Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          SlcGoua74PKNHSPiv8k4oa0h8FKTBJEBMa+AOQz+xXg=
Subject key identifier:   38:E7:6E:12:1E:0C:B7:78:DB:6E:86:1F:15:66:DF:55:4E:A4:77:02
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       447725B70C78F4D6E9D147A57963D8553FF4893E
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     17139
IP address blocks:        173.247.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:77:25:b7:0c:78:f4:d6:e9:d1:47:a5:79:63:d8:55:3f:f4:89:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=38E76E121E0CB778DB6E861F1566DF554EA47702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:4d:fc:7b:2e:50:b7:e4:15:da:f1:88:ce:
                    4a:11:1a:1c:fd:58:b2:e8:a5:56:0b:bb:15:3e:1b:
                    5a:94:43:8f:a1:18:a4:91:9f:36:03:1f:eb:88:41:
                    1e:1d:f0:b3:8c:78:19:6c:31:df:a4:e1:fd:e2:fc:
                    2a:7f:73:d1:b3:91:ae:07:4e:2b:6b:ac:b1:38:10:
                    3f:45:3d:7d:02:1b:b6:c9:7d:ef:9c:cc:66:f4:8a:
                    a0:c1:bc:e1:9e:66:3f:29:87:29:be:8d:d6:27:bd:
                    39:a9:4e:fa:c0:fd:49:ac:99:8e:90:21:ef:79:0a:
                    b0:bf:59:48:b4:f5:89:2f:76:09:20:43:26:a0:7a:
                    5e:64:98:14:8e:ee:c0:d3:dc:10:64:64:66:38:1d:
                    58:eb:dc:3c:94:48:fe:79:ce:ae:30:a4:df:02:f1:
                    33:35:f5:e5:ec:e6:01:2f:93:58:6a:a7:48:d8:50:
                    52:ff:5c:1f:c5:c7:20:2e:bf:3c:95:ec:8e:88:3d:
                    8a:ff:da:05:29:41:63:40:91:07:17:60:e5:c9:e7:
                    14:0c:52:36:cc:67:65:0f:ce:aa:ad:19:77:cc:c3:
                    d2:2b:0d:d1:e2:f0:e8:3f:62:72:a8:41:ca:17:96:
                    c9:1a:20:0a:29:37:c1:51:8b:4b:2a:52:a7:3d:a2:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E7:6E:12:1E:0C:B7:78:DB:6E:86:1F:15:66:DF:55:4E:A4:77:02
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232372e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:bc:9a:39:d8:3a:e6:47:ef:48:04:aa:c4:22:f6:da:ac:07:
         19:fb:e5:77:e2:bf:05:dd:30:32:a4:95:4d:e4:50:ec:17:dd:
         49:ba:93:49:dd:fd:12:9d:d3:ca:73:e1:93:ae:80:d8:32:36:
         66:67:cf:3d:c5:ed:76:90:3e:b3:2d:63:f7:94:23:71:5e:07:
         4f:f3:b3:e5:33:54:21:62:99:99:ca:04:24:09:8e:b2:1c:f4:
         53:26:be:d2:89:5d:a4:54:d0:0a:fe:07:a0:ef:87:22:56:2b:
         4e:af:38:72:c6:c1:a5:ed:6a:f4:42:5d:e8:56:01:f1:75:14:
         1f:87:b7:1c:7a:80:d9:27:8d:6d:55:14:69:99:59:53:6d:2b:
         67:91:a4:5f:cf:da:f6:28:2a:ef:98:ed:c5:f1:c3:32:4b:43:
         4f:96:61:e8:70:4f:5d:41:c2:78:3f:a3:de:8e:05:45:a2:2a:
         99:33:fe:ac:9e:98:25:dd:0e:28:f4:41:f4:4f:3c:a4:9d:05:
         83:12:f1:03:29:08:b2:a1:b4:75:00:16:1c:5d:a8:40:f0:43:
         32:2f:f6:2e:49:a3:44:37:85:98:dd:93:58:40:58:e0:d6:f3:
         3c:6f:45:1f:00:d4:60:b7:87:9b:2e:ca:c2:f9:df:c7:fa:23:
         5f:a0:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:52:15 2025 by rpki-client