Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203539393230.roa
File:                     3134302e3233352e3132392e302f32342d3234203d3e203539393230.roa (raw, json)
Hash identifier:          kbMuSxzgpq8sM3JH/pRnA22R9S3vwd1MxvyC+8PEA9U=
Subject key identifier:   4B:27:DA:B8:FA:D4:17:FE:A3:96:FE:8D:45:89:07:27:80:A9:70:60
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       16C1E8798C9218588E9873B184C3185F16E3A4C4
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203539393230.roa
Signing time:             Sat 08 Mar 2025 14:30:21 +0000
ROA not before:           Sat 08 Mar 2025 14:25:21 +0000
ROA not after:            Sat 07 Mar 2026 14:30:21 +0000
asID:                     59920
IP address blocks:        140.235.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 00:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:e8:79:8c:92:18:58:8e:98:73:b1:84:c3:18:5f:16:e3:a4:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Mar  8 14:25:21 2025 GMT
            Not After : Mar  7 14:30:21 2026 GMT
        Subject: CN=4B27DAB8FAD417FEA396FE8D4589072780A97060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:82:bc:fe:53:4f:e5:16:ca:f2:8a:dd:e4:
                    fa:a9:51:68:21:9c:47:20:d3:a8:17:51:23:cb:51:
                    58:a5:d0:59:a9:1c:af:ac:3f:17:e0:89:bf:c3:3f:
                    ef:b5:ca:22:e4:5c:c4:7d:ba:35:03:c4:d7:06:77:
                    03:1e:7a:fc:45:d9:1e:7d:ed:46:7f:22:be:4c:a5:
                    f2:03:37:7d:f0:99:d9:8b:07:a4:cc:e3:ab:77:ab:
                    61:7a:cd:a6:1a:05:01:b0:cf:56:45:33:55:e6:58:
                    fd:82:13:f7:b5:ec:c0:fe:c6:f0:59:46:2c:10:97:
                    fd:0a:73:bf:f0:33:8c:f5:8f:19:5d:55:d1:e7:71:
                    bd:9b:9f:f6:0a:e8:76:43:5f:d7:ba:8d:72:c5:46:
                    6b:a4:65:7a:17:34:94:bc:83:51:08:e8:00:70:d3:
                    73:f3:64:a9:05:9b:29:e9:a0:d9:75:22:1e:32:dc:
                    c2:87:92:b4:5c:8c:f8:88:8e:c4:7c:5f:02:7b:d9:
                    fd:96:75:ac:6b:01:f9:8d:2f:de:b5:cb:84:f8:e1:
                    83:44:e9:59:08:f6:f2:cc:2a:c4:bf:49:fc:6c:08:
                    67:e4:c7:12:60:f4:d4:78:58:6c:1d:a4:37:e3:66:
                    3c:2d:ff:88:63:e7:a3:b7:d3:50:ca:1d:a7:b9:be:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:27:DA:B8:FA:D4:17:FE:A3:96:FE:8D:45:89:07:27:80:A9:70:60
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:49:8d:d4:d3:a3:b2:44:64:a2:34:70:33:ac:e3:74:42:4c:
         47:99:c7:06:56:dd:71:07:03:d8:be:94:15:57:ee:87:d3:bb:
         61:09:d7:2b:5b:b8:08:29:73:66:a4:8a:ba:e2:8f:67:af:05:
         3a:bd:76:51:64:60:5b:bc:f4:31:63:5d:52:4b:dd:66:0d:44:
         e4:04:ba:38:27:cd:25:9e:f8:ce:28:bc:ce:cc:4e:b0:6a:d1:
         2e:f3:81:57:cc:be:a6:d8:d1:ff:0f:fe:9a:46:c6:59:59:f0:
         9e:8d:15:4e:eb:e6:76:55:4b:f3:50:95:77:44:4c:88:a9:7c:
         c3:00:2e:8e:65:37:94:be:75:c7:e7:6f:d7:63:3d:c8:cd:a3:
         a5:5a:5e:e1:13:3b:ff:ba:1a:1b:95:1b:a6:dc:c8:78:b5:0a:
         40:76:12:52:3a:11:2c:75:05:05:da:0f:36:44:1a:fe:27:0c:
         cb:97:40:a3:3f:72:9d:28:8e:8c:32:35:ce:2e:2e:74:3e:b1:
         31:a4:71:0c:ec:e9:59:45:ad:2f:fc:fa:d1:e4:59:57:ec:a5:
         69:e6:7c:da:15:1b:a0:f4:bc:4b:a6:e4:b1:8c:6b:ff:78:be:
         8c:25:73:e3:61:65:16:5a:7f:39:24:a9:c6:2a:9d:1a:cb:ce:
         e4:37:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:32:50 2025 by rpki-client