:99:79:e4:51:00:
                    94:42:fe:ff:e6:6d:a5:ea:55:ca:65:74:67:61:28:
                    e3:9e:e5:2c:93:e0:f7:19:e2:da:c7:b7:6c:ca:86:
                    82:ce:00:0e:7f:f0:a8:0b:10:e6:ae:be:7a:c1:6c:
                    5c:40:9c:25:2f:c7:02:57:06:31:14:aa:30:a9:47:
                    f1:8e:e3:dc:07:fb:b2:b1:82:95:d4:68:32:90:fb:
                    94:c4:f1:f1:f5:e2:2c:b2:72:b9:c1:15:4b:29:83:
                    9a:8a:eb:cf:0f:85:fe:b8:bc:df:23:ce:e5:ba:f8:
                    d8:1b:11:3c:01:5e:bb:0a:68:53:a4:a8:44:b5:4a:
                    c3:82:1e:7f:7b:ac:89:83:d3:bd:bd:80:93:59:fa:
                    22:77:53:69:ff:17:a5:58:0c:a2:db:17:83:31:ee:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:46:C6:C0:1E:FB:75:AC:5D:4A:33:CE:1C:A5:A6:B9:63:96:FE:2A
            X509v3 Authority Key Identifier:
                keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:bb:e0:81:6a:64:43:e7:45:41:4a:a9:77:3c:d0:c4:fc:
         27:79:9c:ec:46:d7:04:30:da:21:3f:d3:cd:e8:0f:e1:be:94:
         f2:4c:07:a1:cc:43:5c:aa:c9:0a:ee:61:5f:59:1a:3d:3f:ef:
         ce:de:ac:72:df:fc:3d:89:2e:53:67:4c:56:17:eb:0a:0b:ee:
         08:33:0a:e7:22:29:78:9f:33:b9:61:0e:4c:fa:48:b2:36:d4:
         bd:c4:11:88:16:b7:86:29:42:ba:e8:12:f6:1f:90:6f:9a:24:
         73:99:6c:b2:fa:7d:bf:32:15:b5:17:05:c0:90:53:f2:c6:9a:
         4a:74:25:f7:75:f9:19:86:bf:4d:92:bb:31:db:aa:82:a3:4f:
         45:ab:d3:04:f1:69:11:3b:88:19:7a:23:31:54:7c:c0:fd:81:
         5c:66:ef:4c:d3:b3:f7:91:97:f4:67:42:4a:aa:80:d6:bc:50:
         29:33:e0:66:86:2e:9c:0f:91:8c:f0:6b:12:8c:6d:a7:80:75:
         1c:3f:b8:7c:ed:9e:8e:e5:80:fe:dc:fb:fc:63:8f:f1:e2:dd:
         00:a7:01:f0:03:d8:1f:7b:5d:2a:4e:a0:c3:a3:75:fa:66:1a:
         8e:9a:6e:2a:4a:05:bf:64:74:9b:cc:fc:97:af:ba:1e:c8:e8:
         b9:c2:db:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:28 2025 by rpki-client