Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa
File:                     3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa (raw, json)
Hash identifier:          ZkHtI6+S1RLnX7Kxix43BYG90f2H9nWn7a/pl7oJr3k=
Subject key identifier:   67:BD:38:2E:28:5E:5D:38:32:A5:72:58:8E:7D:45:30:74:1E:A8:20
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       6DBE5B7302EAD517C1C70D468D559C9AA4FB6F38
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa
Signing time:             Thu 15 May 2025 11:40:13 +0000
ROA not before:           Thu 15 May 2025 11:35:13 +0000
ROA not after:            Thu 14 May 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        205.134.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:be:5b:73:02:ea:d5:17:c1:c7:0d:46:8d:55:9c:9a:a4:fb:6f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 15 11:35:13 2025 GMT
            Not After : May 14 11:40:13 2026 GMT
        Subject: CN=67BD382E285E5D3832A572588E7D4530741EA820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d7:75:6a:5e:0c:c6:56:21:03:77:a1:75:53:
                    45:db:1c:b9:8b:06:e2:7d:22:fa:85:91:7d:08:dc:
                    6b:ae:4b:23:c1:92:28:1a:2a:87:a0:77:56:58:b6:
                    93:ef:5e:40:b5:1b:cb:4d:88:20:c7:aa:75:b9:77:
                    be:83:df:fa:f0:e1:9d:a6:7d:ca:6e:98:6f:ca:42:
                    51:1b:ed:03:7a:bf:3c:33:9c:de:d3:b4:00:96:ea:
                    d0:45:03:fe:e1:b0:03:ca:0a:70:32:7d:12:b9:84:
                    87:18:99:e7:fd:9d:46:5a:b6:a2:c2:15:33:1c:59:
                    ee:90:d0:bb:9c:a1:03:85:94:5a:fa:b0:78:b9:3a:
                    2b:73:06:23:5f:21:c2:cf:91:88:96:18:e0:91:71:
                    ae:b6:2d:76:ba:b2:e6:fa:76:a7:7a:cb:92:e8:f2:
                    63:70:96:8d:22:96:a0:58:fa:4a:87:84:ac:43:51:
                    3b:a5:41:00:29:3c:ce:5a:39:58:9e:cd:2e:c0:17:
                    9d:10:36:75:09:99:40:90:54:f9:8c:b9:fc:5c:62:
                    fc:0c:1b:b6:01:66:ef:ce:37:d3:f6:fb:ee:60:9c:
                    b8:ce:78:d9:51:d8:9b:93:65:23:fe:af:7f:a8:47:
                    d3:86:85:6d:a9:3f:9f:68:70:96:90:a9:55:64:66:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BD:38:2E:28:5E:5D:38:32:A5:72:58:8E:7D:45:30:74:1E:A8:20
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32312d3231203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:e7:c6:1d:94:22:95:00:7f:b0:a5:bd:b3:e8:dc:42:43:
         20:84:dc:bd:f0:79:ff:28:6e:64:22:c5:06:8b:dc:43:cb:5c:
         e4:9d:4a:99:1e:86:ac:77:4f:5f:d1:d7:ea:f8:f6:fa:38:71:
         6d:e2:e3:5e:6e:77:16:4e:d0:8c:c2:f6:fd:85:80:9b:a5:4c:
         ca:d4:ea:3e:6c:9f:10:f7:08:03:20:03:3d:b4:f5:7f:b7:ab:
         6e:43:e8:68:1c:da:ee:30:37:e2:c5:f4:b5:f0:55:ee:19:04:
         f6:c0:15:45:de:9d:e9:20:30:52:b4:21:45:51:ca:63:2c:b6:
         45:43:19:e0:02:f1:5c:0a:c3:6b:ee:ff:66:7b:8d:51:03:42:
         18:a0:df:23:83:6b:a3:7e:b5:9f:00:34:92:b9:67:1b:c4:b0:
         aa:2c:b9:03:a7:95:5b:1d:d5:63:b8:41:8a:75:81:a4:93:93:
         c5:1d:73:be:30:20:95:21:7f:d2:0f:de:9d:a7:99:8c:df:a0:
         f9:d8:8d:11:14:ff:28:2a:fa:6b:3d:48:85:82:0d:c3:86:50:
         62:6a:33:54:a6:b5:a6:06:af:ee:ae:4e:40:1e:55:12:2e:bc:
         49:9a:19:23:ec:f5:5a:74:6c:c3:e0:a4:04:93:02:12:44:1a:
         a5:a4:28:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:42:33 2025 by rpki-client