Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          K8YEWr+EmQcrg67o1CtzpUmgEs2rPXscAuKdUoyr1Y8=
Subject key identifier:   4D:4A:F8:09:66:06:29:F4:CF:C0:72:DA:44:77:3F:82:7F:3C:01:6E
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       4F9B65B24F7BB359C3E7352CC1207BD0F3F16E4F
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:16 +0000
ROA not before:           Sat 12 Jul 2025 06:29:16 +0000
ROA not after:            Sat 11 Jul 2026 06:34:16 +0000
asID:                     17139
IP address blocks:        205.134.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9b:65:b2:4f:7b:b3:59:c3:e7:35:2c:c1:20:7b:d0:f3:f1:6e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:16 2025 GMT
            Not After : Jul 11 06:34:16 2026 GMT
        Subject: CN=4D4AF809660629F4CFC072DA44773F827F3C016E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:63:9d:61:68:fe:2b:fc:6f:26:50:19:39:31:
                    c1:b7:f0:b1:06:5a:ba:a2:dc:e5:75:53:8b:eb:99:
                    78:91:60:98:57:7f:8f:42:c3:65:bd:c1:47:44:0f:
                    48:42:81:d6:a1:69:56:77:c8:2a:8e:d2:18:24:6d:
                    68:14:17:b6:74:f2:03:ad:d4:09:6b:3b:33:70:2e:
                    c3:b7:29:12:ac:49:fa:3f:4e:cc:ac:8c:11:d5:be:
                    94:89:27:38:bf:96:11:af:2c:41:83:10:1b:d6:48:
                    aa:cf:42:ee:8c:fe:9e:4d:6b:01:4d:6b:c2:3d:c3:
                    e0:94:47:d8:ed:fa:58:a6:85:08:0b:28:26:99:51:
                    12:ba:91:57:7e:9e:8b:5d:3b:2b:4a:18:71:60:d5:
                    da:e0:63:1a:42:3f:3f:13:d1:69:aa:9a:d6:3b:71:
                    a2:c8:30:ef:b5:86:dc:63:0c:59:ae:1b:99:27:d0:
                    f7:40:bf:ac:8d:e5:0f:87:4b:4e:a9:6a:d0:f1:1d:
                    15:ab:9a:cd:31:00:b3:95:f3:5a:eb:76:b2:bb:c2:
                    8a:24:6c:5e:53:49:e0:42:e1:cf:c1:17:3f:58:2b:
                    87:67:d2:bc:8d:e3:e4:5c:08:2d:4e:0b:33:bb:a6:
                    10:48:ad:31:a5:b7:ac:29:53:07:d4:a8:f5:5d:fd:
                    6f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4A:F8:09:66:06:29:F4:CF:C0:72:DA:44:77:3F:82:7F:3C:01:6E
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:7d:09:a8:5c:4a:ea:8e:88:07:d8:63:3d:b0:6d:fc:94:6e:
         ff:65:92:45:3d:10:82:a0:9d:43:a3:4a:e5:f2:f6:e0:0e:4c:
         17:17:69:51:45:fb:89:f4:c2:3e:a1:90:b5:79:88:f5:73:91:
         21:3b:56:b5:e3:91:ad:ab:d6:f0:e1:42:4c:85:24:22:6a:a0:
         01:98:89:ac:bc:13:87:b9:ca:9c:33:47:a3:01:80:4e:9d:ec:
         16:3f:79:77:df:aa:3a:7d:12:37:f5:c6:64:c7:49:72:97:27:
         00:12:e7:ef:93:2f:ca:ba:15:f9:3d:03:df:df:e8:32:21:a5:
         08:7e:f3:a7:95:7b:bc:3d:4f:2b:e9:57:08:ee:f5:4e:69:68:
         43:3c:62:0b:51:6b:57:09:93:59:a8:18:fe:63:d5:ac:9e:52:
         9b:7d:94:72:10:57:a7:f7:dc:a3:9d:a2:7f:8b:fe:62:cc:fb:
         bf:ef:06:e0:39:9b:c2:c5:2e:ba:1d:64:b1:92:5b:4a:99:14:
         88:af:95:4b:e6:cb:7f:3d:76:6d:8d:1e:e6:de:cf:b6:ad:78:
         6f:41:1e:a9:91:6e:e2:51:c7:08:2d:61:81:bf:22:65:1c:36:
         97:88:84:ce:05:c6:2c:8d:f0:a1:3e:fc:9c:ea:ef:7e:44:af:
         ba:87:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:13:48 2025 by rpki-client