Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa
File:                     3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          7nv/c/+qKtOFFoc7xnC15Vq0CIaT5YQ/wUlSja8nJbc=
Subject key identifier:   0A:A9:87:41:93:3C:D0:3B:E7:6F:72:E0:C7:CD:73:4B:8F:91:41:60
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       156CD148D1DA631BECE7F218B8EDB8C153CEF0AC
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:16 +0000
ROA not before:           Sat 12 Jul 2025 06:29:16 +0000
ROA not after:            Sat 11 Jul 2026 06:34:16 +0000
asID:                     17139
IP address blocks:        208.103.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 22:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:d1:48:d1:da:63:1b:ec:e7:f2:18:b8:ed:b8:c1:53:ce:f0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:16 2025 GMT
            Not After : Jul 11 06:34:16 2026 GMT
        Subject: CN=0AA98741933CD03BE76F72E0C7CD734B8F914160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:c3:6e:20:86:d0:39:9e:d9:89:87:df:01:
                    5f:43:88:17:c9:d7:fe:19:70:27:98:d4:6a:f4:3a:
                    c2:b8:65:28:79:30:bf:f3:16:d3:8a:c7:7f:2d:92:
                    43:a1:c8:99:ac:83:05:2c:e6:ec:ff:8b:0d:3e:78:
                    4c:7f:4e:d8:a2:44:57:bc:0a:f8:d6:cf:65:fc:3d:
                    21:43:c4:51:91:1a:42:da:6a:e8:f2:4c:fc:4a:6b:
                    9a:83:68:93:d8:0e:ad:3a:52:2c:8e:1f:76:87:1a:
                    7b:c0:c9:da:46:16:d9:18:37:b6:e2:fe:9d:59:85:
                    e3:e3:7c:43:a1:cd:d1:eb:6f:4f:b5:b2:dd:03:0a:
                    d9:8b:51:49:d2:79:01:5e:35:28:95:79:3c:59:b1:
                    fb:22:6f:b0:cd:5b:0e:9a:61:8a:cf:fb:b7:50:2a:
                    7d:15:37:50:77:d7:ca:58:97:22:73:bb:92:f4:75:
                    72:8d:3b:05:28:e6:d8:a4:77:a7:c6:f8:9a:8c:47:
                    d4:10:be:37:48:32:b2:a0:c9:b7:ae:3f:03:39:fa:
                    c6:2d:9a:52:55:e0:46:8b:04:ea:82:50:6c:92:ea:
                    19:d4:ac:77:02:a8:24:bd:c5:6a:14:3d:39:ca:6a:
                    1d:00:59:5a:47:ad:7a:a0:dc:46:45:56:c2:15:3c:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A9:87:41:93:3C:D0:3B:E7:6F:72:E0:C7:CD:73:4B:8F:91:41:60
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d2:57:41:6a:f5:b1:78:f5:b8:34:10:fe:79:7a:7e:e9:d0:
         ed:1e:4b:c3:d4:12:12:83:91:e5:4a:7e:59:c7:67:d8:48:07:
         ad:37:ba:1b:44:36:22:98:9c:3b:54:be:2e:b1:31:8b:e5:c2:
         19:28:5f:e1:5e:a5:b6:15:57:9e:76:ee:e9:fa:24:22:eb:45:
         d4:43:6e:ef:d6:d0:b9:60:f0:03:60:34:f3:33:d0:2a:fa:ae:
         f5:4d:a1:3b:f1:3e:a5:2f:bb:43:04:b2:f7:92:3d:3a:1c:20:
         a1:a2:9e:b3:38:12:81:aa:1a:6b:13:fd:46:b8:aa:6f:86:ea:
         2e:3b:d0:7e:bf:58:c1:35:d8:c2:ad:3a:0b:c7:b3:c1:d6:72:
         26:b3:3c:aa:fd:fc:54:27:c6:55:02:c3:2e:9f:eb:a9:45:46:
         7c:c7:c5:df:0e:45:1f:05:17:5a:ca:4e:88:1d:3a:5c:e5:27:
         35:b0:9b:c3:b7:d6:28:ab:ce:5c:0e:71:f5:4b:02:d9:a5:3f:
         ce:a4:76:55:a8:0f:6e:0f:a5:ad:a6:f6:33:5f:02:e4:38:88:
         10:d9:6f:ed:a4:9c:b6:4f:94:4e:16:8b:73:90:8f:72:43:1a:
         3a:9f:82:5b:de:1c:c4:fe:58:d6:0f:54:a6:c1:58:25:8d:19:
         e7:a4:77:b3
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFWzRSNHaYxvs5/IYuO24wVPO8KwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE2WhcNMjYwNzExMDYzNDE2
WjAzMTEwLwYDVQQDEygwQUE5ODc0MTkzM0NEMDNCRTc2RjcyRTBDN0NENzM0QjhG
OTE0MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOnDbiCG0Dme
2YmH3wFfQ4gXydf+GXAnmNRq9DrCuGUoeTC/8xbTisd/LZJDociZrIMFLObs/4sN
PnhMf07YokRXvAr41s9l/D0hQ8RRkRpC2mro8kz8Smuag2iT2A6tOlIsjh92hxp7
wMnaRhbZGDe24v6dWYXj43xDoc3R629PtbLdAwrZi1FJ0nkBXjUolXk8WbH7Im+w
zVsOmmGKz/u3UCp9FTdQd9fKWJcic7uS9HVyjTsFKObYpHenxviajEfUEL43SDKy
oMm3rj8DOfrGLZpSVeBGiwTqglBskuoZ1Kx3AqgkvcVqFD05ymodAFlaR616oNxG
RVbCFTzc6QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAqph0GTPNA7529y4MfNc0uP
kUFgMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzODJlMzEzMDMzMmUzMTM1MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GeaMA0GCSqGSIb3DQEB
CwUAA4IBAQCA0ldBavWxePW4NBD+eXp+6dDtHkvD1BISg5HlSn5Zx2fYSAetN7ob
RDYimJw7VL4usTGL5cIZKF/hXqW2FVeedu7p+iQi60XUQ27v1tC5YPADYDTzM9Aq
+q71TaE78T6lL7tDBLL3kj06HCChop6zOBKBqhprE/1GuKpvhuouO9B+v1jBNdjC
rToLx7PB1nImszyq/fxUJ8ZVAsMun+upRUZ8x8XfDkUfBRdayk6IHTpc5Sc1sJvD
t9Yoq85cDnH1SwLZpT/OpHZVqA9uD6WtpvYzXwLkOIgQ2W/tpJy2T5ROFotzkI9y
Qxo6n4Jb3hzE/ljWD1SmwVgljRnnpHez
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:46 2025 by rpki-client