Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          6/zgnMTt6/5EocQvKsExsByTkVR7uZsV+heY2h6zibo=
Subject key identifier:   81:3F:B3:F7:DD:4E:BF:E7:C4:C1:E3:12:6E:C9:6F:4C:F2:FA:A9:4B
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       1CDA63E3C611846108BF20D42377F4AF863CCFB2
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     17139
IP address blocks:        173.247.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:da:63:e3:c6:11:84:61:08:bf:20:d4:23:77:f4:af:86:3c:cf:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=813FB3F7DD4EBFE7C4C1E3126EC96F4CF2FAA94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:13:3d:fa:ae:83:a1:d5:dd:69:8c:55:42:
                    62:71:8b:00:ec:95:95:83:62:bf:ae:17:79:16:fc:
                    cb:22:d6:5a:05:89:30:3e:68:53:39:cb:b4:ad:03:
                    3b:f2:e3:dc:c8:ea:e6:e7:f6:39:06:75:a4:a3:f3:
                    35:6f:47:e4:72:55:da:4f:a3:f8:6d:dd:8e:a9:88:
                    90:37:ec:d4:ef:bb:d6:ad:23:21:f1:e7:16:09:14:
                    4a:db:29:bb:da:e9:bf:49:b7:d7:a7:8d:80:2b:73:
                    a7:c8:1d:c3:83:ca:48:9e:35:26:46:b6:7b:e0:f8:
                    13:34:d8:5f:16:c2:d8:b9:dc:db:17:6c:f4:5a:62:
                    8b:45:3c:3f:7c:e2:b6:6d:16:1a:99:fb:7f:66:25:
                    6a:a4:fe:91:17:72:6e:bf:be:8e:ea:53:a8:7b:26:
                    f2:02:2f:dc:da:fa:b7:d4:36:59:f7:ae:d2:76:d5:
                    c4:a9:6c:7a:34:73:c4:62:a0:72:eb:b2:0c:0c:ab:
                    8e:76:16:d7:e4:e2:26:96:c4:d2:50:73:b4:19:58:
                    06:93:22:89:6d:22:ac:24:56:ca:bb:fc:9b:41:ac:
                    b0:38:3c:87:f4:38:ad:79:42:39:c0:87:79:56:3f:
                    d2:f6:e8:f6:73:4c:70:b5:97:06:52:f9:e7:a4:d9:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3F:B3:F7:DD:4E:BF:E7:C4:C1:E3:12:6E:C9:6F:4C:F2:FA:A9:4B
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:d7:2f:53:bd:b9:ae:37:ad:03:83:74:d5:6e:9f:b9:0e:f3:
         21:8f:f7:3b:6d:ad:1f:dd:ba:39:91:a4:34:5c:2f:92:e6:0c:
         09:3b:7d:8e:36:81:b4:0c:8e:a4:f7:68:d4:f6:2e:26:0d:57:
         d0:f2:5f:c6:41:d7:14:ed:2d:c5:b1:48:1e:59:e4:92:15:ad:
         28:14:2c:0e:49:9e:96:f2:79:af:a9:cc:3c:79:78:99:aa:6b:
         8b:52:e7:c3:79:3e:a9:71:79:36:eb:f4:57:34:cc:2c:72:a5:
         19:7c:8f:d4:23:89:49:1e:4e:2a:88:c2:ce:eb:1c:2c:ef:80:
         f7:3b:ed:5e:30:3d:64:c4:33:68:89:35:f3:11:c4:4a:d4:83:
         23:ba:28:d7:b8:5a:40:cd:b0:3f:db:81:52:03:c3:a8:a8:94:
         a5:27:fa:38:40:7f:ef:bc:23:e6:a6:74:6e:cb:e7:89:56:2a:
         51:2f:7d:b1:0d:ff:b6:4b:15:36:8f:64:3d:98:e0:48:99:fe:
         4a:d0:d1:16:b6:bd:4b:02:a5:1e:21:1a:c2:45:62:1a:5c:19:
         55:6a:d2:51:a6:06:26:af:82:df:48:98:2a:76:0c:80:cf:59:
         c3:94:e1:52:9a:ee:44:4c:d3:83:9f:ce:d9:bc:e4:a8:2b:1a:
         97:ad:e2:f9
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUHNpj48YRhGEIvyDUI3f0r4Y8z7IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE1WhcNMjYwNzExMDYzNDE1
WjAzMTEwLwYDVQQDEyg4MTNGQjNGN0RENEVCRkU3QzRDMUUzMTI2RUM5NkY0Q0Yy
RkFBOTRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYUTPfqug6HV
3WmMVUJicYsA7JWVg2K/rhd5FvzLItZaBYkwPmhTOcu0rQM78uPcyOrm5/Y5BnWk
o/M1b0fkclXaT6P4bd2OqYiQN+zU77vWrSMh8ecWCRRK2ym72um/SbfXp42AK3On
yB3Dg8pInjUmRrZ74PgTNNhfFsLYudzbF2z0WmKLRTw/fOK2bRYamft/ZiVqpP6R
F3Juv76O6lOoeybyAi/c2vq31DZZ967SdtXEqWx6NHPEYqBy67IMDKuOdhbX5OIm
lsTSUHO0GVgGkyKJbSKsJFbKu/ybQaywODyH9DiteUI5wId5Vj/S9uj2c0xwtZcG
UvnnpNntOQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIE/s/fdTr/nxMHjEm7Jb0zy
+qlLMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffsMA0GCSqGSIb3DQEB
CwUAA4IBAQBB1y9TvbmuN60Dg3TVbp+5DvMhj/c7ba0f3bo5kaQ0XC+S5gwJO32O
NoG0DI6k92jU9i4mDVfQ8l/GQdcU7S3FsUgeWeSSFa0oFCwOSZ6W8nmvqcw8eXiZ
qmuLUufDeT6pcXk26/RXNMwscqUZfI/UI4lJHk4qiMLO6xws74D3O+1eMD1kxDNo
iTXzEcRK1IMjuijXuFpAzbA/24FSA8OoqJSlJ/o4QH/vvCPmpnRuy+eJVipRL32x
Df+2SxU2j2Q9mOBImf5K0NEWtr1LAqUeIRrCRWIaXBlVatJRpgYmr4LfSJgqdgyA
z1nDlOFSmu5ETNODn87ZvOSoKxqXreL5
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:27:33 2025 by rpki-client