Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136557.roa
File:                     AS136557.roa (raw, json)
Hash identifier:          Fno7SuyfH/HKERH9XoPUvTM/bDWD4amPoO8DOOiRSuU=
Subject key identifier:   57:6B:63:7E:6C:27:B4:14:59:FD:31:C5:47:2F:32:41:DE:95:B6:9F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2FB80AC25549902C1ADCEC4962E10249DA5284A2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136557.roa
Signing time:             Wed 16 Apr 2025 07:46:54 +0000
ROA not before:           Wed 16 Apr 2025 07:41:54 +0000
ROA not after:            Wed 15 Apr 2026 07:46:54 +0000
asID:                     136557
IP address blocks:        67.210.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 01:04:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b8:0a:c2:55:49:90:2c:1a:dc:ec:49:62:e1:02:49:da:52:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 16 07:41:54 2025 GMT
            Not After : Apr 15 07:46:54 2026 GMT
        Subject: CN=576B637E6C27B41459FD31C5472F3241DE95B69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:bc:23:69:70:d3:26:54:6b:77:ab:e6:05:44:
                    ad:b3:2d:40:e4:c8:65:47:5e:81:d0:ea:2c:2f:53:
                    bb:22:ba:e0:d4:19:93:e4:6c:14:a2:2c:30:d6:cb:
                    21:2b:a1:0c:0c:bb:1e:1e:04:3c:d6:b7:52:c1:b9:
                    67:9e:e3:6e:05:10:cb:12:f7:08:26:88:b4:70:8a:
                    d7:0b:62:a1:38:90:0d:f4:82:3b:ae:ca:dc:57:1a:
                    3a:30:0a:22:e3:bd:f2:50:f2:0c:e7:59:92:28:7e:
                    b9:d7:1e:c7:9c:55:c2:50:15:72:e0:a4:d2:cc:81:
                    2f:72:16:f5:b0:a9:79:03:ee:0e:52:8a:82:ef:8d:
                    7e:04:98:ed:e3:6a:31:b0:96:20:fc:3c:df:77:19:
                    a4:33:ab:1b:d9:27:11:df:ff:77:57:83:7b:a9:82:
                    c2:55:56:78:0f:40:2f:c1:48:fd:d0:18:a4:ec:21:
                    24:21:ee:18:ea:69:86:3f:ac:ab:a8:a0:33:89:3a:
                    eb:df:69:0e:ee:09:d3:5c:76:d3:b7:37:a2:fe:ec:
                    0d:35:81:0a:00:1e:db:a6:67:35:8e:52:0e:9b:99:
                    88:8a:2f:45:7b:09:d9:c9:49:d5:8b:fe:90:da:a8:
                    09:ba:e2:45:95:ea:b6:c3:b3:52:4a:01:80:45:d1:
                    19:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6B:63:7E:6C:27:B4:14:59:FD:31:C5:47:2F:32:41:DE:95:B6:9F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS136557.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:77:4b:74:59:0d:4e:37:aa:33:b1:14:11:83:d2:35:24:5f:
         ca:bf:e5:48:2a:15:ca:a8:f7:9c:1d:c4:6d:03:e6:b3:b2:17:
         5c:e3:82:21:af:cd:fd:08:a2:dd:b9:8a:58:08:b5:6c:f8:96:
         9f:a7:4f:45:44:b4:9e:0d:ef:ef:52:f1:41:ee:72:c5:c9:b0:
         38:a7:f3:24:8a:2e:4e:6d:4a:51:c4:bb:7c:01:44:0d:f5:ef:
         78:89:f9:5d:20:5a:25:ff:26:3e:d4:09:02:cc:09:88:b4:5a:
         86:37:cd:f6:62:7d:9d:76:39:25:2f:ca:d8:af:3f:26:6c:94:
         a7:d9:a6:8b:11:05:e2:43:c8:1b:94:eb:7d:c1:ca:49:b3:1b:
         b7:73:fb:e7:20:96:46:34:f6:56:e2:59:a9:6a:b2:2b:0a:1a:
         d9:27:16:18:de:62:e9:c3:d0:99:4e:d4:4f:95:44:f5:d5:11:
         e0:e0:af:d2:12:58:a6:0e:71:22:ed:0d:03:3e:f8:1e:1d:1b:
         b7:9d:af:35:bd:11:4a:6b:c1:66:9c:31:a5:e0:d6:62:9b:d1:
         04:ad:bd:2e:da:23:30:58:3d:28:b1:7e:e6:b6:ca:c8:d7:4d:
         02:db:a9:e5:1b:35:0b:eb:c8:1c:2c:16:b3:cd:bc:16:f7:6d:
         c9:1e:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:28:28 2025 by rpki-client