Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137517.roa
File:                     AS137517.roa (raw, json)
Hash identifier:          Eysn0+oM5fAg3v+RMMoTpJr8qXoDhBVszVfrw8q84lA=
Subject key identifier:   59:9E:C7:4B:82:80:BE:A7:1C:E2:70:C8:7C:D0:B5:F1:C7:0F:8F:9C
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5FB7A3742761F530286100BD3FAA069CFD5E8774
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137517.roa
Signing time:             Fri 18 Jul 2025 00:00:19 +0000
ROA not before:           Thu 17 Jul 2025 23:55:19 +0000
ROA not after:            Fri 17 Jul 2026 00:00:19 +0000
asID:                     137517
IP address blocks:        64.50.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 14:43:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b7:a3:74:27:61:f5:30:28:61:00:bd:3f:aa:06:9c:fd:5e:87:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 17 23:55:19 2025 GMT
            Not After : Jul 17 00:00:19 2026 GMT
        Subject: CN=599EC74B8280BEA71CE270C87CD0B5F1C70F8F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b6:d9:63:60:59:f8:86:b0:91:c5:13:9e:65:
                    f0:bd:c7:9c:b1:27:e7:85:5e:58:95:70:15:de:c5:
                    2f:f4:05:68:bb:26:b3:4a:2f:63:3b:08:fa:70:84:
                    17:00:83:4a:86:7d:92:d1:19:08:86:1b:97:5f:71:
                    71:05:c9:4c:ed:5d:05:e8:66:3c:5b:9b:64:80:19:
                    5a:1e:be:22:f9:07:4e:d8:aa:87:b7:b9:37:a4:52:
                    e1:33:5c:87:40:52:fa:81:26:f2:d6:af:61:0d:21:
                    31:7c:13:cb:19:97:11:9d:8c:e6:f4:38:b9:03:06:
                    2a:ea:c4:c5:45:b7:41:71:31:ce:7c:5c:f7:3b:0c:
                    68:a0:8c:c1:c5:f1:53:1a:5d:e4:cc:5c:e2:58:52:
                    ca:70:e7:4c:d3:9f:ec:41:38:f3:c2:04:1b:e5:46:
                    8e:25:15:1c:ce:3a:d0:58:c3:0a:53:21:57:bc:85:
                    87:fa:42:b6:6d:1a:75:b5:3b:96:02:43:01:64:60:
                    ed:b2:ed:b2:ed:e9:08:77:e4:58:f2:4d:d0:71:b3:
                    51:82:f9:17:24:cb:b9:b1:a7:f4:00:82:dd:96:04:
                    5b:33:6b:6a:84:df:7b:8a:49:a0:f1:f1:e7:92:80:
                    ff:45:2a:37:5d:ca:73:9f:fc:ce:9e:62:13:5e:f0:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9E:C7:4B:82:80:BE:A7:1C:E2:70:C8:7C:D0:B5:F1:C7:0F:8F:9C
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:98:58:c4:8a:af:f5:a8:36:2d:ec:73:cf:2c:38:bd:db:
         78:f3:ed:3f:63:39:b0:95:f2:e2:dd:ff:90:d9:92:89:af:0b:
         51:5f:32:66:c6:44:ea:64:0b:79:72:af:f5:3a:74:1b:c6:77:
         fe:fb:0d:70:e2:ac:47:c2:b0:c4:7d:62:9d:4a:44:20:db:90:
         44:21:a7:3f:78:4e:ed:45:20:94:74:03:95:6f:ef:1e:99:35:
         83:a1:e1:6e:a6:c1:0c:84:bf:9c:cc:67:e8:b5:0c:20:68:2b:
         ba:4d:86:fb:d6:6a:e3:32:37:49:2e:de:c8:cf:cd:20:5c:6b:
         ed:9f:16:08:ea:e9:8a:3c:2c:dc:db:67:d7:e3:4d:c6:04:86:
         cb:ac:d3:36:05:0f:77:1a:f0:88:8c:c2:89:73:88:5a:9f:f9:
         f5:d2:dc:9c:99:ec:47:a2:34:86:69:7f:a7:2a:36:76:1f:5d:
         ec:7d:34:c9:f6:71:46:a6:0f:67:e8:94:dd:cb:72:37:c7:ee:
         e3:85:5b:b1:a4:2a:ae:8c:4b:dc:1d:f6:18:77:b9:b4:06:ab:
         fd:18:a7:52:9c:b7:c0:48:99:71:ed:c5:4a:28:aa:16:e8:5b:
         3e:b5:68:fa:09:54:25:d9:a1:03:f6:7c:8e:d1:ce:d6:d7:a9:
         d3:f3:83:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:20:43 2025 by rpki-client