Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203632393433.roa
File:                     3137332e3234372e3232352e302f32342d3234203d3e203632393433.roa (raw, json)
Hash identifier:          7C5XtRgM9DKQjkINDhYZAGemUusZv4m1yF9DYmzQgWU=
Subject key identifier:   19:A2:53:93:D3:D7:66:B0:DA:39:2A:0A:60:AF:83:79:87:0D:34:A3
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       141E5FD49DE09AD6B0244A529B3F5596E7CEBD20
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203632393433.roa
Signing time:             Thu 27 Feb 2025 17:20:57 +0000
ROA not before:           Thu 27 Feb 2025 17:15:57 +0000
ROA not after:            Thu 26 Feb 2026 17:20:57 +0000
asID:                     62943
IP address blocks:        173.247.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1e:5f:d4:9d:e0:9a:d6:b0:24:4a:52:9b:3f:55:96:e7:ce:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Feb 27 17:15:57 2025 GMT
            Not After : Feb 26 17:20:57 2026 GMT
        Subject: CN=19A25393D3D766B0DA392A0A60AF8379870D34A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:8f:c9:58:5f:6a:89:6c:33:0b:10:90:11:
                    86:64:52:d5:cd:e0:4f:3f:73:a9:45:f0:86:0f:24:
                    e6:34:b9:78:75:a5:17:96:9b:9a:1b:bb:c0:a1:1d:
                    ab:48:cc:94:12:03:42:4f:1f:46:83:da:e5:f2:d7:
                    cd:76:25:08:ff:81:c4:1c:b6:c9:05:79:50:62:f5:
                    85:2d:9e:47:7e:73:9d:70:bb:f4:e3:f9:3b:b9:0f:
                    f8:be:9e:ac:df:da:1a:28:50:a2:48:52:aa:fc:c1:
                    be:31:31:c4:05:1b:8b:41:3d:d1:94:b2:98:4a:58:
                    00:f7:06:0a:00:2b:c5:cb:7b:3c:aa:d5:14:09:40:
                    7d:a0:b6:4d:db:9c:60:10:87:ee:77:ac:70:4c:e0:
                    f7:0a:c1:b9:63:c4:76:8a:5e:2b:c3:38:d3:e7:0d:
                    36:35:78:74:c9:f8:10:70:d5:1f:6e:f5:29:d7:cd:
                    cb:e9:e7:7f:96:75:99:77:f4:17:cc:59:65:d4:b3:
                    e6:d5:8f:a7:7f:3d:9d:72:d2:00:a5:04:25:53:aa:
                    b6:59:12:ad:ab:6d:32:d4:d7:4e:41:84:99:cd:35:
                    39:92:49:cb:81:b1:39:18:71:8f:c3:76:ac:59:b6:
                    d0:50:c9:0c:cd:e8:46:0d:9f:9a:24:7d:8d:76:07:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:53:93:D3:D7:66:B0:DA:39:2A:0A:60:AF:83:79:87:0D:34:A3
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203632393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:4d:e9:8d:ff:2d:a2:75:05:c0:aa:5c:f4:f8:25:57:7c:03:
         d6:7c:9f:55:70:ac:53:d1:c6:70:8f:91:29:0b:d1:de:60:aa:
         3e:7e:e1:e4:25:9b:0a:9d:8d:36:64:cd:67:8d:48:2f:1c:94:
         ae:58:25:12:79:e6:45:af:9c:29:e6:df:c1:35:f4:56:67:df:
         37:5f:94:7e:05:24:ad:e1:78:61:8f:04:1a:2c:6a:75:6a:0a:
         c5:61:d2:f7:d4:fc:c3:38:1b:67:f8:27:52:b1:58:78:d6:c0:
         29:f0:45:5e:b8:a9:25:e4:d9:36:13:83:df:74:7f:8b:61:66:
         d9:e1:b3:07:5a:40:bb:4b:ea:40:84:83:68:94:1a:60:ff:8b:
         54:d8:79:f8:e8:df:bf:31:9f:bb:ba:be:fe:00:89:96:32:5d:
         a3:50:51:1a:b3:80:ac:d4:0f:41:92:7b:09:69:c6:e7:15:5b:
         1f:a5:df:13:7e:33:9a:cf:79:04:4b:07:e8:c5:a6:30:f7:05:
         4c:e7:b5:e7:44:3b:3b:cc:8d:dd:6f:7a:95:48:b3:44:ec:70:
         b8:9b:db:06:c2:8d:d7:00:10:60:3b:76:2a:64:c0:70:53:81:
         16:1b:89:be:1e:01:11:18:8e:77:bc:0b:30:a0:84:00:80:22:
         c7:0c:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:15:28 2025 by rpki-client