Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
File:                     AS33119.roa (raw, json)
Hash identifier:          HEZ/RyR/AegLujDeAK9GyPixWNPNGu+O0+4h0O52iBw=
Subject key identifier:   F1:93:9E:82:90:27:68:26:97:38:78:5E:44:F7:92:80:0B:5A:F1:46
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       6ECAC82474E427C6B2196599E7756E965FF847EA
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa
Signing time:             Thu 15 May 2025 14:13:10 +0000
ROA not before:           Thu 15 May 2025 14:08:10 +0000
ROA not after:            Thu 14 May 2026 14:13:10 +0000
asID:                     33119
IP address blocks:        45.54.31.0/24 maxlen: 24
                          2607:f740:e039::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 10:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ca:c8:24:74:e4:27:c6:b2:19:65:99:e7:75:6e:96:5f:f8:47:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: May 15 14:08:10 2025 GMT
            Not After : May 14 14:13:10 2026 GMT
        Subject: CN=F1939E82902768269738785E44F792800B5AF146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:30:03:51:6f:46:26:bc:21:2d:e3:8e:05:
                    84:e3:cd:38:5b:6e:f7:78:8f:08:21:5c:8d:a2:b8:
                    63:44:c2:83:23:62:71:61:f5:28:b9:2a:81:d2:20:
                    b9:49:8f:da:f0:79:49:8f:54:cb:24:ff:5f:7c:22:
                    78:3e:ec:7d:5d:93:5a:23:c7:6e:57:de:a0:d7:5c:
                    f3:fc:5e:6a:fb:01:75:6b:83:04:d7:81:01:8f:30:
                    0a:8c:a0:44:a7:aa:da:03:b2:bf:10:42:1b:1d:46:
                    b9:85:ae:4a:a4:b0:37:00:b3:41:5d:d5:8c:6c:13:
                    69:a0:53:19:dd:9f:e9:35:2d:6b:63:7f:bb:1b:f4:
                    24:85:1c:65:7d:7c:00:8d:3c:a3:83:af:91:4e:9e:
                    09:62:e9:6a:e2:cd:bf:5d:58:c2:1a:e8:18:63:b6:
                    ba:0a:35:03:c4:3c:32:93:97:a4:68:d6:62:ec:0f:
                    a6:fe:92:b8:da:e8:f7:70:ac:e5:5a:49:37:0c:76:
                    b0:f0:c8:ca:2b:c4:9c:f6:0a:78:39:1a:38:32:9d:
                    48:5d:5d:df:b6:d5:de:0e:f4:cb:09:ab:0b:76:16:
                    02:d9:5b:d4:35:f8:3c:43:1f:bb:b8:64:34:64:14:
                    9c:99:65:e8:be:21:55:83:d2:10:ba:7e:6a:ec:e2:
                    59:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:93:9E:82:90:27:68:26:97:38:78:5E:44:F7:92:80:0B:5A:F1:46
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS33119.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.31.0/24
                IPv6:
                  2607:f740:e039::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:fe:32:8a:9d:5e:16:fc:ae:ec:56:3c:48:62:cc:8c:40:ef:
         cd:6e:2e:93:75:03:f5:7c:f9:3a:92:d0:17:38:69:1a:4f:52:
         25:59:8f:9a:95:33:07:45:80:27:06:b8:4d:ca:59:fd:5a:64:
         23:10:7f:c7:95:22:dd:82:7f:c5:07:c7:9a:e0:56:0f:b7:0d:
         dc:85:78:0c:a0:8d:b2:de:d9:ac:83:3b:ab:08:55:57:dc:b7:
         15:8f:19:3f:8a:be:cf:cd:2f:9c:42:ff:ae:01:50:bf:72:96:
         30:d8:10:64:9b:6f:f4:ae:3f:25:39:80:40:ae:ff:bd:25:5c:
         0b:b4:85:7a:57:37:b9:55:85:70:27:3e:ec:55:c3:f1:23:e4:
         9f:52:40:50:4f:05:dc:7d:0a:d7:bb:2e:ab:db:d2:45:21:80:
         58:8e:20:3e:29:ba:77:75:ff:8c:02:3b:b4:6b:98:16:93:51:
         c6:db:58:86:cc:23:a9:96:45:ed:af:b7:09:81:90:bc:1d:b8:
         87:c1:2c:10:34:57:3d:37:6e:12:b9:15:b8:fe:e2:4f:ce:bb:
         0a:e7:e2:83:1b:65:58:3e:d9:99:84:fe:50:1b:28:de:bb:be:
         e2:6f:b6:6a:c3:6f:0e:05:20:9b:a7:2c:c7:55:cb:ff:30:23:
         59:70:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:43 2025 by rpki-client