Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
File:                     32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          L7FaHi7pZFr1dOyymZorBEc4mi28B7/NKYWsWbuUxKk=
Subject key identifier:   19:0B:96:3C:60:52:12:81:C0:F3:8D:4B:DE:A1:F7:53:82:0D:E0:FB
Certificate issuer:       /CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
Certificate serial:       6201F5AF643357D9A4B32FDF47A7775A048B494B
Authority key identifier: 00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
Signing time:             Wed 11 Jun 2025 22:33:02 +0000
ROA not before:           Wed 11 Jun 2025 22:28:02 +0000
ROA not after:            Wed 10 Jun 2026 22:33:02 +0000
asID:                     393577
IP address blocks:        23.142.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:01:f5:af:64:33:57:d9:a4:b3:2f:df:47:a7:77:5a:04:8b:49:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470
        Validity
            Not Before: Jun 11 22:28:02 2025 GMT
            Not After : Jun 10 22:33:02 2026 GMT
        Subject: CN=190B963C60521281C0F38D4BDEA1F753820DE0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:3f:40:d3:24:3f:fd:d8:9d:8b:b4:a5:0c:
                    fd:3e:69:37:aa:3c:a5:db:82:30:ad:4c:9f:59:52:
                    d1:9e:b0:c4:84:04:79:44:f1:70:2b:7a:83:65:75:
                    10:61:bc:b8:11:39:61:0c:66:ce:c2:65:b8:3f:d8:
                    30:d5:19:e8:f7:d5:22:54:33:4d:1d:45:84:7c:db:
                    ea:b9:b7:a9:2d:69:df:6e:30:e0:15:25:3e:5d:9f:
                    c2:b5:85:fc:3e:db:6f:f6:ec:be:3e:5c:70:42:0b:
                    1c:0f:16:81:4f:bd:89:70:22:00:90:a3:0b:46:48:
                    15:0f:4a:c2:80:f3:e2:f0:8d:d6:52:fa:93:9d:22:
                    b2:ce:c2:d3:22:62:84:b1:cb:32:b3:d1:e9:ed:cc:
                    c8:3e:2e:b5:4b:d2:55:a3:ea:d8:6b:24:87:66:43:
                    fb:0e:0f:b1:9a:bc:94:61:a6:95:8b:73:ce:9f:0d:
                    cf:67:d5:1a:b6:f7:5e:c5:76:49:5f:c1:af:2d:33:
                    04:5d:9e:17:d4:16:9d:73:b9:9c:e9:00:09:3a:82:
                    79:bf:8a:78:4c:18:ce:cd:c2:d9:1c:97:c5:08:fd:
                    20:a3:a2:82:c8:8f:62:42:19:fb:05:6e:59:e4:99:
                    bd:7d:78:cf:75:20:18:ad:5f:43:84:e2:18:36:a8:
                    6e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0B:96:3C:60:52:12:81:C0:F3:8D:4B:DE:A1:F7:53:82:0D:E0:FB
            X509v3 Authority Key Identifier:
                keyid:00:1F:62:BF:34:17:95:C8:2E:A8:06:7E:1C:2E:28:C9:07:FB:E2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/001F62BF341795C82EA8067E1C2E28C907FBE2EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25496db3ae70272cbbfc4973e5fb6ae2bc8628e470.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:c2:f0:bb:22:cd:38:f6:77:15:a1:dd:c7:c2:da:19:d4:
         31:12:80:ec:69:6e:05:cd:3c:38:a4:88:eb:b9:f6:e3:ba:2c:
         ac:71:e9:04:e9:41:dd:d5:e8:61:d0:ee:64:f4:b3:c2:7f:26:
         bc:64:ee:5e:79:4c:ac:f8:bc:70:a5:91:59:e4:ca:d5:41:c9:
         15:14:c2:fd:5f:8b:7c:21:88:4b:41:b4:d6:eb:88:6d:4b:2a:
         35:6f:b7:53:95:24:a3:be:b9:c0:91:89:17:08:33:ae:2c:02:
         34:21:27:84:1c:e1:37:89:70:d9:8e:df:de:24:b2:64:af:a2:
         61:51:a4:2b:07:55:a0:ed:77:2e:a5:99:ee:92:75:7b:98:30:
         75:f3:aa:8e:ca:97:c0:2a:ea:92:9b:cc:13:1e:34:5c:c2:dc:
         b0:d0:64:08:59:1d:5a:de:a9:7a:4e:7e:41:45:00:90:0e:9d:
         8c:7f:10:f6:f2:dd:6b:fb:ca:ea:bb:e2:52:12:8f:23:d7:35:
         2f:06:61:20:a7:c2:b9:d2:21:7a:47:9f:72:df:1f:f3:43:4d:
         86:fa:9a:87:6b:9f:52:dd:e2:74:7d:b2:5e:01:91:73:89:a6:
         ba:2a:13:4f:21:d8:be:5d:3c:f1:1b:d7:21:00:d1:3e:68:61:
         1a:ac:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:32 2025 by rpki-client