Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e203130373337.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e203130373337.roa (raw, json)
Hash identifier:          j9/nInW57uhcBfF6OVwoXmC5vrpOyOfO1s49XP1rLec=
Subject key identifier:   0D:2D:8B:59:E2:16:B7:67:DE:0E:3D:1C:6D:30:E9:90:9B:61:53:4C
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       7EA4E8474001A9877D79A2A23FEA42EF84218576
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e203130373337.roa
Signing time:             Thu 23 Jan 2025 15:16:23 +0000
ROA not before:           Thu 23 Jan 2025 15:11:23 +0000
ROA not after:            Thu 22 Jan 2026 15:16:23 +0000
asID:                     10737
IP address blocks:        205.211.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 15:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a4:e8:47:40:01:a9:87:7d:79:a2:a2:3f:ea:42:ef:84:21:85:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Jan 23 15:11:23 2025 GMT
            Not After : Jan 22 15:16:23 2026 GMT
        Subject: CN=0D2D8B59E216B767DE0E3D1C6D30E9909B61534C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:e0:1a:26:0c:80:10:2c:5a:89:16:e5:66:
                    ad:8f:36:89:1c:b0:75:1e:16:b9:47:86:16:fb:ff:
                    00:ce:25:eb:f9:54:a3:f8:cc:a5:62:0b:67:4c:20:
                    a0:7d:37:aa:75:f7:ac:79:4d:ea:03:bb:2f:de:cd:
                    e3:25:d3:f8:ee:a7:e9:21:e5:4e:2a:8a:bc:b9:d9:
                    f1:e7:8b:17:4a:db:72:14:d9:79:1b:68:1d:f9:39:
                    08:a6:4d:5d:60:ea:ed:88:06:8c:30:df:9d:f4:69:
                    81:17:58:da:62:05:56:4f:88:38:41:cf:ba:7e:d6:
                    ef:52:c7:8b:60:fa:e2:30:4a:39:55:f8:f2:8b:67:
                    d0:1c:97:ad:15:c3:30:32:12:e0:45:38:98:d0:c4:
                    73:70:31:77:ed:11:60:3d:60:7c:e4:61:2f:62:83:
                    22:73:e1:5a:e1:38:64:9a:5f:53:9f:bc:ef:96:5d:
                    09:cd:c0:49:60:bd:10:da:b1:ef:79:53:9b:5e:0d:
                    8b:b3:12:95:84:c9:ae:db:4d:13:8c:24:13:d1:d6:
                    a1:db:a9:a3:5f:ba:99:4c:08:d4:21:1d:ed:88:2e:
                    1c:a0:d3:72:8f:7a:e1:1f:33:aa:44:8a:b5:4f:e7:
                    11:b1:f7:8d:db:85:1d:79:5e:fd:3b:c7:51:83:12:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2D:8B:59:E2:16:B7:67:DE:0E:3D:1C:6D:30:E9:90:9B:61:53:4C
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e203130373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:c8:23:17:16:2a:e2:b5:ec:f0:57:31:c8:3c:02:66:29:dd:
         39:67:77:af:14:0b:91:5f:48:02:b8:bb:98:44:e4:41:c9:a4:
         a3:6a:30:2c:60:2e:80:89:ae:dc:e6:91:9b:48:2b:06:1a:99:
         55:58:73:09:5f:67:63:56:84:98:dc:b4:23:19:e3:ca:26:9e:
         4c:bc:4b:63:d0:b1:32:d9:18:ba:4d:4e:d6:78:15:2d:0e:89:
         7e:73:30:76:39:16:d8:f6:6c:12:2e:3e:21:19:47:c2:d4:87:
         29:77:6d:59:76:c5:b9:f9:ab:1e:82:be:c1:16:8a:a8:95:4f:
         0f:69:78:cf:b2:c3:69:bb:3f:8e:34:a9:1e:85:88:99:5b:3b:
         17:e3:02:05:ec:37:13:5d:46:b8:63:3c:27:b0:00:85:1c:ba:
         22:3f:83:89:6f:57:4d:49:77:d7:8b:24:b9:14:5c:f8:dd:03:
         b6:68:f3:a8:46:11:c3:be:80:ab:08:cd:e5:3e:9f:40:50:85:
         45:b1:8b:27:ae:f8:29:05:8f:e4:e6:28:59:37:9a:7f:9c:37:
         03:3b:a3:53:8c:5d:0c:3a:e5:14:16:aa:86:37:ee:da:77:fa:
         ae:65:8b:e6:55:32:3c:f0:27:4e:5f:1a:02:a9:da:f7:d4:a8:
         25:c4:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:41:57 2025 by rpki-client