Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203233343730.roa
File:                     3231362e37332e3135372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          d64TeG3v5fBWZSALdRVyo/YPGrGkqZjPqnY6C61h72c=
Subject key identifier:   B4:EC:0A:D6:1C:9D:37:F4:3B:DD:84:24:40:A0:01:79:51:F3:18:24
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       45C012859B13D911D41B3901525EE3342E002594
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 20 May 2025 19:32:59 +0000
ROA not before:           Tue 20 May 2025 19:27:59 +0000
ROA not after:            Tue 19 May 2026 19:32:59 +0000
asID:                     23470
IP address blocks:        216.73.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 01:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c0:12:85:9b:13:d9:11:d4:1b:39:01:52:5e:e3:34:2e:00:25:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May 20 19:27:59 2025 GMT
            Not After : May 19 19:32:59 2026 GMT
        Subject: CN=B4EC0AD61C9D37F43BDD842440A0017951F31824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:75:62:9a:a1:2f:ae:ac:ea:65:71:21:54:
                    e7:78:7d:12:ca:74:74:56:fe:61:7c:b9:8d:10:f8:
                    9b:f5:ab:ff:e9:a4:8d:d2:72:f2:ec:ba:17:b3:9f:
                    30:7b:d0:4e:de:b9:16:9c:9d:53:87:47:c0:1e:29:
                    b3:42:c5:52:35:67:c2:9a:46:67:db:c0:5b:6c:4a:
                    1f:f1:c2:38:23:9e:35:6d:93:ef:ac:c5:5a:eb:e3:
                    d2:7d:13:88:f0:2d:fe:fe:a7:b3:d2:11:6a:4c:9f:
                    e3:4c:fc:ee:90:d8:e1:0b:b9:0d:b1:73:d2:bf:23:
                    59:12:b6:2b:3e:4b:3f:3e:3b:d1:64:a6:66:65:65:
                    e4:e1:47:a4:14:10:ea:fe:d3:76:e4:56:53:28:70:
                    af:fa:9c:d5:43:c6:ff:ee:39:72:c7:4c:3b:ed:7a:
                    53:91:34:c2:01:86:6b:4c:dd:9c:b0:98:44:7c:07:
                    99:ff:4f:e7:d6:89:0d:13:bf:bf:03:57:7d:da:e0:
                    c0:59:b8:b1:7e:fe:02:8e:fe:8a:b3:f1:0b:87:01:
                    8b:67:83:55:3b:26:41:64:ca:72:16:17:59:93:e8:
                    99:db:da:b0:67:e0:84:da:bc:9a:09:56:5b:d9:c5:
                    74:25:76:20:ce:fb:e2:3e:2a:9c:8f:4c:26:82:ff:
                    05:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:0A:D6:1C:9D:37:F4:3B:DD:84:24:40:A0:01:79:51:F3:18:24
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:5d:2c:31:1e:77:d6:35:a4:9c:79:52:8e:88:44:72:1d:
         c0:94:8c:46:49:d8:cc:03:09:80:e3:40:cd:69:50:a9:a9:9d:
         d4:fb:ba:7a:ee:d8:95:e8:fb:32:d5:6f:bf:b7:a3:0e:a9:f5:
         80:30:3d:29:d7:b0:5f:99:54:06:2c:08:ee:a9:aa:2a:15:e0:
         38:c0:c6:aa:ed:0c:d8:cc:00:a0:81:41:72:f4:48:a8:d1:9c:
         ab:8d:e7:ca:d3:6d:cd:ce:9d:46:fa:55:f8:d9:b6:3a:f6:a6:
         a8:6b:6e:29:4e:5c:78:9f:23:47:47:b1:12:34:6c:4e:9c:74:
         34:d5:01:e6:8f:97:81:e8:7e:6d:02:ce:92:81:96:f0:0a:a6:
         37:44:e0:9b:ed:ad:84:72:49:84:b5:5c:ca:93:8a:94:31:70:
         16:05:de:7a:13:36:c5:44:e4:25:c1:b5:c6:e6:88:52:c1:7b:
         53:53:a5:c1:1b:ac:8a:f5:a0:d4:a3:90:31:9b:cc:28:c8:73:
         11:ae:88:68:57:e4:a0:6b:05:4f:11:44:4e:c8:4c:2a:47:53:
         b3:2a:c8:2f:f9:c0:37:f2:57:0b:3c:86:d9:e8:e0:55:79:27:
         fb:62:36:63:bc:84:09:74:64:28:2d:0a:2f:68:6d:15:0f:c1:
         5f:59:4b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:14 2025 by rpki-client