Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa
File:                     3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          /xJXl8y2kpL6IQ/8YkkA9v7ReE+lV/6Hc03e1rNNUVk=
Subject key identifier:   A6:23:36:FC:E6:6C:49:49:D6:A1:FC:D6:7B:79:AA:DE:0D:A3:F5:1D
Certificate issuer:       /CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
Certificate serial:       3FEB3E39F27FD48AE360405496236E5E941EEE0B
Authority key identifier: 87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa
Signing time:             Tue 15 Apr 2025 07:28:29 +0000
ROA not before:           Tue 15 Apr 2025 07:23:29 +0000
ROA not after:            Tue 14 Apr 2026 07:28:29 +0000
asID:                     14618
IP address blocks:        108.160.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 01:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:eb:3e:39:f2:7f:d4:8a:e3:60:40:54:96:23:6e:5e:94:1e:ee:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Validity
            Not Before: Apr 15 07:23:29 2025 GMT
            Not After : Apr 14 07:28:29 2026 GMT
        Subject: CN=A62336FCE66C4949D6A1FCD67B79AADE0DA3F51D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f2:8a:50:70:d9:96:c6:d2:47:44:ab:4a:2e:
                    6e:50:5b:3b:72:f8:6a:68:45:6f:b8:fc:99:eb:bc:
                    94:0e:ae:1e:24:4f:d1:81:d2:04:62:3a:d9:5c:e7:
                    dd:9a:d1:2f:c1:1f:b5:bb:60:bf:23:ba:f5:3a:92:
                    8d:66:90:fd:63:14:d9:66:71:38:6b:2d:c4:f9:fa:
                    23:d5:f7:36:f5:22:41:cb:7e:23:cb:23:7f:f8:3b:
                    99:59:42:33:bd:6b:eb:42:ae:78:c2:6e:e4:6f:9a:
                    4b:01:5f:6f:15:d5:4a:da:17:b2:0e:e5:28:e7:e3:
                    63:65:bd:0a:87:3e:87:b0:1b:86:89:6b:39:18:1c:
                    b5:1f:00:cc:00:c3:4b:01:ed:7c:e5:68:48:9c:8d:
                    9e:bb:95:2a:69:f2:be:2f:6e:1d:98:67:ab:47:8d:
                    b1:ad:71:72:0f:b2:b1:bd:03:33:9e:41:1a:82:12:
                    d2:6d:84:0b:c1:f7:fe:42:c1:7e:9e:89:c2:dc:86:
                    5f:24:d7:9f:5b:d0:a0:2c:66:8d:62:9c:55:56:5b:
                    9a:ac:13:69:37:fb:ef:9c:2c:1d:f8:cd:8c:1c:e3:
                    52:61:50:00:51:ef:59:e0:c6:35:f1:32:89:59:c8:
                    f1:7b:91:5c:a3:5c:e9:8f:22:ac:c1:87:10:28:ca:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:36:FC:E6:6C:49:49:D6:A1:FC:D6:7B:79:AA:DE:0D:A3:F5:1D
            X509v3 Authority Key Identifier:
                keyid:87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.160.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:04:d3:39:72:49:30:a3:2a:83:15:e1:19:a9:59:69:45:79:
         95:9f:58:34:af:d5:12:d0:9e:1c:c6:6e:f5:b4:d0:dd:2a:9d:
         64:7c:71:af:21:66:3b:ab:fb:31:64:a4:0a:2d:22:ee:a9:23:
         9d:2f:fa:de:27:61:91:86:6a:0a:4c:4d:f5:29:f5:bb:fe:5d:
         9b:38:43:ac:de:3f:6d:39:3f:5f:c4:4c:d5:31:e2:eb:db:7f:
         d3:fb:35:9d:2a:cf:18:10:a7:43:14:7f:c8:d7:13:5d:a3:03:
         e9:30:2a:1e:e6:fa:2d:5e:89:34:f2:ac:62:71:41:36:ee:c2:
         40:14:d5:f7:15:da:8f:6a:61:18:4e:3f:ea:13:c5:2c:40:10:
         c8:25:e9:0a:a4:25:41:ae:9a:c3:2d:9b:d8:8c:2e:8e:b5:66:
         b5:ac:35:5d:73:6b:77:67:49:74:9d:2e:fc:13:e1:ce:f9:de:
         64:4b:44:bc:c0:a4:b9:d4:ca:f9:8d:c1:b7:92:5e:5b:6c:6e:
         ba:58:f1:af:a2:2c:55:05:7e:51:f5:1c:c2:cb:b1:10:d2:fc:
         87:b8:38:de:a5:f5:4a:d2:bc:09:05:80:9a:f0:8a:df:f8:62:
         a5:58:42:88:a0:e5:d4:9d:26:57:a9:50:9e:13:80:ed:c3:8c:
         2b:6d:bc:66
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUP+s+OfJ/1IrjYEBUliNuXpQe7gswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGFkNjNhZmNjOWI3ZDUxODYwYTI1ZjVmZWNjMjQ5MmQz
NWJkMGFhNDEzNTAxOGRlNDIwHhcNMjUwNDE1MDcyMzI5WhcNMjYwNDE0MDcyODI5
WjAzMTEwLwYDVQQDEyhBNjIzMzZGQ0U2NkM0OTQ5RDZBMUZDRDY3Qjc5QUFERTBE
QTNGNTFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfKKUHDZlsbS
R0SrSi5uUFs7cvhqaEVvuPyZ67yUDq4eJE/RgdIEYjrZXOfdmtEvwR+1u2C/I7r1
OpKNZpD9YxTZZnE4ay3E+foj1fc29SJBy34jyyN/+DuZWUIzvWvrQq54wm7kb5pL
AV9vFdVK2heyDuUo5+NjZb0Khz6HsBuGiWs5GBy1HwDMAMNLAe185WhInI2eu5Uq
afK+L24dmGerR42xrXFyD7KxvQMznkEaghLSbYQLwff+QsF+nonC3IZfJNefW9Cg
LGaNYpxVVluarBNpN/vvnCwd+M2MHONSYVAAUe9Z4MY18TKJWcjxe5Fco1zpjyKs
wYcQKMqwtQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKYjNvzmbElJ1qH81nt5qt4N
o/UdMB8GA1UdIwQYMBaAFIdKNTru8qYHoauo5D0g8Y7JQRr4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODg5YzQzZTcwMTg4YjM2OTA1ZDQxNjA1LzAv
ODc0QTM1M0FFRUYyQTYwN0ExQUJBOEU0M0QyMEYxOEVDOTQxMUFGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzNlYjYwNTk4LTc2Y2EtNDliMC05YTFmLTAxMjcwNjAzZDhkOS80YWQ2
M2FmY2M5YjdkNTE4NjBhMjVmNWZlY2MyNDkyZDM1YmQwYWE0MTM1MDE4ZGU0Mi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4OWM0M2U3MDE4OGIz
NjkwNWQ0MTYwNS8wLzMxMzAzODJlMzEzNjMwMmUzMjMxMzIyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbKDUMA0GCSqGSIb3DQEB
CwUAA4IBAQB2BNM5ckkwoyqDFeEZqVlpRXmVn1g0r9US0J4cxm71tNDdKp1kfHGv
IWY7q/sxZKQKLSLuqSOdL/reJ2GRhmoKTE31KfW7/l2bOEOs3j9tOT9fxEzVMeLr
23/T+zWdKs8YEKdDFH/I1xNdowPpMCoe5votXok08qxicUE27sJAFNX3FdqPamEY
Tj/qE8UsQBDIJekKpCVBrprDLZvYjC6OtWa1rDVdc2t3Z0l0nS78E+HO+d5kS0S8
wKS51Mr5jcG3kl5bbG66WPGvoixVBX5R9RzCy7EQ0vyHuDjepfVK0rwJBYCa8Irf
+GKlWEKIoOXUnSZXqVCeE4Dtw4wrbbxm
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:30:35 2025 by rpki-client