Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa
File:                     3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          0UZHEccdVCz7VvaXI/nO4su+dMZ0WHQOuSTofebSGCI=
Subject key identifier:   BD:C7:5C:77:58:37:D4:62:D3:29:E4:E8:23:6B:D3:4E:65:E1:1C:64
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       16464F594C465C9E621DCCA18F31D63BBE5501BF
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 22 Jan 2025 16:28:26 +0000
ROA not before:           Wed 22 Jan 2025 16:23:26 +0000
ROA not after:            Wed 21 Jan 2026 16:28:26 +0000
asID:                     20473
IP address blocks:        176.103.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 17:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:46:4f:59:4c:46:5c:9e:62:1d:cc:a1:8f:31:d6:3b:be:55:01:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Jan 22 16:23:26 2025 GMT
            Not After : Jan 21 16:28:26 2026 GMT
        Subject: CN=BDC75C775837D462D329E4E8236BD34E65E11C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:01:31:95:07:17:ac:99:45:3e:02:ba:f2:
                    c1:81:a1:c0:79:e3:f3:c2:72:97:9f:cf:2d:16:59:
                    24:6b:6b:4c:b8:74:d8:7a:b5:56:9c:ab:a6:75:97:
                    76:b2:82:d7:ed:87:8f:9f:b8:5d:09:8a:bc:e4:f5:
                    1e:56:36:a9:af:57:3f:b3:68:b4:9f:45:df:c7:90:
                    a0:66:54:07:2c:b3:e0:f4:70:ab:8d:09:a4:d9:12:
                    b1:5f:be:84:e8:c6:ce:15:ad:8f:8e:ee:3a:a5:8a:
                    96:b3:8f:70:b0:77:61:a8:fa:6c:2f:c6:d2:67:b3:
                    d3:8d:93:e7:85:47:5c:bd:ef:27:e7:30:4f:c4:f4:
                    ae:7c:35:b1:4e:8f:7c:0a:30:17:d3:89:6f:94:ab:
                    23:18:f0:ab:2d:aa:f9:8b:e8:2c:4e:1b:be:da:d6:
                    41:02:37:b8:03:f5:80:1d:b5:5f:61:99:a0:a0:16:
                    ed:51:8e:a9:11:ec:0e:24:15:89:63:47:67:e1:72:
                    e0:e7:6f:a8:b5:e3:80:f7:f0:e8:9b:b1:85:26:79:
                    a0:60:f3:2f:82:97:c6:f2:80:e7:f1:9d:84:7a:a7:
                    b9:0e:ba:1f:10:ee:5c:ab:d3:ab:53:83:cd:80:cc:
                    7e:4d:ad:ee:b3:57:b1:dd:f0:4d:33:5a:89:c4:15:
                    3d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C7:5C:77:58:37:D4:62:D3:29:E4:E8:23:6B:D3:4E:65:E1:1C:64
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:61:46:1d:22:1a:36:66:22:82:00:52:a8:cd:5d:04:cf:
         44:63:5c:d3:f0:b8:b9:1d:49:43:6c:2b:30:94:05:58:61:4b:
         f8:7f:43:b9:44:f0:1a:62:1d:e1:e8:30:41:25:4b:11:0c:25:
         ea:6c:fb:06:c5:de:ea:e4:85:21:35:50:01:7e:67:a3:3c:51:
         57:30:2e:c6:2e:27:bd:03:41:dc:9e:2e:8d:48:d2:e9:25:87:
         eb:d0:2b:6c:ae:81:7b:2d:7a:74:26:70:14:71:4f:1c:67:73:
         8c:12:f7:90:5a:a2:06:a1:bc:7b:88:d5:eb:1c:e7:4d:8a:77:
         ca:2b:97:51:65:61:f9:d5:b2:82:5d:0f:d0:2f:dc:8f:c2:17:
         db:f1:1a:2f:43:05:85:32:0e:c8:a4:fb:06:98:f9:94:1f:e4:
         7a:fd:1a:2c:2d:5a:7b:5d:d0:ab:27:ae:0e:dc:bc:5c:9e:d7:
         07:9f:d2:17:83:5c:2f:ef:98:7e:9d:85:22:53:2d:00:77:7c:
         4b:28:f0:15:bf:4c:cb:5a:6f:f6:fa:15:69:46:8a:89:0f:72:
         c3:62:ec:ff:97:87:b9:e7:0e:38:1d:31:dd:59:87:0e:85:16:
         11:61:ce:1b:3a:f0:93:9e:4b:f6:b8:33:0e:e0:cf:c4:5d:7c:
         ff:26:d9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:42 2025 by rpki-client