Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          NtNdeJNchxWW5E1/JHFXZeVTAnyHJZybNEnngqkax5w=
Subject key identifier:   37:01:BC:7C:AE:5D:74:D5:EA:DC:37:6D:C3:88:4C:42:86:24:BA:50
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       3B540F202ED5762CA3EE7D6317275102E526DF79
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:16 +0000
ROA not before:           Sat 12 Jul 2025 06:29:16 +0000
ROA not after:            Sat 11 Jul 2026 06:34:16 +0000
asID:                     17139
IP address blocks:        205.134.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:54:0f:20:2e:d5:76:2c:a3:ee:7d:63:17:27:51:02:e5:26:df:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:16 2025 GMT
            Not After : Jul 11 06:34:16 2026 GMT
        Subject: CN=3701BC7CAE5D74D5EADC376DC3884C428624BA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:b7:a7:50:fe:57:21:e4:86:4e:6b:a5:a1:
                    f3:ca:a7:f9:74:f8:d8:e0:81:2e:bb:cf:c1:91:9e:
                    d1:08:8b:ea:ad:3c:aa:7a:31:12:84:4b:b1:eb:35:
                    a4:0d:b4:c2:7e:cf:16:eb:9f:b3:43:9e:16:6d:8f:
                    72:fd:e7:55:56:3f:69:50:1b:39:15:c1:96:12:64:
                    28:e4:b3:c4:1f:3a:45:02:e4:0c:f2:f4:ee:f7:df:
                    20:77:f3:b0:cb:54:4d:73:ae:46:d7:d0:96:0c:e8:
                    56:3b:4c:8e:8b:51:f8:0d:1a:59:63:fd:48:2b:e5:
                    66:37:51:f6:05:6e:22:87:f9:9e:de:ff:b3:65:77:
                    5e:9e:06:fe:9a:a0:3e:2f:47:d9:4a:b3:fb:9e:0d:
                    87:4d:50:48:3c:0b:16:53:b0:4d:0b:27:30:b5:47:
                    ff:e4:22:66:29:99:5b:10:3a:91:92:1f:fc:bb:a1:
                    9b:aa:b0:a3:7a:3d:61:db:88:bc:bb:da:f5:26:b8:
                    57:f9:c5:4e:8a:3c:0d:ed:04:4e:a2:95:bb:ad:80:
                    d4:2b:86:b6:e6:af:6f:05:96:9c:1c:b0:8f:62:5e:
                    32:dd:2d:bd:ee:e6:05:92:b3:4e:f9:20:c7:2f:81:
                    f7:2d:12:bb:b5:e6:0f:47:6a:90:b4:d5:a6:56:e8:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:01:BC:7C:AE:5D:74:D5:EA:DC:37:6D:C3:88:4C:42:86:24:BA:50
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9f:45:73:ab:f8:d9:f8:c7:d7:a4:ad:e2:ff:25:08:15:7a:
         51:96:95:17:e3:0f:f4:b1:d8:64:53:9d:8e:60:36:60:f5:4a:
         38:80:64:6f:19:9c:38:bc:c9:49:c0:f3:bf:ec:c5:9e:34:96:
         f9:f1:ab:b0:06:b0:a3:77:9c:47:1c:05:0c:e0:f1:ee:b4:58:
         37:a8:30:38:78:7f:7d:ba:ce:8f:36:67:f3:15:f8:ee:30:49:
         37:93:a0:db:be:7b:79:28:2c:da:4b:47:cc:b5:c3:2d:35:df:
         aa:57:3e:fb:2e:7d:df:c4:bf:0f:df:f6:9f:58:c2:86:bc:c3:
         2c:a8:33:e5:c8:36:5d:3c:c4:15:0d:2e:1a:7d:93:96:c8:6c:
         82:63:ce:44:ba:c2:14:5c:a0:e8:48:6a:9e:2f:0c:20:3d:1c:
         ea:cb:6e:f2:cc:6e:28:56:f9:16:e3:95:03:63:f7:2c:1e:bf:
         87:0c:45:52:06:ab:72:0c:07:81:68:0c:33:3a:48:95:e0:a4:
         f3:81:50:0b:ed:47:a6:b2:2d:b5:a7:c7:c1:f0:39:d5:65:e9:
         24:2e:20:22:f1:aa:0f:43:eb:4d:b0:80:87:e9:30:bc:5b:f8:
         83:73:14:9b:f3:22:b4:51:11:f3:a6:84:b5:46:02:bd:ca:1b:
         2e:6c:c3:30
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUO1QPIC7Vdiyj7n1jFydRAuUm33kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE2WhcNMjYwNzExMDYzNDE2
WjAzMTEwLwYDVQQDEygzNzAxQkM3Q0FFNUQ3NEQ1RUFEQzM3NkRDMzg4NEM0Mjg2
MjRCQTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxui3p1D+VyHk
hk5rpaHzyqf5dPjY4IEuu8/BkZ7RCIvqrTyqejEShEux6zWkDbTCfs8W65+zQ54W
bY9y/edVVj9pUBs5FcGWEmQo5LPEHzpFAuQM8vTu998gd/Owy1RNc65G19CWDOhW
O0yOi1H4DRpZY/1IK+VmN1H2BW4ih/me3v+zZXdengb+mqA+L0fZSrP7ng2HTVBI
PAsWU7BNCycwtUf/5CJmKZlbEDqRkh/8u6GbqrCjej1h24i8u9r1JrhX+cVOijwN
7QROopW7rYDUK4a25q9vBZacHLCPYl4y3S297uYFkrNO+SDHL4H3LRK7teYPR2qQ
tNWmVuiywwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDcBvHyuXXTV6tw3bcOITEKG
JLpQMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzNTJlMzEzMzM0MmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYbkMA0GCSqGSIb3DQEB
CwUAA4IBAQCan0Vzq/jZ+MfXpK3i/yUIFXpRlpUX4w/0sdhkU52OYDZg9Uo4gGRv
GZw4vMlJwPO/7MWeNJb58auwBrCjd5xHHAUM4PHutFg3qDA4eH99us6PNmfzFfju
MEk3k6Dbvnt5KCzaS0fMtcMtNd+qVz77Ln3fxL8P3/afWMKGvMMsqDPlyDZdPMQV
DS4afZOWyGyCY85EusIUXKDoSGqeLwwgPRzqy27yzG4oVvkW45UDY/csHr+HDEVS
BqtyDAeBaAwzOkiV4KTzgVAL7Uemsi21p8fB8DnVZekkLiAi8aoPQ+tNsICH6TC8
W/iDcxSb8yK0URHzpoS1RgK9yhsubMMw
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:28 2025 by rpki-client