Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          mbkvB/MPqjMoFTnOEBdycEm0XzvD9KyCTZ/u9XTvQ/k=
Subject key identifier:   DD:57:52:C6:52:88:97:5D:BD:47:16:5F:FD:C1:87:6B:0A:C7:5C:6F
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       52F1156A5590C01049AD4C25CFB75BFE2C086888
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        173.247.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f1:15:6a:55:90:c0:10:49:ad:4c:25:cf:b7:5b:fe:2c:08:68:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=DD5752C65288975DBD47165FFDC1876B0AC75C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:bf:46:ee:ce:46:29:2b:85:96:29:3c:3a:
                    ca:49:7f:f7:9d:97:aa:a1:be:09:39:1f:65:8f:12:
                    08:33:e8:34:68:b0:cc:e9:8a:30:17:d3:54:e8:1d:
                    1e:77:0b:8a:57:9f:2c:fd:50:21:fa:a0:83:ce:85:
                    63:41:0c:75:a0:c0:ff:b0:e6:c4:d4:15:81:2e:c2:
                    8a:ed:18:32:b6:43:0b:fc:82:f4:b7:42:03:48:91:
                    d9:1f:a4:41:e4:01:04:85:75:5a:39:7c:9e:93:8b:
                    f4:d9:43:c6:b1:58:64:cc:83:f4:64:a0:92:93:98:
                    d4:ae:3e:5a:c3:76:33:e0:84:9e:04:8c:26:e1:16:
                    73:03:33:0d:f5:53:e2:df:84:8a:27:01:c9:cf:0c:
                    f7:bc:e7:8d:86:15:e1:4c:89:4a:d3:e9:1a:6f:71:
                    c1:70:0c:32:1a:8d:e3:56:d1:c6:a0:3c:50:93:8e:
                    1f:62:22:7d:af:e6:22:f1:15:d7:05:b5:eb:63:00:
                    cc:35:5d:ee:65:e8:c3:a0:5b:c1:31:d1:ac:72:04:
                    ef:4c:27:8d:aa:c9:57:ed:bc:b7:3b:b3:f1:fc:5a:
                    cd:38:36:d1:26:7a:f0:79:66:b5:50:9d:d5:85:64:
                    54:0f:f1:9e:a3:d3:ec:59:aa:f1:bd:7a:e3:c0:f3:
                    fa:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:52:C6:52:88:97:5D:BD:47:16:5F:FD:C1:87:6B:0A:C7:5C:6F
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:ba:b0:9e:b4:2d:16:00:49:4d:e1:1f:7e:51:65:15:e4:a2:
         ed:fd:05:36:ab:b3:95:0b:12:ea:94:20:d2:53:53:c9:05:9f:
         c2:a2:dc:1d:1c:2a:82:5f:d4:e7:91:13:4f:3e:be:69:15:c4:
         10:65:6c:c5:5f:ad:5c:29:39:dc:f7:98:71:70:10:a7:17:4f:
         65:a5:65:4e:9b:4f:5f:ba:c1:bc:ae:a0:66:66:ef:37:fe:a3:
         6b:2b:61:b1:47:56:76:65:03:bb:82:b0:c9:6b:20:17:51:7b:
         6e:f8:d0:82:b1:1f:7a:a2:73:7a:ca:52:01:e8:42:65:6f:67:
         e4:bf:ae:5c:c9:f7:a5:1f:11:b5:2f:42:61:77:f5:71:f9:70:
         55:d9:76:29:94:dc:6d:2c:23:fb:0f:51:75:9a:d4:1a:61:e9:
         e7:67:47:79:df:65:77:0a:f9:ee:f9:ab:3c:78:5e:5d:82:1d:
         44:41:03:1b:96:04:eb:06:9a:79:04:4f:7d:a3:e7:eb:82:b3:
         8b:88:8e:f4:07:56:c5:1f:2d:83:0c:d0:88:7e:fe:d2:56:8d:
         10:a2:b5:87:f8:38:7f:b6:ce:42:6d:c4:90:72:18:fd:12:a9:
         7b:07:1f:cd:81:71:e4:4f:ac:5c:57:9b:4c:23:72:cd:0c:5c:
         88:54:ca:52
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUvEValWQwBBJrUwlz7db/iwIaIgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNDI0MTEzNTEzWhcNMjYwNDIzMTE0MDEz
WjAzMTEwLwYDVQQDEyhERDU3NTJDNjUyODg5NzVEQkQ0NzE2NUZGREMxODc2QjBB
Qzc1QzZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhu/Ru7ORikr
hZYpPDrKSX/3nZeqob4JOR9ljxIIM+g0aLDM6YowF9NU6B0edwuKV58s/VAh+qCD
zoVjQQx1oMD/sObE1BWBLsKK7RgytkML/IL0t0IDSJHZH6RB5AEEhXVaOXyek4v0
2UPGsVhkzIP0ZKCSk5jUrj5aw3Yz4ISeBIwm4RZzAzMN9VPi34SKJwHJzwz3vOeN
hhXhTIlK0+kab3HBcAwyGo3jVtHGoDxQk44fYiJ9r+Yi8RXXBbXrYwDMNV3uZejD
oFvBMdGscgTvTCeNqslX7by3O7Px/FrNODbRJnrweWa1UJ3VhWRUD/Geo9PsWarx
vXrjwPP6FQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFN1XUsZSiJddvUcWX/3Bh2sK
x1xvMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffkMA0GCSqGSIb3DQEB
CwUAA4IBAQApurCetC0WAElN4R9+UWUV5KLt/QU2q7OVCxLqlCDSU1PJBZ/Cotwd
HCqCX9TnkRNPPr5pFcQQZWzFX61cKTnc95hxcBCnF09lpWVOm09fusG8rqBmZu83
/qNrK2GxR1Z2ZQO7grDJayAXUXtu+NCCsR96onN6ylIB6EJlb2fkv65cyfelHxG1
L0Jhd/Vx+XBV2XYplNxtLCP7D1F1mtQaYennZ0d532V3Cvnu+as8eF5dgh1EQQMb
lgTrBpp5BE99o+frgrOLiI70B1bFHy2DDNCIfv7SVo0QorWH+Dh/ts5CbcSQchj9
Eql7Bx/NgXHkT6xcV5tMI3LNDFyIVMpS
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:09:55 2025 by rpki-client