Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          1GINhHI4ZVGvW1nO8pn2xboJOESQdvNVACO1l5X42s8=
Subject key identifier:   87:3C:52:79:CD:A8:37:16:4B:45:06:79:13:3D:B0:C6:86:52:50:75
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       59BE36A4EFBE3DD60E82492EB70ABBADF0AE7F6C
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 16 Jan 2025 12:40:30 +0000
ROA not before:           Thu 16 Jan 2025 12:35:30 +0000
ROA not after:            Thu 15 Jan 2026 12:40:30 +0000
asID:                     17139
IP address blocks:        173.247.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Apr 2025 04:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:be:36:a4:ef:be:3d:d6:0e:82:49:2e:b7:0a:bb:ad:f0:ae:7f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jan 16 12:35:30 2025 GMT
            Not After : Jan 15 12:40:30 2026 GMT
        Subject: CN=873C5279CDA837164B450679133DB0C686525075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:e7:e0:1a:34:c2:75:e2:bb:45:ae:46:da:
                    4f:8a:41:c4:d1:6d:b2:19:46:b9:e3:d2:40:ab:92:
                    03:7b:03:da:e2:db:ea:db:34:a9:46:bc:d7:35:8f:
                    d6:73:c2:e1:57:70:42:8a:ac:6d:df:da:52:9e:75:
                    4b:45:48:cd:e5:a1:cb:f2:5f:75:0d:bc:5d:da:26:
                    7c:ba:4f:42:6d:86:73:93:a4:1b:ef:2f:67:36:1f:
                    bb:3d:e7:e6:45:16:78:93:25:6d:ee:5d:a2:1f:94:
                    7f:36:77:9e:94:aa:9c:34:64:65:e9:aa:d0:ee:70:
                    bd:d6:81:dc:10:96:79:3d:75:66:fb:9e:7e:bd:11:
                    1a:b0:7f:92:ea:2f:9c:f2:70:c0:86:43:9d:03:d4:
                    31:54:2a:7f:ef:38:4e:4d:b7:4c:47:0e:3a:23:81:
                    d4:6c:76:36:25:fb:b0:c3:d1:a5:76:7a:54:47:63:
                    4f:72:b4:80:4c:eb:e5:5a:eb:34:d9:20:6c:11:8f:
                    22:9a:59:a6:09:ee:43:0f:19:e5:61:0e:53:0e:1c:
                    b6:83:e7:8e:14:85:23:a3:b9:4f:32:ed:9b:5a:3c:
                    e0:fe:e4:92:46:62:fa:51:c8:28:3d:04:20:09:d4:
                    d5:e9:85:c2:4e:c6:2d:7f:94:eb:45:7d:b7:2c:f2:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3C:52:79:CD:A8:37:16:4B:45:06:79:13:3D:B0:C6:86:52:50:75
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:49:67:f6:8c:c0:d8:e3:ba:b1:8e:3d:a4:3b:6f:7c:9f:7c:
         7d:95:17:45:23:69:f8:0a:79:96:18:c3:1c:12:33:a6:88:b7:
         55:e9:11:7c:39:be:75:99:18:a2:3f:ff:a0:8b:cc:96:75:49:
         be:f4:b6:d2:ad:a8:94:f4:21:23:e7:0f:f0:9d:6b:8a:bd:5f:
         64:6a:f6:11:40:b3:0c:bf:37:49:e8:5e:3a:11:70:6b:73:f3:
         fb:98:df:ed:94:bc:64:f0:8f:5e:da:43:8f:51:11:9c:89:8d:
         7f:cc:b5:07:77:da:85:84:ff:17:b7:e5:19:08:3d:23:2f:da:
         7c:9d:50:f4:dc:1d:f6:e4:af:b0:e8:cc:4d:75:16:b5:0a:43:
         bd:6b:22:1d:3d:15:d1:9e:0d:60:39:fd:62:da:40:c3:df:98:
         8d:98:0e:82:d7:4a:8c:3c:eb:12:81:6d:5a:0f:e9:6e:de:3b:
         96:5a:37:3a:6e:dc:b0:d0:0f:60:4c:e9:3c:31:e8:19:87:f7:
         ef:64:8b:04:b7:3e:47:5a:e8:28:c5:28:de:54:01:c7:4c:bb:
         5b:d3:33:06:8d:c6:16:e6:5f:1b:e2:2f:d8:9c:a5:16:a6:cb:
         b5:98:c1:66:86:56:fe:83:42:cd:3f:15:6f:d9:80:59:44:8b:
         0b:7f:12:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:02:59 2025 by rpki-client