Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          K786rMg+EGEn7Kfbkps8t/u4IUxYKbePdAbYB3ZGbJA=
Subject key identifier:   15:38:CD:45:A5:EE:55:A6:11:5D:D5:3D:29:80:AE:54:BB:A5:7B:95
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       5238845BF2C8404F6AE7951D27689FB58424B3B3
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     17139
IP address blocks:        173.247.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:38:84:5b:f2:c8:40:4f:6a:e7:95:1d:27:68:9f:b5:84:24:b3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=1538CD45A5EE55A6115DD53D2980AE54BBA57B95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:f0:1f:fb:49:d0:9b:39:40:d7:13:cd:a3:
                    8c:06:5f:65:11:ec:ed:3d:7f:56:f5:fe:76:7f:0e:
                    c2:b8:c5:5b:b8:44:b0:19:45:70:cf:f0:5c:71:67:
                    4f:39:21:fe:e3:3a:d3:1a:36:c0:5e:51:9e:fd:17:
                    d9:25:5c:54:0d:7b:d0:e8:a4:2d:a4:6b:93:de:55:
                    69:cc:8d:03:1b:bb:43:49:5b:22:e9:a3:9e:da:c5:
                    ae:ab:cf:04:a3:f2:b2:c4:1a:0c:33:77:f9:a6:d2:
                    9b:21:58:0b:2d:49:df:fe:5f:74:3a:b6:31:b8:3c:
                    ea:e4:4e:16:49:f6:9b:82:02:5a:d3:e4:13:71:2c:
                    28:11:3e:af:d1:3d:d6:c9:ac:23:e6:91:f0:b0:e6:
                    52:4a:fe:e4:ff:8f:74:35:41:38:e0:f2:94:0c:f5:
                    95:b8:57:61:5a:7f:e9:34:60:ef:0d:71:f4:89:28:
                    64:3c:6a:fe:51:3c:27:19:75:fe:df:20:04:5a:c3:
                    ca:f0:60:c3:50:fe:92:b6:d5:32:e1:98:96:8e:d6:
                    d9:af:3a:2e:ef:29:3f:9b:cc:ea:cb:13:e8:77:5b:
                    7b:ce:ef:1c:5d:3f:07:ab:f6:95:fc:e1:02:1e:29:
                    88:d1:f8:dd:0b:4c:ea:3f:d6:25:af:f4:b4:87:1f:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:38:CD:45:A5:EE:55:A6:11:5D:D5:3D:29:80:AE:54:BB:A5:7B:95
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e3:87:e6:f8:38:5e:50:33:c9:e9:6e:12:e7:a3:0b:1b:a2:
         23:a0:43:36:ec:6a:8b:a2:48:ef:48:3f:a6:10:78:f4:b5:75:
         43:74:63:34:ac:a0:6e:0f:82:f8:c6:ce:09:d6:54:b7:88:50:
         66:fe:4d:93:24:e9:b1:c6:c4:e2:55:fb:a2:4d:db:d6:29:80:
         e1:43:1d:b6:d7:9d:e5:7c:83:6b:6f:fb:d2:27:d3:b1:3d:0d:
         7e:01:93:46:cc:16:3b:93:bc:bb:b8:4a:55:c4:9d:ce:88:75:
         85:a8:08:16:f5:a2:ed:02:4e:a3:3b:01:17:98:c1:9b:50:f4:
         0e:65:03:59:58:e6:11:57:7d:02:03:de:fb:db:83:af:aa:35:
         1c:47:4a:bb:dc:69:e6:e0:63:df:0b:e7:9c:35:62:fe:4d:bc:
         4b:98:1d:ce:5f:2c:0c:08:9b:5f:b0:7f:53:13:42:1d:c4:19:
         14:a6:ff:93:be:c2:b3:af:3f:75:a9:df:a9:9a:b3:7b:cb:b2:
         ef:4f:42:c3:57:1f:11:cd:c5:8a:3d:02:89:95:8e:cf:5b:27:
         38:50:4a:ad:5b:8c:e6:a8:47:cd:cb:1a:8c:4a:ac:99:44:67:
         c1:f7:5f:65:68:a7:8e:f6:ae:a3:31:c9:74:e3:5b:be:59:d7:
         07:56:d0:e5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUjiEW/LIQE9q55UdJ2iftYQks7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE0WhcNMjYwNzExMDYzNDE0
WjAzMTEwLwYDVQQDEygxNTM4Q0Q0NUE1RUU1NUE2MTE1REQ1M0QyOTgwQUU1NEJC
QTU3Qjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uPwH/tJ0Js5
QNcTzaOMBl9lEeztPX9W9f52fw7CuMVbuESwGUVwz/BccWdPOSH+4zrTGjbAXlGe
/RfZJVxUDXvQ6KQtpGuT3lVpzI0DG7tDSVsi6aOe2sWuq88Eo/KyxBoMM3f5ptKb
IVgLLUnf/l90OrYxuDzq5E4WSfabggJa0+QTcSwoET6v0T3Wyawj5pHwsOZSSv7k
/490NUE44PKUDPWVuFdhWn/pNGDvDXH0iShkPGr+UTwnGXX+3yAEWsPK8GDDUP6S
ttUy4ZiWjtbZrzou7yk/m8zqyxPod1t7zu8cXT8Hq/aV/OECHimI0fjdC0zqP9Yl
r/S0hx/v5QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBU4zUWl7lWmEV3VPSmArlS7
pXuVMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfftMA0GCSqGSIb3DQEB
CwUAA4IBAQCC44fm+DheUDPJ6W4S56MLG6IjoEM27GqLokjvSD+mEHj0tXVDdGM0
rKBuD4L4xs4J1lS3iFBm/k2TJOmxxsTiVfuiTdvWKYDhQx22153lfINrb/vSJ9Ox
PQ1+AZNGzBY7k7y7uEpVxJ3OiHWFqAgW9aLtAk6jOwEXmMGbUPQOZQNZWOYRV30C
A97724OvqjUcR0q73Gnm4GPfC+ecNWL+TbxLmB3OXywMCJtfsH9TE0IdxBkUpv+T
vsKzrz91qd+pmrN7y7LvT0LDVx8RzcWKPQKJlY7PWyc4UEqtW4zmqEfNyxqMSqyZ
RGfB919laKeO9q6jMcl041u+WdcHVtDl
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:47 2025 by rpki-client