Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203134363138.roa
File:                     3230352e3233332e3135352e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          QIsNEIuaxQd9qWXavrr1PMpD/tsFQqPobayHvT1Fepw=
Subject key identifier:   A5:9B:93:E2:4D:37:F1:0F:2C:53:57:06:F7:9C:D3:7C:67:F5:CE:46
Certificate issuer:       /CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Certificate serial:       2ED33B3A6555F1F3C334FFBBE4426EF918A823E7
Authority key identifier: 5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 12 Feb 2025 17:07:45 +0000
ROA not before:           Wed 12 Feb 2025 17:02:45 +0000
ROA not after:            Wed 11 Feb 2026 17:07:45 +0000
asID:                     14618
IP address blocks:        205.233.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 09:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:d3:3b:3a:65:55:f1:f3:c3:34:ff:bb:e4:42:6e:f9:18:a8:23:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
        Validity
            Not Before: Feb 12 17:02:45 2025 GMT
            Not After : Feb 11 17:07:45 2026 GMT
        Subject: CN=A59B93E24D37F10F2C535706F79CD37C67F5CE46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:88:42:1e:70:69:63:a6:d8:da:bc:cf:2a:
                    53:95:34:6f:1a:24:0a:59:a2:c9:fa:38:c8:d3:58:
                    4d:26:62:d2:42:54:86:74:ef:19:16:87:01:5c:c1:
                    6f:55:1a:f8:4a:1d:20:c6:ef:27:9d:3b:5c:20:4e:
                    fa:65:c0:e8:a0:61:bb:d2:55:d0:66:fe:bf:63:f3:
                    e4:28:a3:19:82:0e:12:8b:c6:4e:84:6b:4e:6e:04:
                    38:95:1c:8c:98:81:3d:da:73:f5:11:c1:f4:11:ab:
                    2e:77:2e:55:4a:92:30:36:3b:88:21:63:bd:bc:46:
                    f9:1e:e3:c0:c4:9b:1b:d5:87:43:de:10:7c:f5:89:
                    62:68:77:c9:4a:78:90:49:0f:eb:ad:7b:4a:a9:69:
                    05:fd:d4:fe:cf:39:d3:9e:c5:19:8d:ea:a4:f5:79:
                    8a:54:00:cc:f5:2f:52:a1:51:e5:24:8d:78:8d:98:
                    3a:93:cb:24:09:4e:4b:80:4e:fa:30:23:7e:ec:57:
                    ef:ee:dd:43:60:ac:1a:8e:7f:76:0c:9d:86:4d:4d:
                    b1:52:71:04:83:44:28:0a:a9:e4:c2:e8:ea:5e:52:
                    2f:06:00:74:0f:58:81:b4:9f:be:1e:ea:fb:33:e2:
                    6a:09:35:59:3d:7b:81:7f:70:5d:e3:c0:d0:03:c4:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9B:93:E2:4D:37:F1:0F:2C:53:57:06:F7:9C:D3:7C:67:F5:CE:46
            X509v3 Authority Key Identifier:
                keyid:5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:57:2d:d2:61:fc:6a:f6:d6:c3:4b:7c:bd:d8:bc:97:0c:
         97:36:06:c7:ca:ab:51:42:5f:42:97:5d:70:6c:68:e2:8f:11:
         74:6a:19:cc:40:46:3b:d8:33:68:1f:48:29:14:ab:6c:67:ca:
         3b:af:d4:f2:c4:0b:6a:14:14:9c:36:1c:1c:10:2d:dc:bd:53:
         b3:e2:36:04:09:ab:1b:6c:20:a0:60:b4:1f:7a:2d:42:54:1a:
         0e:2f:62:34:3f:3f:4d:f6:3c:7a:38:77:12:3a:ff:3d:80:62:
         95:36:bd:7c:19:7f:e6:99:21:d7:5b:c4:23:4e:57:07:86:de:
         fa:79:af:a7:27:94:64:78:ab:4c:f9:a2:94:48:6e:bb:57:5b:
         de:5f:da:8a:6d:0d:79:8a:8c:a2:89:af:49:a2:76:d1:91:ae:
         ed:a0:83:31:45:0b:49:b1:71:6d:ae:8e:c9:b0:dc:dc:20:8b:
         4b:3a:13:cc:eb:9c:6d:35:36:67:f0:cc:84:00:ec:e0:af:82:
         ae:27:31:72:15:74:b6:70:32:94:81:81:42:89:bf:78:63:ae:
         5d:c2:4c:98:a2:c1:05:81:3d:ba:94:59:d2:97:ee:b9:1f:1a:
         0b:ac:18:7b:5b:4c:72:fc:c1:42:98:4c:1c:be:29:fb:21:8b:
         bb:c8:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:23 2025 by rpki-client