Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS395839.roa
File:                     AS395839.roa (raw, json)
Hash identifier:          6l3EXOXRCSLBcRrHXHHk12a5rnlDzNSfspMpnRUpbCU=
Subject key identifier:   B1:70:92:7E:42:42:7D:D1:63:33:09:8A:18:C3:CC:54:9F:E6:DB:44
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7B56EFF9453C9BF9189E31D9EF83A3FAE070E319
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS395839.roa
Signing time:             Wed 07 May 2025 13:56:06 +0000
ROA not before:           Wed 07 May 2025 13:51:06 +0000
ROA not after:            Wed 06 May 2026 13:56:06 +0000
asID:                     395839
IP address blocks:        67.210.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 19:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:56:ef:f9:45:3c:9b:f9:18:9e:31:d9:ef:83:a3:fa:e0:70:e3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  7 13:51:06 2025 GMT
            Not After : May  6 13:56:06 2026 GMT
        Subject: CN=B170927E42427DD16333098A18C3CC549FE6DB44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:92:c6:de:68:71:9c:ae:ab:06:c4:3f:59:
                    7d:28:42:a4:30:4d:c8:e3:0c:5e:c7:ca:3c:ce:46:
                    23:3a:bd:d4:a1:75:2c:11:38:54:c5:00:00:46:da:
                    40:53:20:3f:ad:a5:df:fb:84:98:80:5d:92:19:42:
                    61:2d:2e:f4:16:48:2a:fe:ae:c8:1a:d9:32:1c:bb:
                    66:89:87:06:bb:65:d1:98:28:38:fb:2c:ad:b4:f7:
                    b0:04:6a:ad:dd:c2:5e:8a:49:b3:b3:d5:e2:ea:ba:
                    db:f4:5e:f1:4e:6f:39:6a:1d:28:54:a6:bb:5e:4b:
                    8b:b9:2c:aa:ad:04:c5:07:21:1f:54:e9:11:79:fd:
                    df:e6:c5:58:e0:b0:fb:55:0f:f7:84:8a:c4:a6:22:
                    32:8e:3d:0e:f8:c1:f1:b1:e0:e0:7b:99:1c:62:bc:
                    b3:10:24:0f:34:68:e6:23:15:e8:47:b6:92:16:36:
                    a4:2d:6b:cd:f8:88:c2:d6:be:00:9f:52:2c:fe:15:
                    32:fc:fa:a4:8a:a9:0f:c4:f7:2d:12:8b:f0:c4:3f:
                    d0:0c:72:73:27:cc:ab:1b:6c:da:4c:14:d4:3f:96:
                    e5:46:0c:ff:49:71:49:8b:43:a1:0d:18:95:56:bd:
                    cd:44:50:eb:0b:a7:68:6e:6b:ff:77:6e:49:61:06:
                    ab:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:70:92:7E:42:42:7D:D1:63:33:09:8A:18:C3:CC:54:9F:E6:DB:44
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS395839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:71:dd:c3:8d:18:ce:ee:e0:ad:5d:3f:54:8f:72:ee:6b:49:
         bc:9f:75:40:1c:ee:73:53:00:e6:3e:f3:4a:86:5c:ca:52:fc:
         c3:95:70:87:94:79:81:fb:70:e2:d4:4e:1a:97:00:ac:20:98:
         7b:4d:34:9e:99:51:2b:3a:e6:df:17:31:14:14:99:32:77:6a:
         c7:be:33:bb:5d:51:97:99:4f:ce:01:d5:07:f5:af:52:26:07:
         7b:99:81:d1:af:f4:3b:f7:a7:e1:fa:82:48:85:ee:6e:30:9d:
         fd:80:79:85:1d:5c:10:70:2b:1d:85:30:52:33:1c:e3:c2:76:
         d4:23:3f:18:4a:61:3a:72:6c:96:b6:61:76:7b:77:80:1e:27:
         e2:ad:6c:d4:39:c7:ba:be:2a:9d:2d:b6:b3:cb:81:87:ce:8a:
         9c:f8:13:54:93:3b:d4:a4:39:09:39:15:cd:78:69:18:aa:6c:
         c8:1b:c5:f0:4f:19:73:5e:9d:ec:cd:53:7f:85:c8:d0:9e:f6:
         69:a0:e1:38:fb:e4:c5:4a:89:6a:b5:44:7b:a4:11:6b:bc:73:
         97:f6:f4:b4:28:ff:19:ff:ae:1b:88:66:84:dd:ed:cd:af:73:
         08:00:96:21:e9:79:00:16:3b:89:be:0d:59:c2:08:92:d2:8c:
         dc:05:31:6a
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUe1bv+UU8m/kYnjHZ74Oj+uBw4xkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTA3MTM1MTA2WhcNMjYwNTA2MTM1NjA2
WjAzMTEwLwYDVQQDEyhCMTcwOTI3RTQyNDI3REQxNjMzMzA5OEExOEMzQ0M1NDlG
RTZEQjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOWSxt5ocZyu
qwbEP1l9KEKkME3I4wxex8o8zkYjOr3UoXUsEThUxQAARtpAUyA/raXf+4SYgF2S
GUJhLS70Fkgq/q7IGtkyHLtmiYcGu2XRmCg4+yyttPewBGqt3cJeikmzs9Xi6rrb
9F7xTm85ah0oVKa7XkuLuSyqrQTFByEfVOkRef3f5sVY4LD7VQ/3hIrEpiIyjj0O
+MHxseDge5kcYryzECQPNGjmIxXoR7aSFjakLWvN+IjC1r4An1Is/hUy/PqkiqkP
xPctEovwxD/QDHJzJ8yrG2zaTBTUP5blRgz/SXFJi0OhDRiVVr3NRFDrC6dobmv/
d25JYQarMQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLFwkn5CQn3RYzMJihjDzFSf
5ttEMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzM5NTgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEPSbzANBgkqhkiG9w0BAQsFAAOC
AQEAgnHdw40Yzu7grV0/VI9y7mtJvJ91QBzuc1MA5j7zSoZcylL8w5Vwh5R5gftw
4tROGpcArCCYe000nplRKzrm3xcxFBSZMndqx74zu11Rl5lPzgHVB/WvUiYHe5mB
0a/0O/en4fqCSIXubjCd/YB5hR1cEHArHYUwUjMc48J21CM/GEphOnJslrZhdnt3
gB4n4q1s1DnHur4qnS22s8uBh86KnPgTVJM71KQ5CTkVzXhpGKpsyBvF8E8Zc16d
7M1Tf4XI0J72aaDhOPvkxUqJarVEe6QRa7xzl/b0tCj/Gf+uG4hmhN3tza9zCACW
Iel5ABY7ib4NWcIIktKM3AUxag==
-----END CERTIFICATE-----
Generated at Mon May 12 10:36:41 2025 by rpki-client