Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa
File:                     3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          AQ4gLLgfWDzQBWWxCGxVnZovFlXgi8zUgwm/jN/oz2Y=
Subject key identifier:   DA:6C:45:6E:35:91:A3:39:23:91:45:36:91:CC:80:70:71:FE:CB:C1
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       36907692A2489EB2265ECE325144AF287D06668B
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        208.103.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 03:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:90:76:92:a2:48:9e:b2:26:5e:ce:32:51:44:af:28:7d:06:66:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=DA6C456E3591A3392391453691CC807071FECBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:38:48:2a:fd:aa:45:30:6f:f1:f8:24:9f:
                    39:ca:73:b1:dc:c0:21:0e:d4:dc:bc:51:b9:d3:44:
                    c6:cf:6f:aa:1e:c7:6c:98:bc:33:df:00:76:6f:11:
                    99:cc:92:89:0a:fa:e8:05:2c:72:16:9e:14:33:fa:
                    b9:bc:ba:bd:07:96:0f:70:1f:9a:71:9d:51:20:27:
                    f4:ef:af:36:78:8f:00:8c:c1:1a:e1:8a:6a:6b:1a:
                    6a:73:e5:05:c7:9c:a2:8b:0c:31:46:ee:09:98:78:
                    2a:bb:85:82:b7:e2:16:69:13:aa:bd:4a:1e:66:ed:
                    55:4c:b2:e0:12:6c:c4:70:7c:2f:eb:92:bd:ef:44:
                    81:4a:02:eb:3e:fb:54:63:80:a9:b8:eb:47:56:bb:
                    3a:89:82:ea:71:3f:c1:5a:1a:6c:70:2f:2c:61:8a:
                    ea:ca:d6:36:bf:37:27:0a:e6:17:a9:d2:21:a3:a6:
                    89:2c:82:4b:ae:fa:ec:32:63:a6:54:6d:18:13:ea:
                    d8:26:3f:93:23:e0:cd:18:57:24:e0:bd:dc:8b:f9:
                    f8:83:09:e7:93:a3:99:79:6c:31:2a:99:b1:08:17:
                    79:9b:62:bc:85:ad:99:33:1e:ea:85:d8:a3:fe:c9:
                    bb:4d:18:0d:a3:9e:ab:41:e1:7b:5b:71:44:ed:5f:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6C:45:6E:35:91:A3:39:23:91:45:36:91:CC:80:70:71:FE:CB:C1
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230382e3130332e3135342e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:98:e0:b9:ce:e7:e1:1b:73:17:fe:d6:0a:e8:2c:3e:e9:
         f5:3d:6b:9e:28:42:57:88:c1:1b:4b:e6:20:8d:41:c9:6b:11:
         e1:dd:b1:4c:56:aa:9d:f9:4d:8a:d0:dd:fb:28:fa:09:6b:7e:
         bf:c3:8c:d8:73:c8:81:73:cc:c6:ec:41:08:31:65:de:56:e3:
         7e:12:ae:17:da:5e:25:88:4a:c1:0f:67:42:09:81:cd:00:fd:
         b9:c4:b0:38:29:42:62:5f:ba:9c:47:1f:44:30:2b:de:74:51:
         41:5f:be:30:bb:3d:fa:91:d8:40:cf:43:61:a8:79:00:7e:9c:
         d8:14:75:2a:da:0d:8a:a6:9f:9d:f6:f0:3f:0c:56:c4:fb:0d:
         39:e4:04:dd:14:35:db:31:0e:fc:b7:7f:50:f3:6b:e1:39:4b:
         94:79:c9:05:dd:ef:b7:14:38:3c:1d:9f:ff:e2:78:ee:a5:9b:
         88:23:0b:3b:f2:5e:b4:74:fd:6c:9c:e3:af:a6:b3:24:56:c4:
         10:b1:c4:e0:48:d3:4b:f4:44:9e:1e:ed:0a:35:cb:3c:bb:e1:
         19:c6:4b:55:ac:0a:41:f8:c1:43:b1:b8:17:05:31:9b:30:df:
         8e:fd:50:eb:c6:87:77:d1:5d:ee:4b:92:8e:c0:25:92:49:61:
         73:1a:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:22:28 2025 by rpki-client