Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e20333936393933.roa
File:                     3137302e33392e34392e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier:          ETwd77buartHXiKlo8OQU1AbVddhwFihmzNVABCJd30=
Subject key identifier:   5D:93:52:75:62:D8:38:BD:45:BA:98:17:61:95:4E:03:E9:79:B0:3A
Certificate issuer:       /CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
Certificate serial:       505F238462A6E554AF646C7BAE6CCFF04BE0888B
Authority key identifier: 93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e20333936393933.roa
Signing time:             Mon 05 May 2025 18:37:39 +0000
ROA not before:           Mon 05 May 2025 18:32:39 +0000
ROA not after:            Mon 04 May 2026 18:37:39 +0000
asID:                     396993
IP address blocks:        170.39.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:5f:23:84:62:a6:e5:54:af:64:6c:7b:ae:6c:cf:f0:4b:e0:88:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071
        Validity
            Not Before: May  5 18:32:39 2025 GMT
            Not After : May  4 18:37:39 2026 GMT
        Subject: CN=5D93527562D838BD45BA981761954E03E979B03A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a4:7a:b8:b8:84:bf:e4:f2:65:20:b0:69:3e:
                    90:46:e1:f9:a7:06:0d:0a:8a:82:9b:b0:e5:3a:32:
                    d0:6c:b8:45:ae:9e:0f:f2:2a:99:ee:65:b6:7f:31:
                    f7:21:1b:ee:d5:f4:e8:a9:0d:67:29:a5:8b:a5:32:
                    39:d4:8b:d7:83:25:c9:cb:38:45:c2:5b:b1:34:08:
                    75:32:b0:eb:90:de:e6:0a:8d:09:14:20:43:49:d0:
                    bc:07:e6:32:cb:8e:37:38:01:22:09:3e:b4:1d:16:
                    ec:9f:a0:53:ff:e8:a4:f9:1f:04:65:37:da:59:be:
                    48:8a:bf:03:b2:af:cf:f8:e4:d3:72:31:20:51:3f:
                    1e:6a:d9:80:29:24:31:cd:cc:88:34:92:73:5c:c3:
                    95:4e:29:9a:81:8d:08:56:fb:31:f7:9f:5a:a1:d3:
                    94:bf:ef:cc:0f:36:e9:3b:3f:4f:a4:b3:52:3c:b7:
                    2e:8a:8b:33:8b:e3:5e:74:7c:78:a5:e3:cc:e6:05:
                    ae:fe:68:ef:1f:a2:ad:95:bf:b4:4c:f2:cc:ae:7c:
                    32:ab:bd:83:10:1c:4e:14:70:93:dd:04:10:8a:e1:
                    5d:7d:7e:3d:24:c4:e1:d3:56:f3:91:92:e4:be:0a:
                    ea:18:36:09:09:0b:39:01:29:54:07:45:28:77:48:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:93:52:75:62:D8:38:BD:45:BA:98:17:61:95:4E:03:E9:79:B0:3A
            X509v3 Authority Key Identifier:
                keyid:93:B0:29:6C:31:78:77:80:FE:84:13:31:8F:D0:D2:70:83:83:4C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/93B0296C31787780FE8413318FD0D27083834CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5563e2f9-4d9b-40c3-afa2-ce7045ffd23a/1822fe9c8a1d8a021778934e378159ff8f794df32bfe9ed071.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/8/3137302e33392e34392e302f32342d3234203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:41:68:4d:17:10:0a:84:c9:70:31:45:eb:72:cd:85:45:2f:
         f9:27:13:45:66:03:c7:02:0b:34:48:d5:40:a4:da:3c:ea:ab:
         f7:b3:a5:71:1c:50:64:36:7d:a5:d1:27:f5:29:a5:45:97:e3:
         73:21:f4:52:55:77:db:f0:70:8c:70:cc:ec:61:31:8f:26:b6:
         4c:33:15:67:8e:2c:27:f2:4a:57:c0:7a:ce:b7:36:e7:a1:12:
         23:5f:77:3a:16:03:80:37:f6:98:06:e0:28:fb:74:b0:fd:f6:
         54:27:44:a8:87:9d:af:fe:a3:94:26:db:ec:b3:a1:23:0b:5f:
         b4:95:19:cb:88:2a:9b:05:7e:f9:e7:46:b4:3e:fb:75:c9:b2:
         0e:c7:3f:83:09:ee:1c:c3:3d:d2:f6:c9:e2:0c:f7:8e:15:76:
         ca:95:f0:9e:49:c9:38:bc:bd:74:43:b9:60:67:f5:2d:47:d0:
         3d:9d:b0:11:23:9a:03:93:96:28:51:6b:bf:08:8f:e3:e1:da:
         97:c2:29:5f:9e:e7:2a:23:b3:f1:65:5d:62:02:c0:57:16:9f:
         07:f0:2a:bc:6b:50:88:53:ea:02:00:30:59:6e:3d:6f:ec:5e:
         57:58:0b:91:bb:d3:a0:cb:75:4a:cc:6e:a4:dc:75:41:7d:70:
         ae:26:0e:56
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUUF8jhGKm5VSvZGx7rmzP8EvgiIswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4
Zjc5NGRmMzJiZmU5ZWQwNzEwHhcNMjUwNTA1MTgzMjM5WhcNMjYwNTA0MTgzNzM5
WjAzMTEwLwYDVQQDEyg1RDkzNTI3NTYyRDgzOEJENDVCQTk4MTc2MTk1NEUwM0U5
NzlCMDNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKR6uLiEv+Ty
ZSCwaT6QRuH5pwYNCoqCm7DlOjLQbLhFrp4P8iqZ7mW2fzH3IRvu1fToqQ1nKaWL
pTI51IvXgyXJyzhFwluxNAh1MrDrkN7mCo0JFCBDSdC8B+Yyy443OAEiCT60HRbs
n6BT/+ik+R8EZTfaWb5Iir8Dsq/P+OTTcjEgUT8eatmAKSQxzcyINJJzXMOVTima
gY0IVvsx959aodOUv+/MDzbpOz9PpLNSPLcuioszi+NedHx4pePM5gWu/mjvH6Kt
lb+0TPLMrnwyq72DEBxOFHCT3QQQiuFdfX49JMTh01bzkZLkvgrqGDYJCQs5ASlU
B0Uod0hEqwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFF2TUnVi2Di9RbqYF2GVTgPp
ebA6MB8GA1UdIwQYMBaAFJOwKWwxeHeA/oQTMY/Q0nCDg0zFMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2
LWRiZmM0NTkzYzFhOC84LzkzQjAyOTZDMzE3ODc3ODBGRTg0MTMzMThGRDBEMjcw
ODM4MzRDQzUuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81NTYzZTJmOS00ZDliLTQwYzMtYWZhMi1j
ZTcwNDVmZmQyM2EvMTgyMmZlOWM4YTFkOGEwMjE3Nzg5MzRlMzc4MTU5ZmY4Zjc5
NGRmMzJiZmU5ZWQwNzEuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzY2YmQ5MmYxLTQxNWItNDc2NS04YTE2LWRiZmM0NTkzYzFhOC84LzMxMzczMDJl
MzMzOTJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNjM5MzkzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKonMTANBgkqhkiG9w0BAQsFAAOCAQEArUFoTRcQCoTJcDFF63LN
hUUv+ScTRWYDxwILNEjVQKTaPOqr97OlcRxQZDZ9pdEn9SmlRZfjcyH0UlV32/Bw
jHDM7GExjya2TDMVZ44sJ/JKV8B6zrc256ESI193OhYDgDf2mAbgKPt0sP32VCdE
qIedr/6jlCbb7LOhIwtftJUZy4gqmwV++edGtD77dcmyDsc/gwnuHMM90vbJ4gz3
jhV2ypXwnknJOLy9dEO5YGf1LUfQPZ2wESOaA5OWKFFrvwiP4+Hal8IpX57nKiOz
8WVdYgLAVxafB/AqvGtQiFPqAgAwWW49b+xeV1gLkbvToMt1SsxupNx1QX1wriYO
Vg==
-----END CERTIFICATE-----
Generated at Fri Jun 6 15:23:32 2025 by rpki-client