Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa
File:                     37342e3132342e3139392e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          s8oa9984nLiZUrZwVpZBIdyJKt1q2TSH2uw9fjWiOj8=
Subject key identifier:   48:5D:55:C0:CF:F0:70:60:7D:64:61:2E:C3:A1:88:11:1F:63:24:A4
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       584B3F8C7220133E68534C35061E4A08CA4E5D59
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        74.124.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:41:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:4b:3f:8c:72:20:13:3e:68:53:4c:35:06:1e:4a:08:ca:4e:5d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=485D55C0CFF070607D64612EC3A188111F6324A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:cc:43:88:cb:d4:cc:c8:f2:37:58:31:b0:
                    b7:e5:e1:1b:e8:1c:f1:bb:de:a0:98:8c:ae:55:4a:
                    d8:9c:56:bd:9f:8e:02:d4:d7:d5:fe:a1:9d:a8:3c:
                    18:ea:42:d4:0a:39:8c:19:2c:dd:c8:9f:74:bd:bc:
                    53:d0:20:17:d2:9b:1b:16:fa:c3:66:fa:14:da:ac:
                    54:de:b0:c2:f1:0c:78:2d:42:fa:3f:48:6a:4d:ee:
                    b1:a9:9b:1f:9e:cf:6c:65:24:01:f2:ac:f3:32:77:
                    da:d3:d8:d9:ab:3b:4a:7d:cc:dc:f0:9c:7b:d7:68:
                    3e:71:2a:cb:05:94:ae:4b:a3:17:df:88:1c:be:af:
                    c7:ab:8a:27:7b:9c:95:5f:04:c0:30:8f:d8:5f:a4:
                    b0:3d:73:fb:98:6f:e0:f7:80:2c:fa:92:b7:92:18:
                    8b:7a:95:ae:9d:2d:bc:dc:72:2c:80:e4:a1:fa:92:
                    65:1f:d1:77:2f:eb:1a:e4:92:ca:a0:3c:88:d6:6e:
                    e8:48:39:23:54:5d:da:81:d1:24:74:be:c5:68:4f:
                    21:db:84:4b:67:88:7a:4b:59:9b:7e:81:6a:b2:d8:
                    2f:0b:73:ce:ce:e4:95:56:94:10:ea:09:1a:8f:15:
                    a8:1a:8d:c7:bd:8a:de:4b:c3:5a:22:1b:7a:c9:af:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:5D:55:C0:CF:F0:70:60:7D:64:61:2E:C3:A1:88:11:1F:63:24:A4
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/37342e3132342e3139392e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.124.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:cd:98:d5:ff:f5:f2:7e:af:a5:23:75:8a:86:5b:a0:64:8a:
         61:07:ea:f5:27:e2:b4:14:c6:0b:8e:49:0d:60:be:ac:a9:91:
         ac:85:6f:3e:5f:df:aa:f0:aa:bb:13:b7:d9:c9:b0:6a:6c:13:
         ba:26:19:31:7d:ac:68:61:ba:ca:84:e4:1a:4c:bd:f5:00:73:
         be:6a:f8:8e:f7:1d:5c:49:e2:23:01:f6:97:e0:62:1b:60:ee:
         26:f8:4e:a4:ee:42:db:e1:27:a3:ac:cf:c8:a1:86:43:75:e9:
         3f:5e:bc:51:b2:73:38:5d:60:cb:15:81:d0:95:35:a2:27:1a:
         74:c5:87:96:33:35:1e:74:40:01:4c:3f:b7:4c:7f:40:a5:e3:
         0a:31:df:82:90:a5:27:a7:82:ea:dd:5c:37:01:93:cd:62:68:
         69:08:c4:f5:3e:be:ad:7a:c4:2f:a0:bd:09:78:2e:62:fa:a1:
         54:a7:c9:b3:b2:11:dd:bf:67:f1:2e:9a:4a:9e:d7:36:d4:a2:
         b7:b9:c7:3e:ea:75:1f:4b:dc:1c:a7:49:93:8d:7b:f8:a0:8a:
         fd:43:2d:0a:5a:01:5d:46:35:65:22:ea:19:d5:79:37:d7:7c:
         ef:92:4a:64:8e:28:b1:0e:d9:a6:7f:cf:1a:30:c2:15:12:02:
         ee:70:fe:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:44 2025 by rpki-client