Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203136353039.roa
File:                     3230352e3233332e3135352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          MXDqRMUzqS+NbJg+Mzio8NmJg6jvzylbsAbx3CUYcdM=
Subject key identifier:   33:F8:F9:D5:D5:AA:C9:C1:7A:C2:65:00:29:88:D3:3D:BA:E4:D2:8F
Certificate issuer:       /CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Certificate serial:       7ED15E5E8408FFCFBD1780ABC1264F1B5F19335F
Authority key identifier: 5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203136353039.roa
Signing time:             Wed 12 Feb 2025 17:07:45 +0000
ROA not before:           Wed 12 Feb 2025 17:02:45 +0000
ROA not after:            Wed 11 Feb 2026 17:07:45 +0000
asID:                     16509
IP address blocks:        205.233.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 03:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d1:5e:5e:84:08:ff:cf:bd:17:80:ab:c1:26:4f:1b:5f:19:33:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
        Validity
            Not Before: Feb 12 17:02:45 2025 GMT
            Not After : Feb 11 17:07:45 2026 GMT
        Subject: CN=33F8F9D5D5AAC9C17AC265002988D33DBAE4D28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:47:ca:d2:ec:24:83:e1:58:34:d3:c7:ee:c1:
                    36:c7:f9:f2:ab:85:c3:0b:6d:80:1d:d9:1f:c0:85:
                    c4:20:4a:95:67:01:ef:db:bb:62:2c:32:6e:c5:f2:
                    87:c3:d8:2e:f3:95:36:2e:0a:85:98:24:c9:39:18:
                    14:c8:29:9a:38:37:13:6b:07:f5:4f:37:4a:b6:83:
                    88:ef:c9:bf:0b:29:68:95:d3:b0:f6:1a:e1:58:5e:
                    3a:a8:c5:14:8f:e4:84:f3:dc:59:77:42:59:6d:19:
                    87:fd:2f:25:e1:fd:80:6c:3d:f8:fe:a9:03:6a:52:
                    3d:8c:c2:78:64:12:75:4d:43:6b:84:52:74:60:77:
                    4c:7c:69:a1:1e:69:25:16:3c:fd:ea:8f:4e:f1:1d:
                    39:6c:0b:f9:f0:6a:e6:77:dd:d6:bb:06:e8:89:d5:
                    4b:61:27:2a:9d:b9:74:37:0f:c5:5f:01:ca:ed:b3:
                    82:8a:28:73:7d:58:de:68:2a:f7:8d:11:89:1a:c7:
                    74:9f:2d:4a:1b:77:46:2d:9c:f2:fd:04:b9:fd:3b:
                    98:ec:59:2e:5a:56:cf:a3:d1:d3:32:e4:6d:23:bd:
                    08:04:7f:f2:dc:b0:94:b0:4f:23:ca:e3:29:5a:61:
                    62:ea:2a:04:c9:35:54:63:29:73:e9:67:87:66:24:
                    93:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F8:F9:D5:D5:AA:C9:C1:7A:C2:65:00:29:88:D3:3D:BA:E4:D2:8F
            X509v3 Authority Key Identifier:
                keyid:5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:23:59:39:d1:c3:a2:68:5b:09:d7:c9:f8:c8:d1:7e:84:
         a3:13:b9:29:93:58:bf:77:05:09:20:c0:4a:a8:23:1e:42:24:
         c6:31:e0:3b:eb:24:23:26:fb:2b:20:d5:8f:24:b5:02:86:7e:
         e9:aa:a7:c1:da:8e:64:91:da:8a:6d:0b:90:9b:17:5a:d5:36:
         87:a4:7c:93:2d:7a:fa:49:5c:32:6f:43:c1:b5:0c:72:a2:9a:
         ec:7d:39:9b:9c:d1:f6:9c:f8:93:e6:46:a0:ac:36:12:da:1c:
         eb:55:e0:f5:30:b8:b2:32:9d:e9:f3:b9:7a:a2:a4:98:dd:ae:
         bd:75:f1:be:d5:eb:20:de:cf:fc:82:2f:43:fc:48:ad:77:45:
         30:96:d2:9e:45:f0:ef:9a:a5:61:30:85:bd:7b:b0:ae:de:68:
         de:b6:2a:2b:73:d5:79:35:dc:62:0f:98:c3:e0:b4:e1:63:2d:
         54:97:bf:cd:f4:3f:d7:f5:96:c5:3a:2c:c6:87:e5:72:fb:a8:
         8f:81:5b:9c:92:18:ab:a5:c1:0a:d9:9a:d3:79:02:a4:2f:54:
         f3:e7:e3:a4:51:98:d9:b6:c1:c5:6e:d4:b0:1e:dc:18:cc:1c:
         26:32:13:ec:fa:12:40:d1:8e:fd:5f:5c:87:a2:e0:7f:2c:97:
         69:4d:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:42 2025 by rpki-client