Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397045.roa
File:                     AS397045.roa (raw, json)
Hash identifier:          8cxQubYAneMvIWosYXVgb9y8nVDl4WTUTDof+HKkRbI=
Subject key identifier:   BF:6B:04:20:6C:34:82:BB:B3:88:36:26:63:88:EC:E1:48:DE:D1:AE
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       21C3A4C94FE9447D70DD0EB1DAE81A3A6F66B376
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397045.roa
Signing time:             Tue 13 May 2025 07:00:39 +0000
ROA not before:           Tue 13 May 2025 06:55:39 +0000
ROA not after:            Tue 12 May 2026 07:00:39 +0000
asID:                     397045
IP address blocks:        67.210.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c3:a4:c9:4f:e9:44:7d:70:dd:0e:b1:da:e8:1a:3a:6f:66:b3:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 13 06:55:39 2025 GMT
            Not After : May 12 07:00:39 2026 GMT
        Subject: CN=BF6B04206C3482BBB38836266388ECE148DED1AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:da:a3:5e:58:9a:49:77:ae:95:23:ef:19:92:
                    ba:20:9e:48:5d:73:48:39:47:6f:36:bb:63:74:d0:
                    dc:de:24:16:4c:5b:9d:b6:04:69:4c:c2:e5:4b:63:
                    f4:e4:63:e4:ce:65:39:cc:46:0d:c8:a9:b0:e1:32:
                    4b:a1:fc:e7:87:bc:0d:7a:e5:dd:fc:f2:ce:7c:1f:
                    ca:46:08:4f:39:40:4e:0f:9d:5f:fb:86:c5:6c:c7:
                    94:81:4f:e2:05:51:9f:a0:b2:43:de:c8:0b:fd:28:
                    2b:28:d8:a1:2d:c9:bb:41:85:a5:a7:9b:2d:6b:a3:
                    f0:64:3f:b4:8d:06:37:be:a2:3c:42:f1:b4:5d:83:
                    27:df:70:80:83:8f:1b:32:60:59:97:cd:9c:5b:cf:
                    91:24:1b:d9:a4:75:e0:f9:91:59:38:77:c7:e4:52:
                    8d:f7:ec:21:00:4d:5d:fb:36:1e:b5:1c:5b:be:09:
                    93:bc:e2:da:e1:6f:56:e6:04:a8:31:ca:1d:a0:57:
                    ba:26:ae:84:a9:e9:4a:ac:d0:93:9d:1b:23:b2:f7:
                    af:3f:83:c6:39:f0:ae:34:7c:7c:fc:a7:db:37:42:
                    3e:1b:d5:d8:54:d3:a1:a6:72:60:9e:db:d7:59:1b:
                    71:c2:61:ad:19:cd:7b:2a:28:c0:02:4b:fc:73:90:
                    57:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:04:20:6C:34:82:BB:B3:88:36:26:63:88:EC:E1:48:DE:D1:AE
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:af:49:2a:44:6c:18:f7:02:38:61:78:8d:0f:ad:e6:9f:56:
         11:54:7c:ad:3a:9f:d3:1f:80:b4:ae:11:8b:c5:90:b9:fd:df:
         3b:7b:e8:4b:24:44:50:9d:e8:c9:64:78:a2:24:c6:47:4d:cd:
         94:1c:d5:64:46:f6:3c:1e:c4:c9:df:3b:38:28:82:b8:6f:18:
         cb:fc:c7:8d:59:1c:c0:20:a8:45:52:08:82:9f:02:c6:48:39:
         a1:cb:b0:db:4c:b6:73:15:91:7a:e4:9f:ad:3f:bd:37:ba:72:
         e2:f4:25:b1:8a:93:92:50:06:10:0b:6c:77:be:7b:d3:4a:07:
         66:39:8f:42:6a:b6:df:62:9c:76:1a:2d:25:73:48:c7:d9:52:
         d9:aa:94:9f:35:45:07:21:83:d0:d3:49:61:14:ca:14:9b:d6:
         53:1d:da:7c:44:aa:42:a1:59:a7:6a:5a:4f:38:81:2b:ac:9c:
         52:f8:62:98:7e:e6:cd:a2:46:ff:0e:1c:ab:a1:a4:5d:cf:34:
         3e:3f:a5:9e:e4:52:6b:f1:8a:37:43:de:bf:a9:8e:fe:fe:7a:
         78:13:b2:58:d5:a0:7e:86:6f:7c:f6:f3:df:a2:70:c2:9c:2d:
         0a:ff:c5:a7:26:10:42:0f:93:7a:28:40:8d:d3:07:c8:88:07:
         70:2c:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:11 2025 by rpki-client