Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3257.roa
File:                     AS3257.roa (raw, json)
Hash identifier:          NJ1Je8qZ1tkzGF1PN7DynK26wU+sGyE6bGe7eaB++XI=
Subject key identifier:   CC:AD:11:1D:A3:22:6C:76:3B:62:B7:7F:24:E7:14:10:A1:8C:F4:9B
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       7DDDDA99E10FD84D1E7565E49A0529FB62F59983
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3257.roa
Signing time:             Fri 15 Nov 2024 18:38:32 +0000
ROA not before:           Fri 15 Nov 2024 18:33:32 +0000
ROA not after:            Fri 14 Nov 2025 18:38:32 +0000
asID:                     3257
IP address blocks:        66.225.230.0/24 maxlen: 24
                          205.234.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 23:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:dd:da:99:e1:0f:d8:4d:1e:75:65:e4:9a:05:29:fb:62:f5:99:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 15 18:33:32 2024 GMT
            Not After : Nov 14 18:38:32 2025 GMT
        Subject: CN=CCAD111DA3226C763B62B77F24E71410A18CF49B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:12:f0:9f:60:76:95:c4:d0:d8:5d:7d:d4:
                    cf:26:41:18:91:db:96:44:3c:4a:c9:89:58:a5:33:
                    5f:22:5d:ac:aa:e7:78:04:09:fe:5b:63:ba:7f:0f:
                    32:c9:28:f5:4b:13:cd:6f:54:ec:20:ca:be:3c:d4:
                    f4:0f:55:d0:04:d1:74:0f:eb:db:f2:14:60:00:ed:
                    1b:0e:fd:68:a1:81:b3:e4:fb:40:f1:d4:54:0d:87:
                    61:2b:b0:4c:b4:7d:48:65:8a:d4:84:06:66:65:23:
                    16:89:9f:66:51:29:ff:b5:d2:ab:13:2d:ee:2d:50:
                    7d:46:7c:be:98:95:05:8c:7f:dd:3e:2c:dc:c8:38:
                    97:46:c4:f5:e8:df:56:3e:3d:77:22:2b:56:66:ed:
                    5e:a6:f9:db:c3:a7:e3:01:cc:d0:0d:ad:24:d0:08:
                    4b:6b:34:98:08:cf:af:ff:8a:4d:f6:62:07:26:22:
                    60:0d:b4:76:67:46:c0:df:48:db:e5:e6:e5:12:33:
                    7e:37:b8:26:73:8b:3b:da:34:dc:f5:01:3c:07:cd:
                    bc:2d:0c:50:34:71:a0:85:3c:0d:7c:73:a1:36:8f:
                    2c:06:f3:99:1c:06:36:9a:30:60:4c:c0:04:d0:cb:
                    17:8e:21:ce:63:64:4b:b6:d6:08:db:2d:9f:07:88:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AD:11:1D:A3:22:6C:76:3B:62:B7:7F:24:E7:14:10:A1:8C:F4:9B
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS3257.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.230.0/24
                  205.234.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:8d:fc:54:ab:1d:d4:9c:cf:ef:d2:b2:af:94:ff:1a:09:
         0a:74:59:ee:a9:ef:ce:ab:1c:f4:f5:8f:69:6a:61:61:7d:b2:
         fd:f2:cc:80:07:49:5c:2e:53:90:ac:a8:cd:2a:90:49:bd:af:
         1f:5f:35:dc:5a:f2:27:55:3f:ed:c7:8d:04:d1:9c:87:72:e6:
         cd:6e:9c:42:8c:9e:61:17:90:d3:61:0d:59:ee:91:13:ef:34:
         42:ea:0d:f2:b8:59:8a:3d:aa:e9:0a:44:6b:9a:1a:6a:5d:27:
         c1:b6:f5:a7:4f:4f:f0:bd:21:75:1f:02:b2:3f:36:94:4e:eb:
         14:9b:43:b8:71:b4:4e:92:b5:a5:68:30:71:7c:8b:d9:f4:0f:
         42:65:2d:b0:d5:6a:12:cc:80:28:c6:53:b3:63:78:8f:40:ea:
         85:04:15:22:fc:27:ac:f8:57:bb:1b:11:ce:f5:cf:fc:8d:49:
         06:01:b2:52:0b:bf:99:57:47:d4:54:29:55:16:c5:78:c2:80:
         20:9f:fe:8e:06:bb:d8:e4:a0:19:24:81:ac:86:c1:26:57:f8:
         c5:a0:5a:98:41:94:c3:45:c6:2a:4c:23:83:26:0f:29:a4:47:
         cf:8c:be:a6:59:8c:4b:cf:15:ea:dd:a7:28:cd:dd:94:c0:a4:
         b2:c4:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:33 2025 by rpki-client