Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
File:                     32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          qcDRnv69Q4J1JPqJWZKbYH99xiDm1yC0cX6oVV2/yOU=
Subject key identifier:   43:03:DC:FE:C0:F2:6D:25:C4:99:9F:15:3C:9A:B7:2E:DD:ED:D2:DC
Certificate issuer:       /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial:       5EB6284FDF3D778FE7D7C897AD76BE5C98F66BBF
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
Signing time:             Wed 16 Jul 2025 09:13:33 +0000
ROA not before:           Wed 16 Jul 2025 09:08:33 +0000
ROA not after:            Wed 15 Jul 2026 09:13:33 +0000
asID:                     393577
IP address blocks:        23.142.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 08:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:28:4f:df:3d:77:8f:e7:d7:c8:97:ad:76:be:5c:98:f6:6b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
        Validity
            Not Before: Jul 16 09:08:33 2025 GMT
            Not After : Jul 15 09:13:33 2026 GMT
        Subject: CN=4303DCFEC0F26D25C4999F153C9AB72EDDEDD2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f2:bb:bc:c0:98:01:d2:33:97:51:af:80:a3:
                    4d:e2:fc:d9:00:db:1c:8e:12:de:49:bd:6f:a7:64:
                    59:ad:8c:b7:ca:00:20:69:f8:37:32:b2:1c:d0:22:
                    4f:97:98:80:75:6b:12:5e:b3:62:43:05:9a:78:58:
                    8f:00:c4:bc:2e:8d:c5:49:6e:59:08:e1:78:6c:46:
                    d4:c6:2c:20:5c:68:54:49:2c:29:c0:72:72:21:b2:
                    54:a2:32:62:8a:a2:a9:10:83:43:9a:ff:fc:49:43:
                    04:26:53:74:1d:20:81:24:37:3c:ce:5c:29:16:0f:
                    69:28:1e:d2:f9:93:23:19:8c:56:39:36:ad:85:76:
                    3d:61:c2:00:6d:4a:4b:ed:47:7b:58:1b:89:99:ba:
                    48:08:cb:70:4d:8d:51:91:19:44:17:e6:67:d8:f9:
                    3c:fc:9e:19:0f:60:1e:71:30:38:63:4e:73:7d:c9:
                    d8:40:ac:59:55:13:eb:ec:ab:7f:8e:0a:1d:6e:e5:
                    2b:07:b1:8a:fe:54:f6:d9:b9:9b:bc:09:88:ef:7b:
                    0b:f4:e2:3a:bb:51:52:23:98:22:d8:fe:10:35:f9:
                    c4:84:df:3c:f0:fa:c6:23:15:0b:69:93:af:2e:12:
                    ec:a8:c3:0a:86:42:ee:a9:a6:af:e1:93:31:b8:13:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:03:DC:FE:C0:F2:6D:25:C4:99:9F:15:3C:9A:B7:2E:DD:ED:D2:DC
            X509v3 Authority Key Identifier:
                keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:79:b1:ad:91:7f:44:ad:47:0a:11:a4:c3:9c:af:c3:9a:43:
         8e:4d:77:54:6d:b0:66:cc:1f:00:4f:04:7c:c3:52:1e:a0:15:
         2c:26:bd:16:54:16:f9:1a:e2:2a:4a:64:e1:e3:74:a0:8e:5a:
         c9:3c:85:35:f4:b1:54:06:63:82:52:3a:41:44:11:98:61:1d:
         2c:a9:2f:7b:b7:e5:30:95:d5:57:78:93:1e:d2:e8:3f:99:b0:
         14:ae:ce:75:ba:86:a2:ce:06:12:41:a9:6e:24:63:18:fd:6c:
         52:3f:55:0b:f5:72:fa:91:f0:87:d7:80:61:da:f1:ea:6d:cd:
         b3:cf:3f:db:d2:81:ac:1d:82:ac:68:67:71:75:54:fc:d6:73:
         1d:e7:c3:ad:43:ac:ba:28:bd:66:d5:d4:91:24:e6:69:34:7a:
         7e:57:f0:ca:29:44:6b:0d:f3:5c:d3:ed:13:a2:16:ac:91:0a:
         26:bb:31:a6:10:00:41:35:83:b5:d1:ae:ac:f2:bd:cd:b5:91:
         3a:dc:d0:09:2e:1a:d6:39:cf:08:27:d2:67:09:12:c4:9c:17:
         8a:14:db:b4:9b:55:5d:73:47:98:8e:24:52:57:e5:41:e2:31:
         fe:0b:9d:b7:78:ee:c0:90:da:bb:7f:3c:7c:2e:fa:10:31:ad:
         89:60:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:52:24 2025 by rpki-client