Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030303a61623a3a2f36342d3634203d3e203137313339.roa
File:                     323630373a666361383a623030303a61623a3a2f36342d3634203d3e203137313339.roa (raw, json)
Hash identifier:          NT8akp0MlnYXLQyYKMAcEH0j/TQl2fEathwLmoowaW0=
Subject key identifier:   32:C7:1B:24:A5:69:6D:35:A1:81:1B:E8:06:AA:88:F4:11:3B:72:DD
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       22D1FC190035517CF6E5F2C14D69519695CABCD6
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030303a61623a3a2f36342d3634203d3e203137313339.roa
Signing time:             Thu 16 Jan 2025 12:43:50 +0000
ROA not before:           Thu 16 Jan 2025 12:38:50 +0000
ROA not after:            Thu 15 Jan 2026 12:43:50 +0000
asID:                     17139
IP address blocks:        2607:fca8:b000:ab::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d1:fc:19:00:35:51:7c:f6:e5:f2:c1:4d:69:51:96:95:ca:bc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jan 16 12:38:50 2025 GMT
            Not After : Jan 15 12:43:50 2026 GMT
        Subject: CN=32C71B24A5696D35A1811BE806AA88F4113B72DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dc:2c:ac:f2:4c:b2:42:41:72:68:1c:95:fa:
                    f5:5f:90:9b:32:60:f7:dc:5f:b0:d2:73:87:6f:bb:
                    b5:7b:20:2c:46:03:20:ce:32:16:fb:18:94:13:71:
                    12:5c:f4:ba:3a:72:67:6e:ef:e1:1d:90:61:75:3b:
                    36:e2:15:69:ee:fd:f1:8a:ae:77:d7:38:d3:c0:2f:
                    0b:ff:99:e6:9b:4a:48:a8:67:5d:10:f8:92:1b:4f:
                    de:4b:58:a0:01:ef:13:21:e0:e7:c3:ec:41:79:5e:
                    04:ea:a1:39:b7:57:6c:14:3d:eb:d7:2a:eb:2d:84:
                    e6:e0:16:1a:a3:42:92:cf:c6:22:f2:5c:9b:a8:8b:
                    b7:b7:ce:27:e6:f9:f6:ee:8d:23:a2:58:8e:74:de:
                    aa:20:aa:59:f8:7a:82:31:45:41:51:56:70:1b:cf:
                    24:21:b6:a8:f4:90:33:8d:c0:da:37:92:cd:a5:2a:
                    a5:b2:b4:6f:3f:d8:49:bc:3f:31:31:8e:c2:b4:05:
                    44:e4:41:99:b0:68:b1:dc:35:93:84:62:55:05:e8:
                    bc:c2:7e:a3:a5:b9:6e:37:80:b7:33:c4:74:ac:35:
                    3c:23:9a:97:96:30:40:05:70:8d:5f:e5:a7:da:0f:
                    6f:fe:c8:f2:61:0a:4c:10:21:3e:f6:53:55:47:68:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:1B:24:A5:69:6D:35:A1:81:1B:E8:06:AA:88:F4:11:3B:72:DD
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030303a61623a3a2f36342d3634203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:b000:ab::/64

    Signature Algorithm: sha256WithRSAEncryption
         2e:4f:f9:41:63:d9:7c:e8:52:34:31:b2:3e:c1:86:0e:b7:b7:
         88:c3:44:ae:59:c0:76:05:23:48:3e:87:24:bd:2f:70:b1:6a:
         f2:8f:e8:19:6f:81:ac:04:2d:8a:dc:08:b3:49:65:0f:bf:22:
         98:b2:92:8a:df:1c:e2:0e:67:8b:ba:05:f5:dc:d3:cf:b1:30:
         e5:50:d5:9b:4f:16:26:50:43:1f:85:46:e5:15:86:fc:a4:7d:
         c0:28:9e:c9:f7:be:c4:2f:5b:0c:d1:54:35:3d:c7:ea:8a:8e:
         b8:fd:64:2b:24:22:89:9a:1b:b5:df:a3:75:34:0e:29:1a:2b:
         62:0c:db:bf:9f:e0:d8:60:4c:f9:6a:90:8e:26:db:c4:56:5c:
         71:81:3e:4d:c8:a0:e5:e8:b8:21:8e:86:36:ac:4b:3f:28:1e:
         45:98:02:e5:ec:bc:69:12:f3:cb:f1:0e:0a:3a:4e:bf:cc:a7:
         9d:a8:c4:f8:f0:52:fa:9b:7c:22:a9:1f:da:e5:2f:2e:70:dc:
         ea:6e:4b:02:7c:6d:ea:a8:4c:88:9f:fd:3b:22:48:de:28:85:
         87:de:ec:5d:d3:5a:d6:50:b3:a9:9b:6d:90:ff:3e:3b:31:11:
         d5:d7:e8:7c:3d:31:bf:23:ea:b8:11:2b:ae:5b:71:b8:b7:e7:
         b7:48:d8:35
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUItH8GQA1UXz25fLBTWlRlpXKvNYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwMTE2MTIzODUwWhcNMjYwMTE1MTI0MzUw
WjAzMTEwLwYDVQQDEygzMkM3MUIyNEE1Njk2RDM1QTE4MTFCRTgwNkFBODhGNDEx
M0I3MkREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndwsrPJMskJB
cmgclfr1X5CbMmD33F+w0nOHb7u1eyAsRgMgzjIW+xiUE3ESXPS6OnJnbu/hHZBh
dTs24hVp7v3xiq531zjTwC8L/5nmm0pIqGddEPiSG0/eS1igAe8TIeDnw+xBeV4E
6qE5t1dsFD3r1yrrLYTm4BYao0KSz8Yi8lybqIu3t84n5vn27o0joliOdN6qIKpZ
+HqCMUVBUVZwG88kIbao9JAzjcDaN5LNpSqlsrRvP9hJvD8xMY7CtAVE5EGZsGix
3DWThGJVBei8wn6jpbluN4C3M8R0rDU8I5qXljBABXCNX+Wn2g9v/sjyYQpMECE+
9lNVR2gWJwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFDLHGySlaW01oYEb6AaqiPQR
O3LdMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGdBggrBgEFBQcwC4aBkHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzYzMDM3M2E2NjYzNjEzODNhNjIzMDMwMzAzYTYxNjIz
YTNhMmYzNjM0MmQzNjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgf8
qLAAAKswDQYJKoZIhvcNAQELBQADggEBAC5P+UFj2XzoUjQxsj7Bhg63t4jDRK5Z
wHYFI0g+hyS9L3CxavKP6BlvgawELYrcCLNJZQ+/IpiykorfHOIOZ4u6BfXc08+x
MOVQ1ZtPFiZQQx+FRuUVhvykfcAonsn3vsQvWwzRVDU9x+qKjrj9ZCskIomaG7Xf
o3U0DikaK2IM27+f4NhgTPlqkI4m28RWXHGBPk3IoOXouCGOhjasSz8oHkWYAuXs
vGkS88vxDgo6Tr/Mp52oxPjwUvqbfCKpH9rlLy5w3OpuSwJ8beqoTIif/TsiSN4o
hYfe7F3TWtZQs6mbbZD/PjsxEdXX6Hw9Mb8j6rgRK65bcbi357dI2DU=
-----END CERTIFICATE-----
Generated at Sat Apr 19 11:36:04 2025 by rpki-client