Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
File:                     3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa (raw, json)
Hash identifier:          /ayQbtTaKuslso4mV/fW3ZPuzFmW1QRJqF3V8RId0AE=
Subject key identifier:   1F:30:CE:AC:9B:0A:F7:31:32:F3:0B:F7:72:FF:56:E0:8B:E8:C2:09
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       54AAC4FE6BB084C8130CD4CB39E30FB789240BCB
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
Signing time:             Wed 14 May 2025 14:36:23 +0000
ROA not before:           Wed 14 May 2025 14:31:23 +0000
ROA not after:            Wed 13 May 2026 14:36:23 +0000
asID:                     26127
IP address blocks:        107.191.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:49:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:aa:c4:fe:6b:b0:84:c8:13:0c:d4:cb:39:e3:0f:b7:89:24:0b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: May 14 14:31:23 2025 GMT
            Not After : May 13 14:36:23 2026 GMT
        Subject: CN=1F30CEAC9B0AF73132F30BF772FF56E08BE8C209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:06:1c:24:5d:0f:e7:31:e1:11:5b:df:c1:5f:
                    0d:2d:1b:cd:85:da:a1:c3:bc:53:d2:22:84:0a:28:
                    53:c4:9f:44:9d:71:4e:2f:df:23:9e:ca:93:a1:d8:
                    0d:2a:b0:5f:70:c2:48:99:4e:8f:4c:71:67:9f:da:
                    d3:3e:cd:4f:e1:9a:e4:11:cb:65:1b:07:cf:a2:15:
                    c4:82:7e:34:78:08:8b:e5:66:69:2f:ad:86:90:77:
                    8d:1b:fe:c0:94:b9:74:bd:62:9b:c1:bb:d8:55:35:
                    a2:71:43:ed:8a:3b:72:2f:3f:30:36:8e:9b:e6:f9:
                    f5:0a:2b:f9:0f:46:fb:4a:14:f5:a6:7d:d0:d5:ce:
                    6c:4d:85:7d:11:89:e7:9f:c1:e1:c3:4a:3d:49:d7:
                    6d:5a:83:f6:b2:54:c0:c9:d6:26:cc:64:cd:c0:9c:
                    e3:14:27:51:f2:98:7a:88:b3:cc:99:8b:87:3f:ec:
                    e9:46:d8:9e:05:1b:01:fa:f5:1c:94:b3:7e:68:ad:
                    fe:01:bc:e8:fd:7d:ee:4b:02:85:03:ad:7a:69:23:
                    76:55:4a:a5:18:a0:ae:fb:73:8d:1f:6a:dd:3c:5b:
                    7c:8d:c2:aa:10:53:c9:ba:7f:6d:96:ca:61:bc:bd:
                    f0:6f:98:4a:6c:ec:fb:44:b0:68:79:c4:a4:0b:bc:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:CE:AC:9B:0A:F7:31:32:F3:0B:F7:72:FF:56:E0:8B:E8:C2:09
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:32:49:28:33:09:ba:f9:4c:e5:6d:7a:b5:8b:46:01:08:80:
         6e:d6:3b:76:dc:c3:b1:b7:56:40:25:a6:ef:46:06:f6:b2:fa:
         56:d7:e0:71:e4:b2:57:75:2d:a8:93:44:8a:87:eb:8d:17:01:
         59:fe:8c:21:79:34:c6:a3:0c:59:42:54:01:2a:53:74:b4:4f:
         b1:31:d4:9a:5c:dc:a8:35:56:bf:eb:88:73:d7:e3:92:20:68:
         cd:ce:dc:05:77:85:07:c1:18:02:80:50:90:5d:0a:c5:e5:93:
         eb:a6:fb:f5:91:d6:b2:6a:53:da:a4:f5:4e:67:5d:d4:11:a2:
         be:26:28:13:02:6d:22:5a:c4:38:24:bf:b3:f9:67:35:ea:03:
         c7:2d:28:ca:5e:2f:bd:34:7e:19:36:d1:ae:a2:e9:e5:45:44:
         65:d6:4a:7b:b1:2f:56:0a:0c:f4:8b:86:ca:f4:65:58:bd:8d:
         48:c2:b2:d0:29:1a:a8:4d:28:8c:be:e9:2f:e9:dc:8d:b9:b9:
         d3:ab:73:38:4a:7f:f0:57:37:99:38:f7:b8:72:01:e1:7d:aa:
         76:9f:92:52:eb:15:f2:53:b1:09:8a:78:9c:1d:a9:03:1b:05:
         51:92:d2:b6:e2:35:db:4a:d1:ca:7e:0b:68:4f:10:c2:b7:12:
         fc:c2:1d:85
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUVKrE/muwhMgTDNTLOeMPt4kkC8swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWJmNzM5ZjYzYzY5NDM1MzVjZmU0ZWQyODEzZjgzOGVk
NTYwYjcwNzZmM2E0NTJlYjgwHhcNMjUwNTE0MTQzMTIzWhcNMjYwNTEzMTQzNjIz
WjAzMTEwLwYDVQQDEygxRjMwQ0VBQzlCMEFGNzMxMzJGMzBCRjc3MkZGNTZFMDhC
RThDMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QYcJF0P5zHh
EVvfwV8NLRvNhdqhw7xT0iKECihTxJ9EnXFOL98jnsqTodgNKrBfcMJImU6PTHFn
n9rTPs1P4ZrkEctlGwfPohXEgn40eAiL5WZpL62GkHeNG/7AlLl0vWKbwbvYVTWi
cUPtijtyLz8wNo6b5vn1Civ5D0b7ShT1pn3Q1c5sTYV9EYnnn8Hhw0o9SddtWoP2
slTAydYmzGTNwJzjFCdR8ph6iLPMmYuHP+zpRtieBRsB+vUclLN+aK3+Abzo/X3u
SwKFA616aSN2VUqlGKCu+3ONH2rdPFt8jcKqEFPJun9tlsphvL3wb5hKbOz7RLBo
ecSkC7y5TwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFB8wzqybCvcxMvML93L/VuCL
6MIJMB8GA1UdIwQYMBaAFOIMIy9SScttgY2J97K9muOjaXV8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzEv
RTIwQzIzMkY1MjQ5Q0I2RDgxOEQ4OUY3QjJCRDlBRTNBMzY5NzU3Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg3ZmQ5MzU1LWZmZGMtNDk4Ni05MzI5LTRkMTkwOWUwMWEyZi8xYmY3
MzlmNjNjNjk0MzUzNWNmZTRlZDI4MTNmODM4ZWQ1NjBiNzA3NmYzYTQ1MmViOC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8xLzMxMzAzNzJlMzEzOTMxMmUzMTMyMzgyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMjM2MzEzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa7+AMA0GCSqGSIb3DQEB
CwUAA4IBAQB2MkkoMwm6+UzlbXq1i0YBCIBu1jt23MOxt1ZAJabvRgb2svpW1+Bx
5LJXdS2ok0SKh+uNFwFZ/owheTTGowxZQlQBKlN0tE+xMdSaXNyoNVa/64hz1+OS
IGjNztwFd4UHwRgCgFCQXQrF5ZPrpvv1kdayalPapPVOZ13UEaK+JigTAm0iWsQ4
JL+z+Wc16gPHLSjKXi+9NH4ZNtGuounlRURl1kp7sS9WCgz0i4bK9GVYvY1IwrLQ
KRqoTSiMvukv6dyNubnTq3M4Sn/wVzeZOPe4cgHhfap2n5JS6xXyU7EJinicHakD
GwVRktK24jXbStHKfgtoTxDCtxL8wh2F
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:51:41 2025 by rpki-client