Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          s8d/QofF0O2sp4yFkGgyiGHC+A9WuY0pKaqLJcNsyjE=
Subject key identifier:   8F:D7:57:7D:68:06:08:AF:18:66:3A:87:F4:52:11:2D:92:4C:9E:29
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       6F24831F139CF3A2A1A8ADDEC9D932074D316BD3
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     17139
IP address blocks:        205.134.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:24:83:1f:13:9c:f3:a2:a1:a8:ad:de:c9:d9:32:07:4d:31:6b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=8FD7577D680608AF18663A87F452112D924C9E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:d5:64:26:b3:60:ef:7d:d2:88:ec:7d:4c:
                    27:e7:52:07:11:a2:85:39:0a:55:ed:89:ed:37:6b:
                    a1:e4:0a:f5:d2:94:c4:19:d5:29:bb:4b:3c:5f:04:
                    b7:8c:c1:cf:89:76:71:a2:b1:35:d7:62:7a:12:fb:
                    77:16:34:65:0d:e7:41:bc:0a:7e:c5:60:3b:42:2b:
                    76:67:03:af:74:26:70:73:49:16:f6:ff:41:52:19:
                    5f:95:2e:c8:53:ce:cd:6c:74:31:4f:51:c2:ad:4c:
                    d6:eb:d6:c2:c9:fb:cb:db:0d:19:b1:19:f4:1c:53:
                    56:e8:4f:86:fa:cb:87:a2:c0:b5:3e:07:bb:12:13:
                    97:06:23:86:dd:04:a4:ac:0a:4f:eb:30:25:a6:cc:
                    05:b8:00:2a:3c:e8:30:e5:75:8a:f5:1e:cd:c9:c4:
                    90:3c:db:7c:9f:ee:d1:c0:18:fc:5e:86:32:c5:cc:
                    2e:4e:d0:96:91:66:d8:32:c8:e7:d2:b9:0b:15:6d:
                    34:f6:84:90:e9:20:46:9f:ff:fd:7f:a8:a9:60:53:
                    28:fb:c7:c2:2d:b6:df:77:d3:04:b5:df:9d:ae:23:
                    6e:93:f6:cc:ca:68:83:2d:95:1a:f5:0c:9b:05:38:
                    aa:d3:45:13:cb:bf:b3:0f:ad:b5:95:b0:ca:6f:30:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D7:57:7D:68:06:08:AF:18:66:3A:87:F4:52:11:2D:92:4C:9E:29
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:75:51:b3:be:bd:c5:fd:17:70:d9:11:97:d2:40:05:4a:
         64:1b:ef:03:66:a0:10:8c:c3:3a:83:6e:d7:9e:c3:ac:95:e9:
         d4:d8:5a:9d:a8:0c:d8:93:f9:dc:8b:d0:61:36:ac:00:aa:77:
         94:36:61:d4:61:d6:d3:a7:96:34:3a:15:22:28:75:42:c8:02:
         6e:d7:3c:e5:5e:e0:69:a0:50:f6:7a:dd:9e:fa:43:83:49:91:
         fb:65:3d:68:97:c1:30:c3:11:51:bc:4c:fd:a2:11:99:0f:c3:
         94:06:58:82:3a:e4:59:15:4d:32:b0:ba:fd:a5:38:79:63:01:
         48:28:74:45:a7:ce:db:b4:30:85:86:2f:9e:ea:28:9a:1c:aa:
         e1:c0:ce:43:65:21:5b:88:08:30:75:67:2d:fc:a8:57:9d:25:
         5a:e2:59:76:62:63:82:27:cb:3a:ff:c3:32:00:0f:6e:9f:3d:
         b0:26:66:a6:9c:03:67:10:bf:92:1b:18:b7:ff:83:9f:de:9d:
         cd:36:47:82:46:39:90:cc:0a:28:e6:12:a6:32:66:99:01:87:
         41:aa:8b:5c:30:65:87:31:26:88:f1:6d:94:96:02:fd:13:71:
         b1:21:4f:5f:5f:ab:d0:ba:ea:57:e9:9d:51:26:4d:d4:f2:1a:
         64:ae:04:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:02 2025 by rpki-client