Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323035323230.roa
File:                     3137332e3234372e3233342e302f32332d3233203d3e20323035323230.roa (raw, json)
Hash identifier:          GYfJOmLgJMR0ilQuav4epSWVuLR8yeddnh/tSdPEMgE=
Subject key identifier:   BD:B7:67:D4:64:A4:79:F5:1E:91:16:17:11:0B:8A:BF:89:E5:50:06
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       0149D74E79BD19279FCC802898FCCBB768889C56
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323035323230.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     205220
IP address blocks:        173.247.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:49:d7:4e:79:bd:19:27:9f:cc:80:28:98:fc:cb:b7:68:88:9c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=BDB767D464A479F51E911617110B8ABF89E55006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:52:90:6e:1a:49:27:d3:d1:ac:26:fe:da:
                    88:23:d6:31:f5:c1:37:3a:52:78:a2:a5:7c:bc:a8:
                    28:7b:80:67:aa:9a:fd:da:bc:90:fb:31:c7:78:32:
                    a6:ca:97:b8:ed:3c:ed:12:d4:ff:54:18:f8:5a:98:
                    c7:72:b8:4a:9d:53:91:0c:58:f0:2b:d4:fb:a1:55:
                    6d:1c:96:c2:25:f5:6d:9d:4d:ca:22:cb:c6:66:d3:
                    6f:8f:4d:a8:ab:11:27:f9:93:99:a3:4d:d2:83:e6:
                    73:d1:1c:68:92:e5:0e:31:1b:db:50:c4:03:1d:2a:
                    a1:e9:0b:b4:96:53:d9:4f:9e:68:6b:77:fe:a9:0d:
                    ff:5e:6d:8e:01:0b:2d:d3:fc:3a:4b:48:3c:f8:b6:
                    3b:87:3d:aa:c5:81:6c:6f:c0:24:f6:c8:f2:b2:9d:
                    ce:25:06:eb:68:da:61:79:6d:0e:47:a2:f6:a6:d3:
                    86:36:7c:0a:08:1c:9b:ec:14:6a:cf:e1:c0:af:5c:
                    05:b5:ad:d8:ca:e3:d5:b3:84:12:86:92:d8:15:af:
                    b7:58:4a:8a:c1:16:80:c8:4f:f5:2b:e5:e8:0c:77:
                    34:e7:72:74:ff:de:29:f8:94:93:38:1f:0b:70:29:
                    fd:ee:8b:a8:a6:51:54:6b:4c:69:e0:c0:90:d8:4f:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B7:67:D4:64:A4:79:F5:1E:91:16:17:11:0B:8A:BF:89:E5:50:06
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:7a:f6:69:ce:9d:7f:43:73:26:38:c0:41:3b:9d:6c:a6:0d:
         1c:d6:49:01:7b:39:ba:c1:40:ec:7c:71:9f:46:60:58:b5:81:
         b6:09:c7:38:7e:77:c1:7c:57:8c:ab:61:2a:0c:bc:df:eb:25:
         e4:a1:f7:27:82:49:a3:d5:98:9b:0e:17:97:2e:aa:0d:79:67:
         21:70:38:ac:22:1c:8f:86:82:37:fa:a3:dd:6e:6e:e6:71:36:
         15:14:83:3a:c0:43:eb:4a:7b:e5:74:f6:7e:86:eb:35:d8:4c:
         d9:e5:e9:9e:b1:14:05:93:32:f8:e6:ab:8e:3a:84:5c:3c:08:
         9e:07:37:4a:e6:26:14:77:be:30:5d:ba:94:f8:7d:fe:43:5e:
         b5:5e:db:8d:b4:05:1a:4c:2b:6d:69:d1:5b:db:0f:50:ff:74:
         8b:a2:9a:68:6d:d1:40:17:ce:99:b5:fe:10:af:e3:d2:62:3a:
         43:2b:06:ac:2f:67:ae:74:42:22:61:33:bf:ef:14:89:b1:94:
         85:b9:8a:7c:04:23:cb:99:a3:d7:6b:4a:ef:8c:0a:e2:31:6f:
         de:75:b3:19:d5:17:df:06:4c:6e:86:2b:37:ef:6d:01:1e:70:
         f9:26:a9:94:32:63:54:77:43:16:b3:1f:b7:82:96:c4:6e:7f:
         8e:ef:82:31
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUAUnXTnm9GSefzIAomPzLt2iInFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjUwNzEyMDYyOTE1WhcNMjYwNzExMDYzNDE1
WjAzMTEwLwYDVQQDEyhCREI3NjdENDY0QTQ3OUY1MUU5MTE2MTcxMTBCOEFCRjg5
RTU1MDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWxSkG4aSSfT
0awm/tqII9Yx9cE3OlJ4oqV8vKgoe4Bnqpr92ryQ+zHHeDKmype47TztEtT/VBj4
WpjHcrhKnVORDFjwK9T7oVVtHJbCJfVtnU3KIsvGZtNvj02oqxEn+ZOZo03Sg+Zz
0RxokuUOMRvbUMQDHSqh6Qu0llPZT55oa3f+qQ3/Xm2OAQst0/w6S0g8+LY7hz2q
xYFsb8Ak9sjysp3OJQbraNpheW0OR6L2ptOGNnwKCByb7BRqz+HAr1wFta3YyuPV
s4QShpLYFa+3WEqKwRaAyE/1K+XoDHc053J0/94p+JSTOB8LcCn97ouoplFUa0xp
4MCQ2E8BWQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFL23Z9RkpHn1HpEWFxELir+J
5VAGMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzQyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMjMwMzUzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGt9+owDQYJKoZIhvcN
AQELBQADggEBAHx69mnOnX9DcyY4wEE7nWymDRzWSQF7ObrBQOx8cZ9GYFi1gbYJ
xzh+d8F8V4yrYSoMvN/rJeSh9yeCSaPVmJsOF5cuqg15ZyFwOKwiHI+Ggjf6o91u
buZxNhUUgzrAQ+tKe+V09n6G6zXYTNnl6Z6xFAWTMvjmq446hFw8CJ4HN0rmJhR3
vjBdupT4ff5DXrVe2420BRpMK21p0VvbD1D/dIuimmht0UAXzpm1/hCv49JiOkMr
BqwvZ650QiJhM7/vFImxlIW5inwEI8uZo9drSu+MCuIxb951sxnVF98GTG6GKzfv
bQEecPkmqZQyY1R3QxazH7eClsRuf47vgjE=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:42 2025 by rpki-client