Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3137332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          FYCjMxkYlU3T1F/M3esLYVs3Q8TDz8H3XlMC9y4WiSQ=
Subject key identifier:   34:DD:3B:30:B1:EA:C8:71:4C:EC:D7:17:79:24:16:97:37:90:6F:D1
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       54681EF62F8D11BF3558A47C8730BEF08CA8DD77
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20383334.roa
Signing time:             Sun 01 Jun 2025 00:02:48 +0000
ROA not before:           Sat 31 May 2025 23:57:48 +0000
ROA not after:            Sun 31 May 2026 00:02:48 +0000
asID:                     834
IP address blocks:        209.87.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:68:1e:f6:2f:8d:11:bf:35:58:a4:7c:87:30:be:f0:8c:a8:dd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May 31 23:57:48 2025 GMT
            Not After : May 31 00:02:48 2026 GMT
        Subject: CN=34DD3B30B1EAC8714CECD7177924169737906FD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8f:96:32:a5:26:0b:4c:4e:a7:14:62:d0:38:
                    d1:75:6f:62:d6:87:21:a4:26:cf:b6:4d:2b:23:18:
                    9a:46:a2:f7:42:e0:fb:17:98:4d:45:ea:a6:9a:03:
                    46:dd:b7:53:f5:60:59:1a:c4:09:85:99:8e:78:08:
                    03:f4:db:40:bf:b4:85:b9:e1:72:e6:5f:3c:9a:a7:
                    68:9f:11:88:ed:46:24:ce:53:b5:cd:d5:71:85:c1:
                    51:ab:22:10:32:1a:0a:09:a8:89:a8:29:60:39:b4:
                    6d:d0:2c:fb:c6:1d:e9:42:b0:62:d6:f8:a0:c8:0c:
                    b6:4b:f6:99:35:a3:c0:67:0d:e3:82:e0:2d:09:46:
                    c3:6a:82:b6:d1:6a:89:02:1f:77:9b:9c:02:ef:c3:
                    dd:89:b6:1d:79:fd:14:b7:80:e4:7f:f8:bb:d3:fa:
                    b9:36:de:17:51:e9:03:66:39:9d:0d:dd:e3:db:94:
                    9a:27:80:2d:cf:e9:19:67:d9:24:b0:92:cf:57:b6:
                    2d:c0:ee:2b:91:b6:bc:2a:3a:ec:f0:19:9d:20:fd:
                    eb:5c:10:37:2f:8d:1b:b6:61:f9:66:ca:db:69:39:
                    06:dc:1a:03:a1:1e:8b:e4:5e:c0:dd:bf:f6:75:74:
                    d4:32:28:28:ea:f4:37:a4:49:7a:9e:c5:5d:92:13:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:3B:30:B1:EA:C8:71:4C:EC:D7:17:79:24:16:97:37:90:6F:D1
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:82:ae:c4:2a:51:66:18:4a:ea:23:ba:9b:92:6e:7b:3b:3d:
         65:31:b7:16:ac:57:b8:fc:b7:51:cb:7c:e4:b3:c9:90:61:dd:
         6a:a6:8f:aa:8e:84:41:38:e9:fc:4b:ea:44:28:a3:ce:2d:cf:
         86:61:e1:ab:15:4b:87:1e:e6:4d:34:65:68:8c:39:09:0f:94:
         73:dd:9a:eb:6a:c5:11:68:1d:c7:10:d9:87:ca:bd:e9:8c:43:
         fd:2f:9b:0b:82:5b:b7:65:ad:d4:e9:4f:64:a1:b4:a1:21:c9:
         a2:0d:27:7a:47:bf:4d:fe:6d:8b:eb:04:df:71:ef:9a:f4:69:
         6e:ad:d7:25:00:f7:aa:44:9f:e7:35:91:41:f4:ea:c8:8d:78:
         b9:c8:b5:8b:b1:17:68:5c:03:3f:24:48:89:2d:91:30:96:bb:
         1d:3b:39:53:8c:bc:ba:7a:f8:ae:e2:cf:0b:81:05:2f:68:18:
         a0:d8:bd:07:1e:c3:99:70:b8:e8:6e:64:43:86:b2:52:0b:60:
         86:1c:2b:9c:85:fd:66:96:28:ae:14:cf:50:c1:f4:e0:f2:5e:
         f7:31:da:c7:ba:9c:27:22:49:6d:98:95:e7:71:08:59:6a:b0:
         bd:8c:0f:65:9f:cb:98:26:b9:81:45:e7:4b:e7:b9:bb:2a:e9:
         29:9a:12:64
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUVGge9i+NEb81WKR8hzC+8Iyo3XcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNTMxMjM1NzQ4WhcNMjYwNTMxMDAwMjQ4
WjAzMTEwLwYDVQQDEygzNEREM0IzMEIxRUFDODcxNENFQ0Q3MTc3OTI0MTY5NzM3
OTA2RkQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY+WMqUmC0xO
pxRi0DjRdW9i1ochpCbPtk0rIxiaRqL3QuD7F5hNReqmmgNG3bdT9WBZGsQJhZmO
eAgD9NtAv7SFueFy5l88mqdonxGI7UYkzlO1zdVxhcFRqyIQMhoKCaiJqClgObRt
0Cz7xh3pQrBi1vigyAy2S/aZNaPAZw3jguAtCUbDaoK20WqJAh93m5wC78PdibYd
ef0Ut4Dkf/i70/q5Nt4XUekDZjmdDd3j25SaJ4Atz+kZZ9kksJLPV7YtwO4rkba8
Kjrs8BmdIP3rXBA3L40btmH5ZsrbaTkG3BoDoR6L5F7A3b/2dXTUMigo6vQ3pEl6
nsVdkhNpewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDTdOzCx6shxTOzXF3kkFpc3
kG/RMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5
Mzg4NGQyYTMwLzAvMzIzMDM5MmUzODM3MmUzMTM3MzMyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRV60wDQYJKoZIhvcNAQELBQADggEB
AGWCrsQqUWYYSuojupuSbns7PWUxtxasV7j8t1HLfOSzyZBh3Wqmj6qOhEE46fxL
6kQoo84tz4Zh4asVS4ce5k00ZWiMOQkPlHPdmutqxRFoHccQ2YfKvemMQ/0vmwuC
W7dlrdTpT2ShtKEhyaINJ3pHv03+bYvrBN9x75r0aW6t1yUA96pEn+c1kUH06siN
eLnItYuxF2hcAz8kSIktkTCWux07OVOMvLp6+K7izwuBBS9oGKDYvQcew5lwuOhu
ZEOGslILYIYcK5yF/WaWKK4Uz1DB9ODyXvcx2se6nCciSW2YledxCFlqsL2MD2Wf
y5gmuYFF50vnubsq6SmaEmQ=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:38 2025 by rpki-client