Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa (raw, json)
Hash identifier:          YhiaJOWHakr3lk9AOJWUQhvb0EXSqbZnqOj9agacC94=
Subject key identifier:   E9:78:F4:D0:4F:C7:C4:E7:D5:0A:7D:5A:ED:59:DB:5A:CC:9D:29:8A
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       088366ABFB3BA1FD6BCBD936FC621C5A546E2133
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa
Signing time:             Fri 28 Mar 2025 00:17:19 +0000
ROA not before:           Fri 28 Mar 2025 00:12:19 +0000
ROA not after:            Fri 27 Mar 2026 00:17:19 +0000
asID:                     133210
IP address blocks:        167.253.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 08:54:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:83:66:ab:fb:3b:a1:fd:6b:cb:d9:36:fc:62:1c:5a:54:6e:21:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:19 2025 GMT
            Not After : Mar 27 00:17:19 2026 GMT
        Subject: CN=E978F4D04FC7C4E7D50A7D5AED59DB5ACC9D298A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:a2:5d:44:59:36:4f:40:9f:6a:35:d8:83:
                    48:fd:d0:d4:df:16:7e:81:77:9c:20:07:f4:81:a2:
                    4a:ae:80:79:c0:1b:2c:d5:e6:37:b4:1d:b7:c5:84:
                    38:8d:09:5a:e0:97:f3:9b:64:78:68:f1:2c:af:be:
                    3b:2c:05:17:44:02:92:17:43:d8:26:bf:f2:c3:20:
                    e8:fc:14:20:86:68:8e:df:02:ee:df:83:cb:51:fe:
                    f7:83:fb:e0:80:58:f8:8c:fc:11:d8:20:5b:2d:d7:
                    fd:bd:4a:8e:ad:de:af:9d:cb:2d:f6:1d:ce:c3:b2:
                    b2:65:73:ea:e8:97:7a:8c:c3:26:69:06:d8:c0:c0:
                    9f:0b:ec:a3:bf:d6:f0:c6:ea:b5:a9:3c:22:90:50:
                    a8:d2:4e:f6:d0:4b:10:90:e8:2a:05:8d:0a:85:1b:
                    21:fd:5f:02:d8:6d:44:26:a7:6c:6d:15:52:ca:70:
                    a7:ad:05:46:0d:36:45:11:54:68:5a:d2:7f:ec:29:
                    d2:51:67:dc:ac:e9:9c:12:dc:c7:3f:c6:48:8e:95:
                    c6:28:d7:9d:c8:d1:c6:b5:31:20:f0:86:ae:ca:d8:
                    d1:7f:6a:e4:81:b3:74:2f:60:a3:ed:bb:cd:d1:69:
                    8d:08:cb:4c:b3:31:22:07:cc:8a:b0:ba:b8:5d:7a:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:F4:D0:4F:C7:C4:E7:D5:0A:7D:5A:ED:59:DB:5A:CC:9D:29:8A
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313333323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:cd:88:93:94:0a:bc:21:4f:3d:fb:b8:6e:a4:40:27:11:
         7e:98:83:7c:dc:9e:cb:82:64:0e:0a:37:4e:9d:48:61:8a:e4:
         3e:42:d6:77:a7:d2:e1:d1:22:91:96:77:1e:10:82:87:34:b3:
         a5:de:28:8b:5c:58:ce:7c:93:53:38:e8:a5:c6:37:4c:e9:34:
         1e:66:bb:57:28:51:2a:b2:70:bf:c5:13:70:02:d3:80:00:c2:
         45:9e:8c:ab:34:e8:c6:da:3d:ae:c2:5c:4c:0d:44:8c:94:c6:
         bc:34:00:e9:4c:6d:bd:ca:0b:d0:c6:6e:c3:59:7e:15:4e:0f:
         a8:8c:f2:69:f8:31:0f:8b:24:7c:a5:7f:15:6c:45:36:0e:55:
         cd:6a:3c:17:22:43:1c:ef:32:b3:fa:ae:37:82:10:af:f9:96:
         06:c8:a1:86:af:30:b7:27:b6:82:aa:26:8d:8e:98:f3:63:4a:
         5b:4f:35:b3:79:09:37:42:70:dc:0c:a8:05:94:03:5a:8c:f8:
         12:7b:42:e8:ea:ce:b5:03:6d:8a:a4:a6:47:a7:3f:e0:0b:b7:
         2c:b6:ab:9a:d9:73:27:bc:2c:8f:40:a1:b8:b0:7e:23:eb:b3:
         cd:68:f4:47:2c:eb:4b:b1:46:50:4f:b7:a5:9e:49:ca:47:33:
         7c:24:4b:c8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUCINmq/s7of1ry9k2/GIcWlRuITMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYTE0OGNjMDUyMmViNzI3YTRhYTVjYzg3
ZDNkMDE0OWM3ZjA3MzQ1MmYwHhcNMjUwMzI4MDAxMjE5WhcNMjYwMzI3MDAxNzE5
WjAzMTEwLwYDVQQDEyhFOTc4RjREMDRGQzdDNEU3RDUwQTdENUFFRDU5REI1QUND
OUQyOThBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPKiXURZNk9A
n2o12INI/dDU3xZ+gXecIAf0gaJKroB5wBss1eY3tB23xYQ4jQla4Jfzm2R4aPEs
r747LAUXRAKSF0PYJr/ywyDo/BQghmiO3wLu34PLUf73g/vggFj4jPwR2CBbLdf9
vUqOrd6vncst9h3Ow7KyZXPq6Jd6jMMmaQbYwMCfC+yjv9bwxuq1qTwikFCo0k72
0EsQkOgqBY0KhRsh/V8C2G1EJqdsbRVSynCnrQVGDTZFEVRoWtJ/7CnSUWfcrOmc
EtzHP8ZIjpXGKNedyNHGtTEg8IauytjRf2rkgbN0L2Cj7bvN0WmNCMtMszEiB8yK
sLq4XXp5/QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOl49NBPx8Tn1Qp9Wu1Z21rM
nSmKMB8GA1UdIwQYMBaAFOJxrlUmi4jB6XKn7oWxRZ2N0hAsMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
RTI3MUFFNTUyNjhCODhDMUU5NzJBN0VFODVCMTQ1OUQ4REQyMTAyQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhMTQ4Y2MwNTIyZWI3MjdhNGFhNWNjODdkM2QwMTQ5YzdmMDczNDUyZi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMxMzYzNzJlMzIzNTMzMmUzNDM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzMzMzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp/0vMA0GCSqGSIb3DQEB
CwUAA4IBAQCWDs2Ik5QKvCFPPfu4bqRAJxF+mIN83J7LgmQOCjdOnUhhiuQ+QtZ3
p9Lh0SKRlnceEIKHNLOl3iiLXFjOfJNTOOilxjdM6TQeZrtXKFEqsnC/xRNwAtOA
AMJFnoyrNOjG2j2uwlxMDUSMlMa8NADpTG29ygvQxm7DWX4VTg+ojPJp+DEPiyR8
pX8VbEU2DlXNajwXIkMc7zKz+q43ghCv+ZYGyKGGrzC3J7aCqiaNjpjzY0pbTzWz
eQk3QnDcDKgFlANajPgSe0Lo6s61A22KpKZHpz/gC7cstqua2XMnvCyPQKG4sH4j
67PNaPRHLOtLsUZQT7elnknKRzN8JEvI
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:05:49 2025 by rpki-client