Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33490.roa
File:                     AS33490.roa (raw, json)
Hash identifier:          HNx/LbYZpd1MOjP7qF+JNJkCj6GNoZtIyPCTwSQ48rM=
Subject key identifier:   FF:15:CB:8A:1B:EE:AD:FD:28:06:2A:8E:88:88:46:6F:0A:2D:2D:98
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       744153583925DB01DD4FBF074976ADD2A3BC0A5F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33490.roa
Signing time:             Tue 24 Jun 2025 15:29:44 +0000
ROA not before:           Tue 24 Jun 2025 15:24:44 +0000
ROA not after:            Tue 23 Jun 2026 15:29:44 +0000
asID:                     33490
IP address blocks:        74.50.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:53:58:39:25:db:01:dd:4f:bf:07:49:76:ad:d2:a3:bc:0a:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 24 15:24:44 2025 GMT
            Not After : Jun 23 15:29:44 2026 GMT
        Subject: CN=FF15CB8A1BEEADFD28062A8E8888466F0A2D2D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6f:2a:7c:09:a6:7f:58:37:a6:d5:25:d4:dc:
                    b3:d3:78:47:b0:7b:02:73:79:ba:6f:f7:02:10:d5:
                    54:e8:2c:ac:4f:d3:b5:95:ed:22:f6:bc:22:ea:a0:
                    c3:e1:d9:74:61:74:47:ce:f2:df:1b:6f:e0:17:7a:
                    39:96:bb:0a:84:d4:14:c9:fc:01:56:75:03:2c:fe:
                    0c:f8:bb:49:e8:80:c2:cf:aa:bb:8d:24:5d:9b:f6:
                    68:a1:c5:69:37:43:fb:7a:c7:33:a0:50:16:95:46:
                    71:32:88:4e:6c:34:ad:44:ec:1e:de:e8:d6:87:aa:
                    91:96:98:e3:eb:6d:a6:a5:e0:04:3e:e1:6f:d4:49:
                    8b:13:f2:c7:a4:c3:68:a6:7c:14:4b:ef:c6:26:f4:
                    f3:bb:a2:1b:c9:e5:a5:11:03:c4:b8:50:fe:74:59:
                    de:ad:ef:b5:57:bd:c9:5d:42:7a:d1:81:d9:60:4f:
                    47:e1:f9:ca:ab:48:dd:c1:06:e1:9d:87:6a:78:02:
                    ca:70:e6:29:92:38:56:52:c2:d0:f3:f7:7e:16:7c:
                    4f:67:76:06:fb:b1:de:90:d0:17:e5:21:31:4b:99:
                    0f:6f:73:45:55:1d:6b:fc:81:cd:bf:d7:14:04:2f:
                    85:06:c0:ad:8f:da:43:97:62:95:d9:e1:87:01:cf:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:15:CB:8A:1B:EE:AD:FD:28:06:2A:8E:88:88:46:6F:0A:2D:2D:98
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33490.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c7:f0:0f:fb:5c:03:b9:1a:58:27:40:f7:52:8c:df:58:e4:10:
         32:10:b4:3d:3f:e3:e4:ec:8b:27:16:d4:95:03:61:36:c7:a9:
         24:fe:f2:33:38:7e:7f:62:7a:8c:12:ef:00:79:74:06:ee:12:
         f3:3b:a2:3d:a6:46:89:da:7b:6b:a8:27:56:57:6a:88:01:a0:
         c8:b3:bc:dc:08:32:f7:21:2b:3b:0d:35:52:1f:92:02:e0:41:
         6b:1f:7c:e2:54:6c:62:db:d0:a2:a8:3e:d3:ba:71:d6:13:0c:
         8e:e3:fe:ee:23:57:72:bf:2e:e0:fa:33:dd:2e:a8:02:d0:25:
         af:2b:ca:0c:e1:4d:cf:8e:45:22:27:64:97:40:12:80:82:7f:
         03:c1:7e:f7:68:63:a9:36:43:ac:63:e5:e3:0a:57:1a:65:d9:
         0b:86:b0:ff:0d:94:4e:0d:d0:0f:d4:d0:f4:13:b8:7d:3b:96:
         b7:d8:89:8f:cd:6e:06:1c:d2:5c:2a:72:58:e4:41:07:92:5d:
         54:94:ef:ad:a5:9f:7c:23:9b:2f:73:3a:a0:27:9c:c2:d0:78:
         0f:26:c2:57:97:c0:ea:9d:eb:16:62:5f:95:6c:b0:07:e9:91:
         f5:90:41:48:ef:09:43:3f:7e:3e:d5:82:b5:e7:c0:66:34:28:
         2e:6d:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:35:28 2025 by rpki-client