Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          9tDWbQRAxvcEPUqQkl+MxGHx/bPul5hcAVPdyaWkY1w=
Subject key identifier:   65:B8:4A:DB:22:BB:79:3F:2F:C7:89:16:3F:3F:D2:29:FC:FC:E1:8B
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       55639FD6FEE26F7E34E2A04356923A7469BE1351
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        173.247.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:63:9f:d6:fe:e2:6f:7e:34:e2:a0:43:56:92:3a:74:69:be:13:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=65B84ADB22BB793F2FC789163F3FD229FCFCE18B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:c7:81:3a:a1:44:bd:ea:71:3a:2a:c5:cf:
                    b2:1c:04:39:2f:28:12:03:6e:63:51:6b:8b:17:47:
                    07:17:5f:e8:66:18:cd:a1:0d:9e:11:5e:77:db:ce:
                    e5:2a:77:58:a3:0c:28:31:ed:b4:34:fa:9a:53:ed:
                    66:b6:96:2e:3b:f5:45:39:49:d6:f5:76:22:a4:2f:
                    ac:19:18:51:bc:36:a9:99:80:35:67:89:34:e1:43:
                    07:57:d8:a3:a9:44:ae:e4:d8:86:f4:3f:90:e3:e5:
                    9a:72:73:26:93:79:59:4e:53:c1:58:0c:63:7d:0d:
                    d8:c3:f1:42:01:00:df:9f:bd:60:8e:40:25:b4:9b:
                    22:03:4b:e5:f5:f1:a6:bc:c8:1d:1a:3a:7c:b4:52:
                    7b:38:4d:2e:dc:1b:2c:a8:d9:b1:13:8f:bc:e4:80:
                    80:f3:be:09:95:44:1b:68:15:2c:47:56:78:04:66:
                    b8:f4:3f:60:c4:67:05:d3:4e:bd:a1:a6:e7:88:1f:
                    0f:ff:8a:cc:c6:ae:4f:35:d6:39:56:5e:f5:0f:c1:
                    88:13:3c:a5:e0:b3:d8:b1:23:65:3e:26:22:19:3d:
                    df:10:89:9a:8f:6a:29:76:36:81:9a:46:20:a3:22:
                    33:19:ce:ce:d4:f8:fd:da:9c:3d:22:2d:9d:fa:84:
                    3b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B8:4A:DB:22:BB:79:3F:2F:C7:89:16:3F:3F:D2:29:FC:FC:E1:8B
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:7f:1c:84:08:a1:c1:0a:27:84:a9:f4:73:2f:3a:d1:f7:d3:
         34:35:b5:69:26:59:ec:13:a4:13:0d:d9:65:67:6b:77:46:4a:
         c0:5d:1c:c3:23:12:65:c9:50:83:ed:37:5b:b9:b3:6b:55:fa:
         8b:bc:72:8e:81:01:42:12:f4:a9:1d:50:2f:aa:d0:6e:1a:79:
         5c:dd:93:6d:73:c9:e0:6d:c4:4d:89:a6:38:4d:19:35:73:df:
         2a:82:34:3c:13:12:e4:a0:74:90:0f:c6:ff:e5:ef:15:a2:88:
         7e:d5:74:e3:62:52:b4:8e:72:17:03:bc:bb:2c:f6:b7:a1:90:
         0e:1d:a9:cc:2a:88:80:7a:a4:53:6e:cd:73:29:e9:7d:dd:9b:
         46:60:0b:ac:f1:d9:94:09:90:34:bd:a3:f8:83:ce:cb:24:cb:
         b1:47:76:94:ea:76:e7:56:95:d3:e4:29:d3:d8:de:a9:41:76:
         dd:75:c6:02:7f:41:36:81:54:68:3a:6b:33:20:15:c9:dc:c5:
         d9:0e:e6:f4:40:26:e1:86:47:f5:cc:9f:94:59:22:77:be:58:
         99:c9:8b:a0:1f:a7:99:23:fb:21:ca:6e:f8:4e:6f:53:99:0b:
         a9:48:6d:61:b0:74:c5:f2:3e:bf:8c:cf:61:4e:94:79:43:66:
         6e:e2:ed:37
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUVWOf1v7ib3404qBDVpI6dGm+E1EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNDI0MTEzNTEzWhcNMjYwNDIzMTE0MDEz
WjAzMTEwLwYDVQQDEyg2NUI4NEFEQjIyQkI3OTNGMkZDNzg5MTYzRjNGRDIyOUZD
RkNFMThCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzazHgTqhRL3q
cToqxc+yHAQ5LygSA25jUWuLF0cHF1/oZhjNoQ2eEV53287lKndYowwoMe20NPqa
U+1mtpYuO/VFOUnW9XYipC+sGRhRvDapmYA1Z4k04UMHV9ijqUSu5NiG9D+Q4+Wa
cnMmk3lZTlPBWAxjfQ3Yw/FCAQDfn71gjkAltJsiA0vl9fGmvMgdGjp8tFJ7OE0u
3BssqNmxE4+85ICA874JlUQbaBUsR1Z4BGa49D9gxGcF0069oabniB8P/4rMxq5P
NdY5Vl71D8GIEzyl4LPYsSNlPiYiGT3fEImaj2opdjaBmkYgoyIzGc7O1Pj92pw9
Ii2d+oQ7/QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGW4Stsiu3k/L8eJFj8/0in8
/OGLMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffoMA0GCSqGSIb3DQEB
CwUAA4IBAQB1fxyECKHBCieEqfRzLzrR99M0NbVpJlnsE6QTDdllZ2t3RkrAXRzD
IxJlyVCD7TdbubNrVfqLvHKOgQFCEvSpHVAvqtBuGnlc3ZNtc8ngbcRNiaY4TRk1
c98qgjQ8ExLkoHSQD8b/5e8Vooh+1XTjYlK0jnIXA7y7LPa3oZAOHanMKoiAeqRT
bs1zKel93ZtGYAus8dmUCZA0vaP4g87LJMuxR3aU6nbnVpXT5CnT2N6pQXbddcYC
f0E2gVRoOmszIBXJ3MXZDub0QCbhhkf1zJ+UWSJ3vliZyYugH6eZI/shym74Tm9T
mQupSG1hsHTF8j6/jM9hTpR5Q2Zu4u03
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:03:44 2025 by rpki-client