Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e203630313137.roa
File:                     3137322e39392e32312e302f32342d3234203d3e203630313137.roa (raw, json)
Hash identifier:          KUozlfibxgxy8BHgn5XwI0wVjh1TtFzTl/9NCpDpd78=
Subject key identifier:   7B:17:F0:05:14:3A:03:84:69:5D:26:4C:36:CD:04:9C:89:D8:B3:8E
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       2C5E4C36F223A380173F3AF4E00367F0B66CB889
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e203630313137.roa
Signing time:             Tue 03 Jun 2025 15:04:42 +0000
ROA not before:           Tue 03 Jun 2025 14:59:42 +0000
ROA not after:            Tue 02 Jun 2026 15:04:42 +0000
asID:                     60117
IP address blocks:        172.99.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5e:4c:36:f2:23:a3:80:17:3f:3a:f4:e0:03:67:f0:b6:6c:b8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Jun  3 14:59:42 2025 GMT
            Not After : Jun  2 15:04:42 2026 GMT
        Subject: CN=7B17F005143A0384695D264C36CD049C89D8B38E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:86:4d:66:bd:3e:e4:02:d1:32:51:4b:52:
                    32:2e:e2:db:1b:b7:45:50:14:0f:99:bd:18:5f:40:
                    a7:e2:08:bd:25:8a:6a:4e:52:13:0b:4c:c5:5c:c6:
                    f2:c8:30:a7:83:76:67:bb:af:c0:2c:a8:bb:61:ca:
                    9b:d0:76:e7:55:e0:2c:35:b0:61:62:70:b2:12:cd:
                    d8:fd:68:3d:ea:b3:95:7f:d1:6a:c6:86:88:17:2c:
                    45:c9:bf:6e:06:6d:9b:e2:99:10:8d:d7:ef:f1:ef:
                    ab:71:29:ed:22:95:5a:5c:6f:d6:49:6d:fd:28:94:
                    4f:a3:1e:00:6d:ae:08:68:ac:b4:b3:02:71:13:2c:
                    f9:43:68:1d:0e:7a:18:35:7a:ac:88:e6:43:2e:f7:
                    96:78:93:d1:1a:bd:d1:58:c2:3e:ae:53:3e:a6:21:
                    69:e1:4e:a2:c3:95:07:57:95:06:d4:a0:ad:8d:3e:
                    2f:6b:4d:c0:83:04:be:95:97:5c:90:2d:f0:64:9c:
                    7d:fd:3e:0a:15:24:63:e9:5c:d5:24:79:36:27:77:
                    87:c2:e1:b3:0e:ad:01:c3:8b:c7:b0:2d:35:e6:62:
                    23:5f:de:97:62:85:b8:4a:90:56:15:80:52:f0:4d:
                    46:f0:62:f0:39:6a:1e:3c:da:6f:ce:a0:ec:61:46:
                    10:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:17:F0:05:14:3A:03:84:69:5D:26:4C:36:CD:04:9C:89:D8:B3:8E
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e203630313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e9:0b:d4:57:2c:b0:3d:3f:5b:9b:08:58:b4:db:3e:aa:f8:
         42:ff:2a:80:0a:ba:dc:d2:c9:f8:c6:85:1f:42:5b:c6:28:e6:
         2e:ae:bd:60:cd:d5:14:23:d3:bf:9c:ac:0a:51:ed:c0:ae:5b:
         a2:75:a8:af:60:6e:d7:e9:79:cf:f9:d0:c0:92:52:47:d4:a2:
         3f:ad:98:ae:75:b5:1e:5f:59:01:f1:b3:0a:19:a0:4e:00:c4:
         11:96:d9:57:cf:a6:eb:ae:0e:2a:15:7d:af:46:ff:a0:c5:32:
         e7:6c:97:1a:0a:43:19:51:3d:da:3d:f8:39:79:36:f1:d9:fa:
         e4:c7:c0:60:c4:2f:34:92:b7:db:20:7f:05:91:90:24:7a:4d:
         b0:b2:36:16:dd:ea:27:ef:14:a9:62:26:40:53:ba:e6:af:16:
         b4:bd:6a:bd:ed:8c:97:bc:2b:d6:14:a5:b1:60:d9:43:46:b8:
         6e:bb:6e:f6:49:4f:6f:ac:b7:be:80:a2:45:61:44:25:1d:27:
         90:95:10:3b:e7:ed:46:4e:c8:fe:0d:fb:a1:f4:d6:12:7a:45:
         f7:25:3c:a1:04:2b:89:77:5d:08:6b:e1:4c:ae:56:7c:1e:96:
         a9:22:ee:83:55:68:7d:38:ce:8c:00:72:d2:24:3b:47:a5:23:
         cd:0f:ea:94
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIULF5MNvIjo4AXPzr04ANn8LZsuIkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3
MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjUwNjAzMTQ1OTQyWhcNMjYwNjAyMTUwNDQy
WjAzMTEwLwYDVQQDEyg3QjE3RjAwNTE0M0EwMzg0Njk1RDI2NEMzNkNEMDQ5Qzg5
RDhCMzhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGmGTWa9PuQC
0TJRS1IyLuLbG7dFUBQPmb0YX0Cn4gi9JYpqTlITC0zFXMbyyDCng3Znu6/ALKi7
Ycqb0HbnVeAsNbBhYnCyEs3Y/Wg96rOVf9FqxoaIFyxFyb9uBm2b4pkQjdfv8e+r
cSntIpVaXG/WSW39KJRPox4Aba4IaKy0swJxEyz5Q2gdDnoYNXqsiOZDLveWeJPR
Gr3RWMI+rlM+piFp4U6iw5UHV5UG1KCtjT4va03AgwS+lZdckC3wZJx9/T4KFSRj
6VzVJHk2J3eHwuGzDq0Bw4vHsC015mIjX96XYoW4SpBWFYBS8E1G8GLwOWoePNpv
zqDsYUYQQwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHsX8AUUOgOEaV0mTDbNBJyJ
2LOOMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv
NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4
MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl
MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzAzMTMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYxUwDQYJKoZIhvcNAQELBQAD
ggEBAEvpC9RXLLA9P1ubCFi02z6q+EL/KoAKutzSyfjGhR9CW8Yo5i6uvWDN1RQj
07+crApR7cCuW6J1qK9gbtfpec/50MCSUkfUoj+tmK51tR5fWQHxswoZoE4AxBGW
2VfPpuuuDioVfa9G/6DFMudslxoKQxlRPdo9+Dl5NvHZ+uTHwGDELzSSt9sgfwWR
kCR6TbCyNhbd6ifvFKliJkBTuuavFrS9ar3tjJe8K9YUpbFg2UNGuG67bvZJT2+s
t76AokVhRCUdJ5CVEDvn7UZOyP4N+6H01hJ6RfclPKEEK4l3XQhr4UyuVnwelqki
7oNVaH04zowActIkO0elI80P6pQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:34:33 2025 by rpki-client