Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa
File:                     3137332e3234372e3233302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9WnnT9bATyXyzyBKPtKkjSgbsdo8RaagaBQ3FCIV+Mc=
Subject key identifier:   B3:D4:49:A1:50:6D:87:CE:28:01:BF:4F:CC:47:C8:17:6D:9E:40:94
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       2A35475D16CCB727CFD7FC5434DE64F1DFCDA27D
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 28 May 2025 14:43:59 +0000
ROA not before:           Wed 28 May 2025 14:38:59 +0000
ROA not after:            Wed 27 May 2026 14:43:59 +0000
asID:                     834
IP address blocks:        173.247.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 13:39:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:35:47:5d:16:cc:b7:27:cf:d7:fc:54:34:de:64:f1:df:cd:a2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 28 14:38:59 2025 GMT
            Not After : May 27 14:43:59 2026 GMT
        Subject: CN=B3D449A1506D87CE2801BF4FCC47C8176D9E4094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:d3:47:14:da:fb:df:d4:16:a7:ed:c7:74:
                    8a:2b:d4:93:5d:0d:8e:b0:6e:56:df:b4:ba:b1:d0:
                    50:01:b7:eb:0c:6d:8e:c8:e3:f6:cb:31:d1:67:65:
                    d8:9d:4e:58:2d:92:8b:52:8a:57:ef:1c:d6:57:4d:
                    39:e4:ee:4f:16:9b:31:87:9f:69:ac:a8:e5:ef:3e:
                    20:7c:2c:c9:f8:b8:c7:bb:25:b8:9d:0f:62:97:e8:
                    b1:4b:15:77:bf:60:c4:81:16:4e:fb:d3:bf:a4:8c:
                    92:ba:d8:4a:34:db:aa:86:3f:51:28:b7:2d:16:f2:
                    17:03:96:8d:22:0b:ae:14:19:a6:58:a1:b0:87:78:
                    50:6d:fd:25:e8:f0:8d:1a:1c:4a:f8:70:53:0b:70:
                    ca:ec:15:89:b2:12:23:f6:f6:74:6c:dc:e2:20:4c:
                    a4:b2:2c:c9:92:67:34:be:a1:73:22:81:8a:c6:90:
                    e1:50:de:33:ef:58:71:c2:ba:49:c1:64:e8:93:9c:
                    a6:b7:96:4b:e0:aa:ef:81:fe:2c:01:61:4a:b3:a2:
                    9b:98:87:5a:e7:a8:84:99:b6:ac:b3:f4:11:e9:df:
                    97:fe:44:de:96:62:c9:df:33:6a:0b:8b:6f:88:ad:
                    8e:af:ff:07:3b:37:e8:19:8d:9a:70:ba:d1:ee:d4:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D4:49:A1:50:6D:87:CE:28:01:BF:4F:CC:47:C8:17:6D:9E:40:94
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:68:4d:26:f4:e6:fd:9b:15:9a:10:30:d9:0a:49:e9:17:61:
         e3:51:ea:69:b7:25:7f:c2:f9:f8:35:25:fd:16:55:be:08:b6:
         9d:1c:29:a5:b3:bc:7c:3b:59:8a:ec:73:85:0c:aa:30:06:4a:
         8c:40:15:69:fb:e6:64:06:de:d4:0a:bf:ba:37:74:7c:01:07:
         d5:96:5c:c3:d2:53:82:82:58:10:dd:f9:dd:04:82:e6:72:4b:
         2a:0c:9d:26:b4:6e:a1:42:46:b5:0b:0f:38:5e:d8:05:68:10:
         23:5e:f8:a4:e8:d1:c1:7b:3f:97:75:a0:b9:f5:56:a3:e3:a1:
         b1:21:a9:bf:f7:a8:13:d8:6e:d4:24:5e:bc:0f:75:d7:87:e1:
         09:26:ae:08:cd:40:5c:65:26:0c:81:c9:55:4e:72:01:09:96:
         c0:fc:4d:f8:33:50:a2:e1:ef:8b:86:a6:ad:4a:29:2f:c7:0d:
         56:52:75:03:1f:96:86:4b:09:7b:24:05:07:32:b8:ce:24:b6:
         8f:08:23:18:a8:ce:1e:98:4f:07:c5:57:c0:b6:a9:64:23:ac:
         b7:37:cb:a5:22:0c:28:6f:9f:c4:04:60:9c:fd:6c:d3:9d:21:
         ab:7d:be:11:a4:e4:31:4d:d9:a3:cf:56:b2:90:56:e5:35:e2:
         e7:fd:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:38:21 2025 by rpki-client