Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa
File:                     3137332e3234372e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          5q5Qv4nttCPSMBtxP4156B91DHqVGtbZoJ6kw548SgY=
Subject key identifier:   A7:E3:EB:53:C0:0E:A3:72:15:69:C7:C4:18:E1:A6:7E:23:AC:FC:CD
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       71119C9E06930FB7B2F594F9DD223740C173757D
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     834
IP address blocks:        173.247.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 04:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:11:9c:9e:06:93:0f:b7:b2:f5:94:f9:dd:22:37:40:c1:73:75:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=A7E3EB53C00EA3721569C7C418E1A67E23ACFCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:72:10:81:30:10:01:68:b1:8c:2d:0c:e4:4c:
                    e8:33:f5:81:21:ad:6f:04:0d:56:27:b9:5b:18:aa:
                    2c:5e:09:48:1d:2d:fe:59:09:67:82:9a:0f:46:c6:
                    20:21:07:66:76:7e:c5:3b:cd:68:de:1f:b0:02:86:
                    ac:8c:06:cc:73:23:9a:33:be:a4:f3:5a:fe:e9:11:
                    28:8a:5a:3b:58:f3:ee:07:7b:60:0e:c6:e3:73:9b:
                    1f:a7:47:b4:c3:83:91:0a:6d:26:b0:96:01:97:b2:
                    a1:9e:44:e1:22:60:0b:6d:8b:43:29:b3:16:20:ab:
                    9c:67:4c:94:8b:92:4e:b6:b9:24:51:bf:f1:35:92:
                    49:d7:d9:2f:00:6f:7e:43:16:b9:c7:dd:71:e2:86:
                    d6:8c:0a:f3:6c:f0:f5:ec:09:a4:ab:63:a9:9c:29:
                    fb:e1:8a:be:03:3d:6c:48:af:90:1b:0f:9b:77:ed:
                    31:44:5b:a3:a4:95:4b:b9:48:11:19:ff:1d:d1:b7:
                    b0:4a:e3:c2:94:44:a9:be:d2:b6:33:cf:a5:9a:51:
                    aa:66:7b:7e:6f:5b:b2:10:3c:09:bb:2c:16:c6:dd:
                    b8:60:50:80:4d:43:ad:c7:c5:35:c7:c5:6d:c2:ba:
                    be:4e:ee:32:6d:27:88:a2:98:bf:b7:41:8e:8a:24:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E3:EB:53:C0:0E:A3:72:15:69:C7:C4:18:E1:A6:7E:23:AC:FC:CD
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:84:c3:b9:1c:75:88:18:e0:9e:9b:79:e1:ae:82:c4:07:f7:
         bc:ea:a1:b3:ef:1f:04:60:33:74:a8:7d:5c:de:65:09:ab:08:
         39:95:96:df:1d:df:3f:96:2f:c8:cb:13:2e:a4:05:88:3c:38:
         09:cd:c9:b9:d8:34:89:68:8b:d2:59:2a:45:2b:aa:c7:3c:94:
         77:19:92:4c:3f:c6:1e:eb:07:18:dd:24:ce:6a:40:5d:e1:16:
         32:c0:f5:ca:79:35:2f:81:8f:72:72:3c:06:1e:92:e3:0a:49:
         c6:56:0c:71:37:30:95:b7:7a:89:b5:55:26:ec:a3:4d:af:33:
         03:06:87:2c:38:03:7b:e6:d1:96:bb:2c:1f:7e:8c:e5:b0:5f:
         3d:7d:6a:ce:f6:d2:36:39:65:57:80:4d:f9:52:1e:d8:7f:ff:
         14:f0:51:d8:3a:a7:4e:cc:fd:4e:f9:4c:ce:ef:74:d2:6d:9d:
         48:cf:d0:e9:68:f6:32:56:95:92:78:93:68:76:cb:22:53:2c:
         ea:22:9f:84:22:80:38:52:a1:a7:66:73:6c:d5:73:cd:c7:bc:
         f9:80:13:9f:50:fc:b5:f6:91:83:fa:e3:79:6d:e2:77:33:31:
         22:18:92:b6:bb:66:84:4a:55:4d:a7:92:87:fe:29:f7:d2:ce:
         df:7f:ef:72
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUcRGcngaTD7ey9ZT53SI3QMFzdX0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE1WhcNMjYwNzExMDYzNDE1
WjAzMTEwLwYDVQQDEyhBN0UzRUI1M0MwMEVBMzcyMTU2OUM3QzQxOEUxQTY3RTIz
QUNGQ0NEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nIQgTAQAWix
jC0M5EzoM/WBIa1vBA1WJ7lbGKosXglIHS3+WQlngpoPRsYgIQdmdn7FO81o3h+w
AoasjAbMcyOaM76k81r+6REoilo7WPPuB3tgDsbjc5sfp0e0w4ORCm0msJYBl7Kh
nkThImALbYtDKbMWIKucZ0yUi5JOtrkkUb/xNZJJ19kvAG9+Qxa5x91x4obWjArz
bPD17Amkq2OpnCn74Yq+Az1sSK+QGw+bd+0xRFujpJVLuUgRGf8d0bewSuPClESp
vtK2M8+lmlGqZnt+b1uyEDwJuywWxt24YFCATUOtx8U1x8Vtwrq+Tu4ybSeIopi/
t0GOiiSfIQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKfj61PADqNyFWnHxBjhpn4j
rPzNMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACt9+YwDQYJKoZIhvcNAQELBQAD
ggEBABOEw7kcdYgY4J6beeGugsQH97zqobPvHwRgM3SofVzeZQmrCDmVlt8d3z+W
L8jLEy6kBYg8OAnNybnYNIloi9JZKkUrqsc8lHcZkkw/xh7rBxjdJM5qQF3hFjLA
9cp5NS+Bj3JyPAYekuMKScZWDHE3MJW3eom1VSbso02vMwMGhyw4A3vm0Za7LB9+
jOWwXz19as720jY5ZVeATflSHth//xTwUdg6p07M/U75TM7vdNJtnUjP0Olo9jJW
lZJ4k2h2yyJTLOoin4QigDhSoadmc2zVc83HvPmAE59Q/LX2kYP643lt4nczMSIY
kra7ZoRKVU2nkof+KffSzt9/73I=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:28:30 2025 by rpki-client