Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          SP53zC2vBjNW9KCqk46625yJKRLzONcCpDAcURc+biA=
Subject key identifier:   C9:CF:05:DF:CE:CC:CB:F9:C8:DA:C8:E5:FE:2E:8F:CC:84:08:08:4E
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       2459D29A7C00E80B4EA0FBF90670361766B249BA
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:16 +0000
ROA not before:           Sat 12 Jul 2025 06:29:16 +0000
ROA not after:            Sat 11 Jul 2026 06:34:16 +0000
asID:                     17139
IP address blocks:        173.247.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:59:d2:9a:7c:00:e8:0b:4e:a0:fb:f9:06:70:36:17:66:b2:49:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:16 2025 GMT
            Not After : Jul 11 06:34:16 2026 GMT
        Subject: CN=C9CF05DFCECCCBF9C8DAC8E5FE2E8FCC8408084E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:55:31:21:4f:09:f3:33:de:24:47:ca:d2:34:
                    2c:51:ff:30:94:21:58:5a:6e:96:20:7f:70:fc:91:
                    39:de:7e:b5:9b:ca:9d:ba:04:d0:77:24:c9:25:a8:
                    b2:07:9b:99:c6:88:6b:05:64:28:86:d6:da:ce:79:
                    38:1d:fb:74:cf:26:2a:72:0f:69:bb:2f:6c:7c:19:
                    31:45:07:fd:45:0e:b2:7b:49:fb:eb:ce:cb:45:42:
                    59:a1:67:0d:47:c4:e6:be:b2:60:78:9d:ab:ac:b6:
                    ca:fb:8f:65:8b:c8:20:35:63:d4:98:db:4e:c4:e0:
                    b1:ee:bc:b4:50:ff:a7:b5:57:4b:6a:54:2f:dd:09:
                    7f:2c:bd:e4:f7:5d:f4:97:75:45:05:91:6e:30:bf:
                    95:89:b1:8e:2a:ea:28:5b:94:f8:8f:c5:a0:98:ee:
                    47:49:30:22:ef:e8:e4:60:2b:88:33:55:9a:1d:d7:
                    05:52:a2:8c:31:6d:2d:8f:37:be:e5:dd:87:ea:b2:
                    d7:a9:7b:ee:87:8f:f5:ad:0b:76:b3:97:c2:7d:f5:
                    22:f9:d2:88:9f:7f:5f:16:97:9f:53:42:fa:98:73:
                    bf:89:91:cc:bc:18:9a:5d:9f:d9:23:34:c0:32:16:
                    4f:ac:8a:48:6c:1a:ac:ed:32:20:b3:c0:c1:47:86:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CF:05:DF:CE:CC:CB:F9:C8:DA:C8:E5:FE:2E:8F:CC:84:08:08:4E
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:52:7a:24:55:0c:eb:58:d5:fb:6b:2a:88:cd:ea:6e:78:d5:
         26:e5:cb:cc:9f:cf:a3:21:16:1c:72:27:0f:97:e1:47:4e:8e:
         02:3d:9e:08:cb:26:10:da:7d:4a:e7:29:fc:57:ab:d8:9a:80:
         09:ae:c7:ec:d3:ee:a0:1e:ef:81:09:01:06:74:82:89:ed:d2:
         aa:3b:e1:47:9c:4b:30:9f:fc:46:14:be:e4:13:ff:b4:b5:b9:
         3b:98:9a:43:5c:08:57:10:ac:e4:8d:17:6c:cf:06:3f:64:55:
         e0:2a:f3:2d:38:15:4d:b1:2a:06:07:54:fd:c3:a5:d4:ad:7e:
         01:7c:79:48:90:42:0c:c9:70:f0:6b:ec:d5:27:e3:8e:86:bd:
         f1:01:7f:ee:42:b3:dc:16:f6:01:17:c1:8f:95:4e:e0:30:e1:
         45:0c:eb:e6:28:85:f1:77:5c:22:04:7d:96:5b:87:a3:0d:d8:
         52:92:0b:86:96:3c:4b:1d:7a:ad:d1:60:af:d5:b8:0a:d0:4d:
         1a:e3:b9:72:5c:bd:35:fa:ec:07:0f:4b:bb:42:6b:76:50:df:
         b5:b4:c5:a5:ca:ad:1a:23:6c:69:a4:db:fa:ce:f6:f1:b5:20:
         90:16:d8:6b:65:eb:bf:c0:cf:df:82:e5:66:de:b3:74:5d:2f:
         d2:76:2a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:57 2025 by rpki-client