Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          nN95R9Kp+sgtm1PPHv1RnEMo8hAwJh6ozaaxIuo/y6M=
Subject key identifier:   D3:0E:BA:E0:6C:80:06:3B:87:89:72:2E:63:9E:ED:5D:45:5C:F5:03
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       2BA08D4A5512BD2B510433C036E322C13E03C947
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa
Signing time:             Fri 28 Mar 2025 00:17:19 +0000
ROA not before:           Fri 28 Mar 2025 00:12:19 +0000
ROA not after:            Fri 27 Mar 2026 00:17:19 +0000
asID:                     19521
IP address blocks:        167.253.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a0:8d:4a:55:12:bd:2b:51:04:33:c0:36:e3:22:c1:3e:03:c9:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 28 00:12:19 2025 GMT
            Not After : Mar 27 00:17:19 2026 GMT
        Subject: CN=D30EBAE06C80063B8789722E639EED5D455CF503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c5:a0:df:0b:55:c8:e7:7f:f1:c2:01:ea:e0:
                    7a:c5:12:76:f5:61:c1:32:0c:a9:4a:4c:0d:fb:2a:
                    71:3c:08:29:12:37:6f:b7:b4:1f:cf:72:e8:8a:a8:
                    39:dc:a1:a4:c5:b8:e5:92:93:3d:f7:cf:0c:93:1e:
                    88:7e:6c:35:f9:de:aa:bf:aa:8b:5a:a7:32:81:00:
                    b5:b9:9f:98:e4:5d:52:15:1f:4b:07:07:ae:a1:54:
                    db:c1:a1:bd:64:c1:09:24:c4:a8:cc:e1:65:03:cd:
                    d8:81:57:3c:61:5f:65:13:30:e7:2d:4c:46:f0:54:
                    a4:99:0e:92:a8:01:43:31:88:28:f5:21:29:85:b4:
                    8a:97:76:b7:a6:32:ca:30:52:bc:06:53:bd:71:0e:
                    2e:5d:ca:01:52:62:71:83:b5:ae:eb:36:71:80:2d:
                    1f:7b:e8:d2:d2:6e:0d:46:2a:fe:76:7b:48:0b:ad:
                    81:e8:50:3b:d0:eb:8c:40:b4:32:3f:2f:f4:17:ac:
                    9f:21:53:b8:cf:c2:9f:54:26:bd:72:af:9b:37:8c:
                    72:21:8b:07:85:42:d3:ff:8e:f3:29:69:3a:43:12:
                    b6:2d:82:36:08:b1:e0:be:5b:22:04:4a:76:01:8c:
                    4f:92:67:8f:ae:36:c6:af:15:e9:1b:d0:58:01:34:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0E:BA:E0:6C:80:06:3B:87:89:72:2E:63:9E:ED:5D:45:5C:F5:03
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:10:33:cf:76:e0:e5:06:0e:40:29:ae:fe:13:78:4b:a7:4a:
         e2:4b:7e:20:72:43:e1:8d:79:0a:d0:3c:13:59:92:b5:8c:a1:
         fe:97:ae:b5:36:f7:ed:ac:4b:d3:7e:4a:9b:c4:70:52:d2:cf:
         36:dd:ee:71:96:7c:20:5d:63:5c:c9:78:25:7a:db:18:2e:b9:
         ca:76:a0:8c:f2:85:05:2a:0c:b6:29:5b:12:86:00:9b:6f:04:
         2e:af:67:a7:cb:c3:15:eb:46:4a:e5:3b:7b:1a:4c:8a:d6:1f:
         c3:d3:61:4d:67:76:54:8b:4a:79:41:72:b4:c9:e1:ea:37:09:
         24:07:bf:4c:82:5a:5b:15:7c:48:ac:29:ee:4e:77:00:8e:fa:
         0c:6c:33:1f:89:f1:54:33:73:0b:43:67:d0:a7:d8:1a:c1:8f:
         7e:d5:01:9b:eb:75:41:93:d1:3f:c6:c1:31:4a:f6:ee:70:ca:
         e5:aa:43:84:80:70:11:6c:91:13:2a:b5:fe:a4:d8:93:bb:be:
         d6:69:be:74:63:5f:15:ae:4f:a7:71:d3:75:d7:2f:3d:05:b1:
         b1:02:70:d6:ee:e8:58:91:62:95:1f:10:dd:3e:76:f5:ed:b5:
         c9:11:88:45:7a:95:56:90:97:d0:c8:4d:fb:3a:4a:5f:30:bc:
         94:fa:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:09 2025 by rpki-client