Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS57883.roa
File:                     AS57883.roa (raw, json)
Hash identifier:          WfQbop5+M8CwwdKL87Yx8/LRUo9wkkO3oN41hCT7e0o=
Subject key identifier:   0F:D3:7E:E0:20:F8:B3:A6:20:FB:06:7C:34:41:F2:77:F0:14:01:E8
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       034EB1D1633B9302F547F70209847E8776C7F547
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS57883.roa
Signing time:             Thu 03 Jul 2025 15:51:22 +0000
ROA not before:           Thu 03 Jul 2025 15:46:22 +0000
ROA not after:            Thu 02 Jul 2026 15:51:22 +0000
asID:                     57883
IP address blocks:        2a06:a005:110::/44 maxlen: 48
                          2a06:a005:120::/44 maxlen: 48
                          2a06:a005:130::/44 maxlen: 48
                          2a06:a005:140::/44 maxlen: 48
                          2a06:a005:150::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4e:b1:d1:63:3b:93:02:f5:47:f7:02:09:84:7e:87:76:c7:f5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:46:22 2025 GMT
            Not After : Jul  2 15:51:22 2026 GMT
        Subject: CN=0FD37EE020F8B3A620FB067C3441F277F01401E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:d7:02:55:59:7e:02:4d:a7:a0:75:27:ee:
                    02:0f:a6:f4:1e:b6:ce:17:94:fb:b3:d7:9b:72:98:
                    d0:ed:43:fc:a3:6b:85:c0:34:13:c3:fb:c3:ac:52:
                    3b:d1:e6:11:20:7e:6e:51:5b:78:6b:b8:aa:bd:46:
                    40:02:99:ca:f9:aa:b8:48:93:0f:24:f0:b4:e8:0c:
                    d7:ac:9b:38:be:af:01:ed:bf:7e:b9:ee:46:f5:9e:
                    9a:99:a4:a5:41:b6:20:31:8b:cd:08:79:d4:3d:0f:
                    d1:b9:21:f8:09:09:8e:b6:d2:e9:d1:6a:7e:eb:1a:
                    a2:e3:1a:13:f5:21:c3:4e:dd:18:06:ad:eb:df:10:
                    59:bd:ef:3b:12:c2:70:55:8f:88:87:86:51:46:0e:
                    03:0f:9a:0e:7a:bf:e5:8e:66:ae:b2:38:25:ae:5d:
                    99:a5:ff:40:ec:d2:2a:15:61:c6:6e:ee:34:77:0f:
                    7d:53:78:92:3e:3b:f8:98:38:e2:3c:2f:15:96:31:
                    9f:c9:73:ba:f0:6b:66:4c:b5:b0:d6:7f:f2:b2:38:
                    52:89:b6:2c:d6:b9:a9:c1:c9:b7:80:a8:d6:bc:1d:
                    3b:58:4d:3c:df:6a:51:a9:d1:61:47:bd:50:25:d4:
                    b7:4a:25:dd:de:c2:b7:af:a3:7c:d7:52:60:47:73:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D3:7E:E0:20:F8:B3:A6:20:FB:06:7C:34:41:F2:77:F0:14:01:E8
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS57883.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:110::-2a06:a005:15f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:f7:72:90:e7:b6:90:a6:eb:6b:d3:c1:21:54:34:b0:f1:
         87:4d:15:ae:1e:e8:87:76:d4:08:02:90:d8:af:90:ae:3b:b0:
         b8:fb:92:4f:17:b5:1f:c9:62:30:79:e6:64:82:88:ef:70:e9:
         2e:8f:27:26:9e:55:78:11:34:34:b8:51:98:20:5e:9a:26:ac:
         b8:39:09:18:88:54:bc:09:f4:c2:e4:25:be:5e:ae:72:f1:ed:
         0c:de:78:4a:f7:12:3c:f7:6c:5a:04:3e:12:1c:b5:de:25:50:
         6e:1a:c6:fe:39:74:af:ad:42:9e:1e:9d:b2:ec:2d:ef:a0:56:
         af:78:f9:7b:e5:97:93:53:dd:a6:4e:17:ce:2a:f6:2a:00:1d:
         cd:63:b5:4c:e4:35:68:81:0a:6c:67:9f:1b:ab:de:ae:ff:72:
         83:af:e5:76:0e:9a:e2:7a:5d:33:bb:d2:cd:7d:93:da:c4:29:
         1d:8d:f8:25:a2:30:66:c4:38:f6:6c:62:fa:42:49:1a:5b:06:
         5c:d9:c9:b6:cb:9b:24:92:f4:a8:59:0e:11:98:3a:f1:ac:f8:
         ed:fa:c7:c7:2e:2d:68:5c:90:f0:b4:31:43:87:14:93:a6:c5:
         83:9c:fa:b4:1d:62:f5:71:4d:46:79:46:46:ed:88:66:58:e4:
         24:a2:e0:8e
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUA06x0WM7kwL1R/cCCYR+h3bH9UcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ2MjJaFw0yNjA3MDIxNTUxMjJaMDMxMTAvBgNV
BAMTKDBGRDM3RUUwMjBGOEIzQTYyMEZCMDY3QzM0NDFGMjc3RjAxNDAxRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3dcCVVl+Ak2noHUn7gIPpvQe
ts4XlPuz15tymNDtQ/yja4XANBPD+8OsUjvR5hEgfm5RW3hruKq9RkACmcr5qrhI
kw8k8LToDNesmzi+rwHtv3657kb1npqZpKVBtiAxi80IedQ9D9G5IfgJCY620unR
an7rGqLjGhP1IcNO3RgGrevfEFm97zsSwnBVj4iHhlFGDgMPmg56v+WOZq6yOCWu
XZml/0Ds0ioVYcZu7jR3D31TeJI+O/iYOOI8LxWWMZ/Jc7rwa2ZMtbDWf/KyOFKJ
tizWuanBybeAqNa8HTtYTTzfalGp0WFHvVAl1LdKJd3ewrevo3zXUmBHc2V9AgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUD9N+4CD4s6Yg+wZ8NEHyd/AUAegwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NTc4ODMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcB
Af8EHjAcMBoEAgACMBQwEgMHBCoGoAUBEAMHBSoGoAUBQDANBgkqhkiG9w0BAQsF
AAOCAQEAPiX3cpDntpCm62vTwSFUNLDxh00Vrh7oh3bUCAKQ2K+QrjuwuPuSTxe1
H8liMHnmZIKI73DpLo8nJp5VeBE0NLhRmCBemiasuDkJGIhUvAn0wuQlvl6ucvHt
DN54SvcSPPdsWgQ+Ehy13iVQbhrG/jl0r61Cnh6dsuwt76BWr3j5e+WXk1Pdpk4X
zir2KgAdzWO1TOQ1aIEKbGefG6verv9yg6/ldg6a4npdM7vSzX2T2sQpHY34JaIw
ZsQ49mxi+kJJGlsGXNnJtsubJJL0qFkOEZg68az47frHxy4taFyQ8LQxQ4cUk6bF
g5z6tB1i9XFNRnlGRu2IZljkJKLgjg==
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:17:40 2025 by rpki-client