Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier:          Rdmr54HHYsthZSpsL+it5+O4g+GjQDiGZZ+Dz7mwkDA=
Subject key identifier:   57:58:0A:D7:92:A4:69:38:6A:7F:A7:E6:AA:C8:2C:BF:8F:80:4D:C2
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       6E7E025EE29D5AAC7E1CF27AF375E0889CA2CF33
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa
Signing time:             Fri 28 Mar 2025 00:17:17 +0000
ROA not before:           Fri 28 Mar 2025 00:12:17 +0000
ROA not after:            Fri 27 Mar 2026 00:17:17 +0000
asID:                     152368
IP address blocks:        167.253.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7e:02:5e:e2:9d:5a:ac:7e:1c:f2:7a:f3:75:e0:88:9c:a2:cf:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:17 2025 GMT
            Not After : Mar 27 00:17:17 2026 GMT
        Subject: CN=57580AD792A469386A7FA7E6AAC82CBF8F804DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:f3:32:1a:ae:1a:85:64:3e:4e:6b:7a:f8:
                    54:55:c4:42:0c:aa:30:8c:f5:b2:1f:1d:a2:2d:de:
                    1d:84:69:6a:25:de:8a:71:cf:1e:e8:36:b7:1e:b4:
                    86:e7:95:11:97:3f:d7:cf:27:e1:c3:26:c8:57:9a:
                    ab:88:a7:d8:bb:cc:4b:4b:79:6b:68:5a:08:81:c9:
                    49:05:ba:29:11:9a:eb:d6:be:57:a2:7d:2c:95:c2:
                    ed:53:31:85:7b:f6:6b:b8:22:83:e7:80:9e:d0:99:
                    73:40:a5:30:44:69:5a:53:10:eb:c5:1e:70:fd:87:
                    b0:19:c2:45:1f:0b:b4:9d:ce:18:08:b5:07:7a:0b:
                    78:22:63:05:77:8b:e1:8b:5f:e5:83:90:cb:dd:f1:
                    09:cf:45:e7:22:98:5b:a1:d3:89:4e:2b:cd:f4:5b:
                    d1:77:d8:19:38:f5:e1:f3:ec:69:b7:8c:6a:0f:72:
                    f5:1c:fb:be:12:71:e5:93:13:a9:f5:e5:b6:8a:58:
                    62:02:94:fe:7f:8f:4b:14:02:e9:44:1d:2d:03:7c:
                    3b:f4:ba:36:ff:04:6f:71:e3:4c:16:64:33:d6:54:
                    f1:a3:77:ef:9e:01:79:c0:40:b1:a5:6c:0f:38:25:
                    62:be:48:b0:af:54:7c:76:b0:db:94:64:2a:99:21:
                    fb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:0A:D7:92:A4:69:38:6A:7F:A7:E6:AA:C8:2C:BF:8F:80:4D:C2
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:f3:14:1e:2b:ea:a2:9f:dc:65:07:fd:03:a5:4f:76:0c:b2:
         f2:c5:81:42:25:49:79:3b:f3:35:40:5d:7c:e9:67:8c:9d:e2:
         a1:44:84:58:2a:ec:35:8c:c9:12:f1:5a:4a:08:6e:0b:88:76:
         25:88:1e:a4:76:76:57:c8:db:f4:74:5d:0e:64:03:47:f5:d4:
         89:32:2f:19:8e:e7:1b:2f:cf:28:81:db:35:ab:b6:17:7b:0a:
         9a:16:d7:41:96:e5:18:1b:88:13:8c:04:0d:e1:f3:04:3a:72:
         04:3b:67:e5:13:82:8d:f2:c8:ff:9b:75:92:a1:2d:20:4b:da:
         73:a0:58:ae:c2:a6:c5:01:77:c6:3a:94:0e:f7:8c:12:98:84:
         57:34:e1:b5:38:21:3e:33:3d:83:63:14:77:3b:c9:ea:4d:02:
         be:9b:5f:fb:20:6b:24:c6:11:f6:e1:16:b5:64:ae:23:1c:fd:
         fa:17:eb:16:e3:92:40:ef:ce:32:a5:b8:e7:25:23:4c:fc:c3:
         7c:d3:eb:f5:af:41:a9:c7:6f:f9:36:b8:3f:7c:86:33:5a:de:
         b7:c7:eb:6c:cd:19:49:35:d2:d0:c2:b5:6d:17:cb:b0:87:e8:
         0e:6a:08:91:eb:c5:dc:50:2c:05:e7:3e:58:9b:2a:d3:37:95:
         97:c5:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:06 2025 by rpki-client