Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203632393433.roa
File:                     3137332e3234372e3233302e302f32342d3234203d3e203632393433.roa (raw, json)
Hash identifier:          tZZZdClfr0Hg5hyEP3RuR0oW9plM335DE3vnJ//V/90=
Subject key identifier:   9D:BF:6F:88:29:68:39:B9:47:9F:CD:AE:B9:36:62:C6:1D:E9:7F:C1
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       50ED8328E05EEADF95BE398FB791394865E3A536
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203632393433.roa
Signing time:             Thu 27 Feb 2025 17:21:23 +0000
ROA not before:           Thu 27 Feb 2025 17:16:23 +0000
ROA not after:            Thu 26 Feb 2026 17:21:23 +0000
asID:                     62943
IP address blocks:        173.247.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ed:83:28:e0:5e:ea:df:95:be:39:8f:b7:91:39:48:65:e3:a5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Feb 27 17:16:23 2025 GMT
            Not After : Feb 26 17:21:23 2026 GMT
        Subject: CN=9DBF6F88296839B9479FCDAEB93662C61DE97FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3c:2c:6a:28:95:d8:30:e3:38:37:e7:80:17:
                    97:c8:d6:51:70:48:6c:88:e5:c7:6c:59:1b:37:b9:
                    b1:84:c2:f2:f9:cf:c9:37:2b:d5:fa:4d:b4:7d:49:
                    b4:9b:8a:c2:66:45:63:12:35:33:e3:95:24:e3:63:
                    67:fc:4f:a5:cb:fc:4e:3f:5e:92:15:11:de:d5:d4:
                    63:f6:5b:b7:5f:99:60:7f:23:f3:a3:72:6f:3b:3f:
                    f4:fa:7c:a6:82:e7:76:8c:01:3c:3b:c8:dc:23:27:
                    8d:9b:20:fc:5a:91:f2:3a:b2:48:92:63:27:45:11:
                    66:18:f8:06:90:5b:15:04:0f:dd:1b:33:1f:54:a7:
                    2d:68:2a:29:69:84:ce:bc:29:0e:47:c9:ce:69:43:
                    67:6f:03:70:95:ec:7e:c2:00:e1:2c:12:18:19:a5:
                    06:fa:03:fd:2d:75:eb:0f:d5:2b:92:ed:4e:84:f1:
                    95:01:44:2f:d0:4b:7d:6e:1c:84:72:8b:cd:84:fd:
                    40:50:c0:3b:18:c0:e7:4b:bf:3c:12:55:71:97:bf:
                    75:10:ff:14:ac:5d:9b:d5:fa:fb:01:27:6f:c4:43:
                    e1:ab:be:e5:eb:a9:53:2c:63:07:b0:90:70:b0:4a:
                    80:85:06:bf:e2:86:72:ee:68:3c:da:4c:0e:0c:e4:
                    34:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BF:6F:88:29:68:39:B9:47:9F:CD:AE:B9:36:62:C6:1D:E9:7F:C1
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203632393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:f4:5a:2a:80:48:55:e8:2f:7d:22:8e:02:cf:f1:38:33:cf:
         63:b3:ec:f8:e4:0f:69:76:af:c1:cc:4b:f6:e4:f0:85:87:fc:
         ca:7e:44:69:cc:39:f9:c3:a0:50:cf:4d:ad:58:0d:90:cc:c6:
         3c:c9:8e:ec:8a:92:04:37:fc:f5:3e:76:0b:80:0e:1c:4f:92:
         4a:2d:b2:aa:b1:52:62:d2:72:79:c0:5d:4f:c5:ec:63:70:6c:
         86:85:5e:a3:4c:39:23:91:67:8a:0a:e8:1d:73:47:bd:30:8f:
         a0:6e:fd:fc:89:64:3b:8c:7a:5e:2e:92:25:e6:56:5d:6e:b8:
         68:a9:69:fd:7d:91:9c:07:a1:d5:df:ed:9f:3a:6e:95:4e:ee:
         0c:15:0f:3d:ec:ac:e8:0b:1c:7e:6a:2f:8b:c4:20:6a:7f:11:
         cd:62:52:20:1c:f6:90:6b:0c:00:dd:23:08:06:e6:6c:fc:c0:
         e7:d6:b5:ab:50:ab:3c:1f:10:f2:a2:0a:7a:1f:7b:1c:e1:7f:
         f4:4c:0e:5c:b5:3d:48:29:5f:74:ad:82:1c:96:e4:37:45:b7:
         5c:ab:6f:44:83:6b:9b:04:8d:8f:8f:d4:2c:ab:4b:1a:a8:a1:
         69:e0:04:49:2b:8c:e1:66:9e:16:b3:06:20:c0:5a:e8:46:93:
         08:8b:d9:0b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUO2DKOBe6t+VvjmPt5E5SGXjpTYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwMjI3MTcxNjIzWhcNMjYwMjI2MTcyMTIz
WjAzMTEwLwYDVQQDEyg5REJGNkY4ODI5NjgzOUI5NDc5RkNEQUVCOTM2NjJDNjFE
RTk3RkMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTwsaiiV2DDj
ODfngBeXyNZRcEhsiOXHbFkbN7mxhMLy+c/JNyvV+k20fUm0m4rCZkVjEjUz45Uk
42Nn/E+ly/xOP16SFRHe1dRj9lu3X5lgfyPzo3JvOz/0+nymgud2jAE8O8jcIyeN
myD8WpHyOrJIkmMnRRFmGPgGkFsVBA/dGzMfVKctaCopaYTOvCkOR8nOaUNnbwNw
lex+wgDhLBIYGaUG+gP9LXXrD9Urku1OhPGVAUQv0Et9bhyEcovNhP1AUMA7GMDn
S788ElVxl791EP8UrF2b1fr7ASdvxEPhq77l66lTLGMHsJBwsEqAhQa/4oZy7mg8
2kwODOQ0dwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJ2/b4gpaDm5R5/Nrrk2YsYd
6X/BMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMyMzkzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffmMA0GCSqGSIb3DQEB
CwUAA4IBAQBQ9FoqgEhV6C99Io4Cz/E4M89js+z45A9pdq/BzEv25PCFh/zKfkRp
zDn5w6BQz02tWA2QzMY8yY7sipIEN/z1PnYLgA4cT5JKLbKqsVJi0nJ5wF1Pxexj
cGyGhV6jTDkjkWeKCugdc0e9MI+gbv38iWQ7jHpeLpIl5lZdbrhoqWn9fZGcB6HV
3+2fOm6VTu4MFQ897KzoCxx+ai+LxCBqfxHNYlIgHPaQawwA3SMIBuZs/MDn1rWr
UKs8HxDyogp6H3sc4X/0TA5ctT1IKV90rYIcluQ3Rbdcq29Eg2ubBI2Pj9Qsq0sa
qKFp4ARJK4zhZp4WswYgwFroRpMIi9kL
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:54 2025 by rpki-client