Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa
File:                     3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa (raw, json)
Hash identifier:          3krGIqqZsl/s+jxFNMeTJdl48lBBK5yGsA1S3un4Vf4=
Subject key identifier:   6D:F1:CF:82:14:2C:53:0C:19:F5:BA:A4:BD:BD:C6:22:D6:F6:97:32
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       2F9D656CF05869ED6F7C0324A81A4D2DED765FE6
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa
Signing time:             Sat 12 Jul 2025 06:34:15 +0000
ROA not before:           Sat 12 Jul 2025 06:29:15 +0000
ROA not after:            Sat 11 Jul 2026 06:34:15 +0000
asID:                     21769
IP address blocks:        205.134.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 04:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9d:65:6c:f0:58:69:ed:6f:7c:03:24:a8:1a:4d:2d:ed:76:5f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:15 2025 GMT
            Not After : Jul 11 06:34:15 2026 GMT
        Subject: CN=6DF1CF82142C530C19F5BAA4BDBDC622D6F69732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0b:c0:e5:60:47:17:2f:41:56:6e:9c:7e:ad:
                    72:a6:cd:86:c2:c4:2e:83:71:ab:25:6e:92:11:aa:
                    dc:5c:a2:56:1b:fd:5f:b2:53:73:1b:b1:be:e9:f1:
                    5c:f3:70:b5:16:6e:28:4f:59:eb:c9:69:9a:54:fa:
                    d6:43:3e:05:6f:e5:1e:75:2c:d7:d2:72:0a:76:cf:
                    e8:94:af:92:6c:97:01:ff:7a:8e:6d:d6:1e:0b:a4:
                    6c:90:2e:b2:3e:31:62:66:a6:ed:0a:0c:eb:83:cc:
                    e0:d5:30:45:ec:84:3f:5d:51:72:86:a1:0b:e1:af:
                    e9:e6:11:f2:f8:50:4f:a0:e5:b8:8a:7f:49:f8:1c:
                    b3:96:e7:a0:88:d7:11:ec:f9:e0:59:f5:b5:5d:cd:
                    28:cd:5c:ad:a8:75:fe:8a:ba:28:a3:2b:4d:71:90:
                    5d:50:fd:d8:d9:51:3d:a4:b1:99:54:51:fa:a7:bd:
                    16:fd:37:7c:f8:4e:5a:61:8a:3c:e4:c9:01:6c:1f:
                    e8:0a:6a:4a:2c:f1:35:88:5d:88:d7:7d:63:57:f5:
                    36:da:90:28:c4:3f:9c:c6:ec:d7:11:f0:68:50:e7:
                    ab:f6:20:75:b7:42:d6:99:98:5c:cb:37:65:13:12:
                    22:a5:64:f4:a0:16:a7:61:f2:9d:00:76:84:02:7f:
                    17:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:CF:82:14:2C:53:0C:19:F5:BA:A4:BD:BD:C6:22:D6:F6:97:32
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:f7:ad:98:15:2a:49:ae:7f:27:64:70:85:5c:d0:fa:b3:52:
         ec:8d:7b:5c:78:90:1c:14:c1:ce:2a:24:41:bd:51:71:65:77:
         74:f7:2c:9a:d3:ee:8a:51:67:fa:ae:19:15:ad:d3:ad:e8:25:
         c3:35:24:7c:2c:7a:3b:0c:2b:7d:4d:5f:de:b6:c0:17:c7:c8:
         88:4e:33:92:f8:9f:08:9d:a2:a0:f3:0d:e8:17:6f:cb:66:07:
         4c:0f:6e:3d:76:5b:e3:0e:8c:31:67:9e:99:e2:f2:89:f0:c5:
         68:86:a0:83:54:ac:a1:85:e8:70:ff:92:dd:04:e5:5a:f1:a3:
         8e:38:d1:d7:7a:9c:76:29:4e:b0:a0:71:61:0c:04:aa:0c:47:
         0b:e7:c2:4f:62:76:44:65:6b:3b:ff:61:2d:ad:f2:85:89:53:
         bd:d8:d3:51:ed:75:e9:71:1e:c4:19:b8:32:66:62:8a:30:38:
         d6:f5:62:53:ea:eb:fd:60:27:21:46:f6:f0:b7:4c:6e:6a:c8:
         b9:35:5f:86:a9:00:6b:52:2d:2b:b1:7a:0d:7b:f8:b3:79:77:
         91:91:81:80:32:42:18:cb:7a:78:f9:f8:75:29:08:c2:b5:bb:
         3e:90:70:ae:4b:bc:5f:44:77:e3:08:a4:6f:32:2e:5e:f4:bb:
         5b:ca:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:28:12 2025 by rpki-client