Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
File:                     AS53847.roa (raw, json)
Hash identifier:          lewBvPuEOEsLvd7z8fWFPTE+aa2lH1On+2vP/KldJ7E=
Subject key identifier:   99:B5:67:E2:F6:F1:AC:DE:11:9D:76:CC:2A:42:6D:9B:D3:F6:37:A5
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       6159688FBDE7B56C7539F137C528C71C9601A790
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa
Signing time:             Mon 04 Aug 2025 22:13:57 +0000
ROA not before:           Mon 04 Aug 2025 22:08:57 +0000
ROA not after:            Mon 03 Aug 2026 22:13:57 +0000
asID:                     53847
IP address blocks:        162.248.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:59:68:8f:bd:e7:b5:6c:75:39:f1:37:c5:28:c7:1c:96:01:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug  4 22:08:57 2025 GMT
            Not After : Aug  3 22:13:57 2026 GMT
        Subject: CN=99B567E2F6F1ACDE119D76CC2A426D9BD3F637A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:a5:fe:25:97:57:9f:b5:7c:f2:b4:9a:b3:
                    f9:bc:ae:14:8e:26:47:0e:52:ed:01:28:cb:ab:4c:
                    70:dc:a3:25:e1:51:d3:e3:c5:c1:5d:0a:7d:11:99:
                    af:27:c0:fd:0f:e5:f2:d8:8e:87:38:ac:30:0b:2a:
                    31:57:e3:0d:f3:8e:3f:14:a1:74:98:f9:c0:07:1c:
                    0f:8c:a9:fe:0c:c1:61:9b:1d:69:94:b7:c8:7f:21:
                    3f:99:27:1e:94:34:61:4e:3a:8c:76:ec:9e:ed:2c:
                    58:3f:1d:99:f0:5b:7c:9d:0e:de:85:31:e5:dd:6c:
                    9b:46:24:1b:11:f8:9c:b0:43:88:cb:a3:4f:56:44:
                    40:3f:b0:92:7d:1f:d6:24:64:e6:88:46:b3:87:24:
                    fc:0e:33:d6:4b:d0:85:cf:9e:b8:18:ef:f8:d9:e8:
                    8f:53:17:c8:7c:d0:38:d3:3d:dc:62:77:7c:d5:0e:
                    fd:3b:27:24:3d:55:d9:04:80:d1:3d:73:4b:f6:ba:
                    4b:b4:ba:ba:1b:0f:ed:a0:aa:96:85:f5:0a:58:a3:
                    92:ac:92:d2:17:36:88:0e:47:04:b9:ae:33:02:e1:
                    50:9b:b1:fa:fe:f6:ba:df:b7:0b:49:26:ec:b0:ef:
                    48:75:5d:f6:c1:c5:8d:28:b3:52:0a:3e:3c:2d:6d:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B5:67:E2:F6:F1:AC:DE:11:9D:76:CC:2A:42:6D:9B:D3:F6:37:A5
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS53847.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:5a:c9:a5:9d:8d:d0:ec:5a:4f:56:6e:2e:4e:a7:7b:0d:
         61:9c:32:e4:5c:e4:02:65:08:71:41:7f:80:96:b3:97:3c:e4:
         d3:1c:c6:de:a3:44:60:bc:ac:a3:7d:f2:ab:a0:8d:8c:1f:fe:
         fd:46:1f:62:69:3f:93:71:6b:cf:e1:6a:f2:8a:5b:94:bc:d4:
         cf:27:41:44:fe:51:a5:f0:7b:2d:2a:af:aa:a0:7b:08:fd:71:
         16:a1:64:40:08:ca:52:6b:8a:54:a8:e6:d5:de:aa:6a:a1:43:
         ee:8e:27:3a:3a:eb:be:05:86:7b:49:11:f7:f3:a3:4a:0d:6b:
         0d:68:bc:41:48:b4:26:24:0b:ca:53:89:cf:7d:e7:b0:1c:26:
         86:75:d5:82:73:6f:60:3c:4c:9c:ba:fb:e5:9b:58:35:c3:7b:
         34:dd:23:c3:fc:bc:6c:46:c4:96:4d:02:6c:a2:2d:0e:a4:1e:
         f1:a8:c1:aa:bc:2d:9a:50:19:39:52:5b:71:c0:26:f6:f9:7b:
         19:9c:81:6c:e3:95:19:48:e3:91:dc:42:ad:ce:3b:11:5b:99:
         6f:d6:e5:23:0f:4d:21:50:59:7c:08:b9:ae:e0:e2:98:bb:98:
         e1:fa:b8:ee:12:22:8b:4c:1f:c0:71:1c:fb:e0:9f:cf:89:7d:
         64:ea:d0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:19 2025 by rpki-client