Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          0RleFZKh87yyFCaTdNMVKzKoZy4Pw6wZ0qRrLIrejzw=
Subject key identifier:   46:8E:1B:21:DA:C6:21:FB:2D:98:16:AE:7C:78:C3:7C:E5:4D:53:01
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       47F961CF2C34960709492CF57423F80B779E3659
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        173.247.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f9:61:cf:2c:34:96:07:09:49:2c:f5:74:23:f8:0b:77:9e:36:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=468E1B21DAC621FB2D9816AE7C78C37CE54D5301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:7d:3c:27:7a:36:4d:40:aa:69:5f:4c:15:
                    19:99:5e:d1:ae:24:a5:0a:9c:2f:20:f7:b4:df:33:
                    bc:8f:ce:16:18:7e:e4:ad:7c:8b:dd:a1:c6:bf:76:
                    c0:8c:5b:af:12:a5:f7:e8:43:85:4d:70:79:d8:96:
                    25:05:40:8e:8c:22:2c:8b:02:32:4a:85:2b:1b:cf:
                    cc:ba:50:ff:9a:a0:73:cf:17:a7:56:0d:b7:d0:e8:
                    5b:cf:5d:d6:e1:91:43:52:c9:ea:dd:ce:ab:93:66:
                    67:47:e0:1e:07:60:1c:a5:f8:c1:3f:09:35:78:1c:
                    b3:04:14:bd:29:e9:c9:69:e5:26:8b:c4:fd:90:26:
                    e0:c0:71:b4:4e:59:18:d1:a9:0e:61:72:4c:c1:c6:
                    8a:b4:d0:79:a5:5d:46:b4:74:dc:92:5e:87:63:d7:
                    d3:68:dc:3a:33:d3:80:15:21:f0:2d:11:8b:4e:0a:
                    ab:a0:37:21:29:73:73:9b:02:1f:94:f4:52:b4:3c:
                    e8:66:69:01:61:4c:e5:fb:9a:00:8f:2b:c0:fc:58:
                    e7:58:44:d8:16:5d:4b:32:09:2b:92:fb:52:f5:98:
                    32:a0:4e:29:08:6b:16:9d:66:ae:c7:9b:26:b6:e3:
                    7e:68:77:2e:bc:55:39:b7:44:0e:0b:08:21:e1:b0:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8E:1B:21:DA:C6:21:FB:2D:98:16:AE:7C:78:C3:7C:E5:4D:53:01
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:84:29:a3:f4:6a:b2:7d:1e:7c:86:e0:4c:a7:63:11:20:80:
         e4:7c:d7:6c:f5:a9:ad:89:20:70:28:c5:3e:3a:fc:d4:8b:8d:
         83:81:78:ee:ab:6b:71:6c:14:00:03:fb:4a:59:21:db:e8:1b:
         01:90:1c:4f:2b:e7:65:79:97:16:9c:2d:a0:2e:90:05:7c:52:
         ec:eb:d4:fe:c5:16:e7:51:7b:89:a4:4f:4a:3f:38:12:8a:b9:
         3f:5e:32:05:b4:01:c0:90:c9:82:0b:bd:68:e0:dd:53:80:1e:
         e1:cc:a6:b8:a6:14:2e:8e:0c:30:3c:2b:44:b6:50:04:a3:90:
         b3:b4:49:40:75:ce:b6:bd:41:d8:31:ef:d5:18:79:5b:15:06:
         d3:55:e1:30:51:fa:dc:58:fa:f9:a5:f9:9c:ef:4c:d2:f6:b4:
         76:d9:7e:3b:19:93:f0:6f:c8:34:e7:2c:9b:bd:ef:66:fa:29:
         fa:f5:fc:5e:df:3d:99:07:a2:5e:08:70:28:ff:3c:f9:1d:97:
         67:0a:76:9b:45:d4:2e:be:95:50:39:17:1b:91:93:a9:c0:2a:
         69:a9:24:d8:ff:e0:e7:78:74:0d:29:05:28:63:ab:4d:01:1a:
         0d:eb:d8:fa:be:c6:7d:75:00:70:4f:1a:16:81:c9:b0:b3:16:
         66:5c:0e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:47 2025 by rpki-client