Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa
File:                     3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa (raw, json)
Hash identifier:          ZB7f4zvfx13oDchii0JAdrO97yJvXEbG0foGCLxcGiI=
Subject key identifier:   F5:F2:54:1C:AE:3F:CE:A2:C8:23:25:BB:41:68:21:8D:54:CE:E0:F0
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       207AAEFA1121EF7C932F3B2FE6C9FDCAB8CA6D0C
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     17139
IP address blocks:        173.247.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7a:ae:fa:11:21:ef:7c:93:2f:3b:2f:e6:c9:fd:ca:b8:ca:6d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=F5F2541CAE3FCEA2C82325BB4168218D54CEE0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:20:32:61:d7:a6:7a:c9:cd:47:b0:8e:56:
                    64:17:10:7c:16:d0:4f:ef:da:3b:4f:6a:9e:62:8d:
                    fb:46:4c:08:05:a5:ed:9f:3f:6a:75:ac:9e:7c:5c:
                    92:94:b9:8c:23:28:17:36:48:f8:48:a2:25:6e:ae:
                    43:79:6e:b2:ff:02:2d:09:ec:da:43:17:e8:17:29:
                    0b:dd:8c:e0:3d:58:1e:57:6e:bb:01:86:77:b3:d3:
                    9e:c5:c7:0a:19:4e:3e:80:dc:45:23:4a:6c:ef:5e:
                    ac:2e:d8:46:76:4b:21:04:52:1a:29:e5:8b:6b:8f:
                    3e:4b:fd:4c:9b:9b:05:fd:04:3d:37:29:41:c7:fb:
                    45:4e:fe:fc:b3:f1:98:29:d0:fa:3f:91:ce:bf:6c:
                    51:f5:d9:0c:b3:7b:06:02:9a:49:09:2b:93:b6:f1:
                    23:a7:b4:74:61:7b:56:c5:9d:9b:ce:6d:e5:a6:10:
                    5d:db:71:92:50:71:af:a1:d7:0f:17:64:ad:b3:c5:
                    5e:3e:5f:e3:32:7a:c0:74:29:c2:2f:20:bd:2a:85:
                    20:d8:1b:fc:9b:2d:ea:69:9a:f7:fb:1f:e6:95:dd:
                    a7:73:e5:24:b3:9b:0e:73:41:b8:80:45:3d:a9:3f:
                    41:f3:2d:e8:80:97:86:1b:ae:23:fe:e5:89:ea:84:
                    54:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F2:54:1C:AE:3F:CE:A2:C8:23:25:BB:41:68:21:8D:54:CE:E0:F0
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232342e302f32302d3230203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:75:ef:05:98:e6:ce:42:fc:73:c1:4f:47:cc:2c:2d:b3:db:
         74:5b:3a:08:38:74:3b:0b:af:4a:9f:85:b4:4b:a7:77:58:58:
         20:83:14:30:c4:33:bb:ba:24:9c:dc:36:2d:9d:16:33:f9:8c:
         7b:b4:df:df:27:c5:32:8f:4e:35:74:5b:08:d4:8e:ae:e0:26:
         c1:07:d5:73:32:c5:d2:8a:03:9d:9d:23:0d:0c:a4:78:63:d1:
         cc:ea:4f:0b:a4:b9:07:62:50:d5:d7:fc:cd:35:18:25:e1:3b:
         29:c4:34:e4:bc:3e:a0:21:4d:d4:5b:cd:1a:f3:cc:52:dc:62:
         e6:61:63:b5:18:a2:06:27:db:e3:d5:8e:46:51:4a:47:47:ae:
         87:1e:1c:10:48:27:d9:20:db:a5:a9:f2:ea:54:84:3a:db:f2:
         84:91:c8:1d:ad:64:1f:73:28:15:7d:92:56:73:61:63:71:1d:
         db:05:90:ce:a0:9e:db:3d:1e:bb:b0:27:1e:66:80:f9:18:5e:
         96:31:29:cf:1a:77:8f:7a:78:5d:25:3c:3d:ee:f4:c9:fa:f1:
         42:a0:a7:b4:05:45:66:59:52:b7:f7:42:07:9f:82:cc:46:a6:
         9d:ad:e9:90:be:53:4a:a8:e4:cb:80:0c:3b:1d:9b:86:e3:ed:
         c9:f0:8f:d4
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIHqu+hEh73yTLzsv5sn9yrjKbQwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE0WhcNMjYwNzExMDYzNDE0
WjAzMTEwLwYDVQQDEyhGNUYyNTQxQ0FFM0ZDRUEyQzgyMzI1QkI0MTY4MjE4RDU0
Q0VFMEYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcAgMmHXpnrJ
zUewjlZkFxB8FtBP79o7T2qeYo37RkwIBaXtnz9qdayefFySlLmMIygXNkj4SKIl
bq5DeW6y/wItCezaQxfoFykL3YzgPVgeV267AYZ3s9OexccKGU4+gNxFI0ps716s
LthGdkshBFIaKeWLa48+S/1Mm5sF/QQ9NylBx/tFTv78s/GYKdD6P5HOv2xR9dkM
s3sGAppJCSuTtvEjp7R0YXtWxZ2bzm3lphBd23GSUHGvodcPF2Sts8VePl/jMnrA
dCnCLyC9KoUg2Bv8my3qaZr3+x/mld2nc+Uks5sOc0G4gEU9qT9B8y3ogJeGG64j
/uWJ6oRUHQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPXyVByuP86iyCMlu0FoIY1U
zuDwMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMyMzQyZTMwMmYzMjMwMmQz
MjMwMjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErffgMA0GCSqGSIb3DQEB
CwUAA4IBAQAlde8FmObOQvxzwU9HzCwts9t0WzoIOHQ7C69Kn4W0S6d3WFgggxQw
xDO7uiSc3DYtnRYz+Yx7tN/fJ8Uyj041dFsI1I6u4CbBB9VzMsXSigOdnSMNDKR4
Y9HM6k8LpLkHYlDV1/zNNRgl4TspxDTkvD6gIU3UW80a88xS3GLmYWO1GKIGJ9vj
1Y5GUUpHR66HHhwQSCfZINulqfLqVIQ62/KEkcgdrWQfcygVfZJWc2FjcR3bBZDO
oJ7bPR67sCceZoD5GF6WMSnPGnePenhdJTw97vTJ+vFCoKe0BUVmWVK390IHn4LM
RqadremQvlNKqOTLgAw7HZuG4+3J8I/U
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:34 2025 by rpki-client