Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa
File:                     AS57043.roa (raw, json)
Hash identifier:          /cgR5pkGI17E56Pm47OqNAQmFcAXPTtJm9NdO9aUNpk=
Subject key identifier:   5B:49:B9:8F:D3:95:EC:9F:3F:31:51:1B:BC:5A:8D:60:EF:1F:2E:61
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       03A39B180BADCDE6AC897693F3F1ED0FC7124B87
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa
Signing time:             Wed 14 May 2025 15:13:14 +0000
ROA not before:           Wed 14 May 2025 15:08:14 +0000
ROA not after:            Wed 13 May 2026 15:13:14 +0000
asID:                     57043
IP address blocks:        67.210.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 07:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a3:9b:18:0b:ad:cd:e6:ac:89:76:93:f3:f1:ed:0f:c7:12:4b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 14 15:08:14 2025 GMT
            Not After : May 13 15:13:14 2026 GMT
        Subject: CN=5B49B98FD395EC9F3F31511BBC5A8D60EF1F2E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:75:a5:c0:1c:7d:03:36:c3:d5:51:ee:eb:
                    c2:10:13:e2:25:d8:64:50:cd:f7:ec:ae:bf:1d:b2:
                    eb:ef:f7:a2:ff:7a:5d:59:c7:7a:2c:bf:e2:9d:78:
                    8a:8f:1c:10:09:d4:b5:45:55:dc:24:eb:cf:31:f7:
                    b1:1a:88:b2:36:d2:02:1e:63:e9:95:99:da:ab:cb:
                    83:bf:ee:21:f6:5e:fe:41:e6:eb:c9:90:4f:fd:ea:
                    30:2c:72:5d:e1:b9:7b:43:ca:1c:7d:6e:df:be:27:
                    be:65:92:8f:2f:66:c9:60:08:8f:92:27:f2:0e:92:
                    d3:d8:be:e3:9a:97:85:b1:47:3e:f8:81:ee:b8:40:
                    15:5a:70:2a:d2:b0:c9:27:63:98:18:ca:4e:c1:8b:
                    63:48:7d:6c:79:9f:1d:ba:fa:a9:bf:13:61:8b:c3:
                    59:5f:e3:d3:ec:1b:20:a2:60:1d:ba:c5:84:2c:54:
                    02:47:ae:4b:96:4d:be:49:99:7f:3d:4f:04:39:d4:
                    c8:e9:9a:3e:72:14:7e:5b:81:49:92:b1:c1:7f:f3:
                    13:78:97:0e:b5:c2:69:25:32:a7:f6:07:05:1e:42:
                    57:7b:c9:c0:1e:28:b0:df:66:64:1d:7a:4e:e0:79:
                    6e:da:63:0c:b4:59:bb:86:38:04:5e:54:77:93:15:
                    16:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:49:B9:8F:D3:95:EC:9F:3F:31:51:1B:BC:5A:8D:60:EF:1F:2E:61
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:28:5f:d4:4c:05:07:33:3a:0a:19:74:a2:d5:6b:d8:e2:16:
         89:e5:9c:54:95:9e:14:44:8b:44:54:0b:bc:3e:ff:ef:c2:69:
         00:a0:af:83:0b:8e:f0:4a:55:23:31:30:11:6c:e4:b5:f4:cc:
         d5:fe:4c:17:cc:f4:25:19:eb:5a:d4:8c:fb:1d:10:e8:dd:0f:
         cd:ff:52:00:a9:b9:a0:fd:ac:b1:85:0a:7c:05:66:a8:76:24:
         bb:60:2b:c6:97:64:f5:47:38:75:2b:d3:52:1b:d3:a7:8d:b4:
         b4:51:86:dd:22:22:f8:7b:1f:95:b6:5f:ff:9a:fa:90:a6:f8:
         55:cc:ec:99:13:e5:ee:76:88:88:fe:ba:2a:61:5a:cb:bb:d8:
         f6:68:df:a5:96:af:18:ae:5d:4f:7b:84:3a:b1:89:c8:fb:a9:
         a2:df:68:8c:ab:a5:e5:67:b7:73:f6:80:05:f4:8a:45:4d:42:
         14:a3:f9:a6:2d:94:79:48:ef:5c:be:81:e1:6c:15:91:ba:4c:
         ad:06:a8:c9:5e:74:72:fa:f9:53:bb:52:a9:41:30:70:0e:93:
         61:cf:be:9a:a6:cf:8d:00:68:bc:60:0d:01:05:74:0c:fc:61:
         c8:54:92:13:29:64:71:66:76:61:9d:49:38:cb:f1:83:d9:cd:
         eb:b7:41:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:16:28 2025 by rpki-client