Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          Zr8fev5QMjpmz+xj+U/vzoSRwg5dfF3hVhP99imF3CE=
Subject key identifier:   7C:C3:6C:1E:04:03:B0:D9:BA:1E:D7:0A:24:64:70:27:38:E2:E3:76
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       6C986A83CFB4F74A7F258A802942883FFD08F4C5
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     17139
IP address blocks:        173.247.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:98:6a:83:cf:b4:f7:4a:7f:25:8a:80:29:42:88:3f:fd:08:f4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=7CC36C1E0403B0D9BA1ED70A2464702738E2E376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:13:9e:38:6a:82:d8:41:a6:07:a1:87:dc:4b:
                    9b:dc:f6:ec:4f:50:79:0b:59:0f:92:81:2a:32:b9:
                    22:2e:49:13:0e:12:09:42:b7:15:d4:16:9a:05:31:
                    c9:ac:98:68:cf:3a:45:9f:fa:71:e3:58:36:0c:67:
                    b0:f6:63:fc:6e:60:fb:f4:1a:9c:ca:a4:55:f1:c3:
                    bc:8e:38:98:5e:d9:03:c9:df:1d:8f:7a:11:5c:69:
                    d3:12:65:21:68:c2:f5:f3:8f:e6:e3:a5:2e:14:2f:
                    1d:8e:08:4a:1d:ee:47:22:86:82:96:35:8e:7b:5f:
                    6e:62:e7:34:0f:d4:be:5c:4b:05:95:dc:24:e4:b1:
                    34:d4:dd:cd:cc:80:84:fa:bd:22:ba:a4:93:97:7f:
                    4c:1b:5e:fe:f9:87:45:99:18:99:fe:7e:6a:82:1b:
                    ab:dd:e0:13:33:b7:9d:ef:24:94:b8:8d:72:7b:52:
                    32:7d:61:39:c6:cd:48:5a:78:ff:8f:ed:ab:00:cc:
                    3c:3a:94:5e:25:dc:71:b6:db:7c:52:70:27:78:7a:
                    85:9a:23:35:cb:ec:cb:7f:2c:55:6b:09:1a:ff:b7:
                    93:ac:ae:f8:45:1f:33:60:51:07:77:2a:78:90:ec:
                    89:56:97:40:b6:a3:56:ca:06:8d:90:b1:a5:17:c3:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C3:6C:1E:04:03:B0:D9:BA:1E:D7:0A:24:64:70:27:38:E2:E3:76
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a6:ae:f3:4e:41:06:be:a5:69:b7:60:e1:ea:e1:61:a4:7a:
         05:cc:b0:6d:0a:54:6b:26:03:c7:ad:42:c3:25:54:e0:4d:65:
         2a:d1:dd:c0:4e:41:44:8e:2e:03:f3:90:b3:df:5c:9b:6c:5f:
         58:98:dc:44:82:bd:14:e4:72:2e:b4:97:30:03:33:3b:56:8b:
         cb:bb:ed:64:45:17:f1:eb:7f:b4:80:88:93:17:e4:9b:8e:ea:
         6b:f6:30:b7:f8:29:62:4b:73:4b:6f:53:64:6e:99:9b:b6:19:
         71:88:17:45:8d:55:88:c4:ec:86:b1:8b:12:d9:9f:5c:fc:a3:
         61:ca:6c:cc:4c:0c:aa:e5:0d:4f:f1:a4:86:20:33:85:1d:8b:
         08:34:8c:dc:44:4b:94:69:74:f8:79:a0:36:51:9e:64:e7:8b:
         75:62:2a:c7:be:ca:a6:cb:8c:49:5c:cf:82:e2:a1:e3:5c:04:
         1b:11:6b:92:ba:cf:18:73:df:c5:a8:fb:dd:31:0a:97:2e:41:
         a1:81:d3:b1:24:76:5d:87:7d:b0:52:5b:60:87:54:b2:11:10:
         f1:47:0a:30:e9:44:f0:2e:cf:27:91:73:61:0f:07:58:03:90:
         2d:d3:2f:81:73:b3:c7:d2:f3:76:68:42:64:b9:56:a5:b0:a5:
         13:0b:b0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:05 2025 by rpki-client