Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa
File:                     AS57043.roa (raw, json)
Hash identifier:          cuCmCVVzoJKJUdKS55f/pq/hTP6ThNeDbre0RDa24c0=
Subject key identifier:   76:66:31:12:DA:1C:51:A3:F8:F1:EC:24:93:53:DD:A7:3D:64:7C:56
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       4856B7B30C7994FB17A42FD847E932077ADFA9F6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa
Signing time:             Tue 06 May 2025 04:13:38 +0000
ROA not before:           Tue 06 May 2025 04:08:38 +0000
ROA not after:            Tue 05 May 2026 04:13:38 +0000
asID:                     57043
IP address blocks:        67.210.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 05:38:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:56:b7:b3:0c:79:94:fb:17:a4:2f:d8:47:e9:32:07:7a:df:a9:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  6 04:08:38 2025 GMT
            Not After : May  5 04:13:38 2026 GMT
        Subject: CN=76663112DA1C51A3F8F1EC249353DDA73D647C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:62:5d:c3:1a:e4:ce:1d:fc:97:99:e0:ee:
                    77:fa:78:7b:7c:ba:9f:da:0d:9f:a6:a0:ee:44:37:
                    7f:43:44:68:b3:78:01:cf:d1:9f:14:4a:e4:80:97:
                    f7:71:8f:81:4f:f0:e5:3d:7a:b8:59:14:2e:53:b2:
                    bc:e7:12:97:81:a8:8e:8d:0e:45:d8:ed:8f:2e:5b:
                    14:73:36:9e:9b:e5:e4:c2:ce:ea:a0:9f:04:32:7c:
                    7a:3e:a0:ab:f8:99:f3:f1:7a:62:2b:97:16:eb:7c:
                    50:b5:9c:ae:5a:65:7a:f2:58:e9:f1:a3:0c:73:e6:
                    5e:58:3e:f2:4c:26:af:ab:c7:a3:8c:38:31:14:c2:
                    83:3e:6a:fe:05:86:bc:9d:06:f6:fc:cc:4c:20:96:
                    5d:46:84:3b:3f:43:7a:81:82:1c:ea:49:96:34:30:
                    ed:b4:1c:1a:92:b5:9b:b5:ab:1f:af:ee:d0:c0:7e:
                    1c:7d:63:e2:f2:dc:7a:5d:5c:60:57:da:12:7b:c0:
                    75:d5:06:a4:25:7f:ad:98:95:3c:e0:db:06:c5:1b:
                    97:46:2f:63:93:ae:1a:26:9d:37:20:75:d2:a6:a5:
                    de:16:0c:d1:d8:3a:61:5b:7a:f6:68:51:8f:31:4f:
                    70:3f:fd:07:ee:8e:2f:c6:06:b1:8f:b1:39:05:fc:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:66:31:12:DA:1C:51:A3:F8:F1:EC:24:93:53:DD:A7:3D:64:7C:56
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS57043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:0d:1b:6e:0c:39:79:df:a0:f3:85:57:49:ab:13:f2:ec:
         f8:db:b9:c6:6c:08:03:f9:68:87:83:2a:a6:6f:35:01:c3:04:
         c3:01:68:3e:35:fa:5e:03:83:16:4f:e0:13:43:81:1f:dc:76:
         cc:5e:e0:5b:49:82:70:b8:b4:e3:1a:68:14:e5:30:62:00:ee:
         1b:fa:1c:7b:57:61:76:b2:dd:5f:1e:97:70:78:f3:54:af:8f:
         b4:7d:34:54:d3:0f:e4:34:4e:ef:c9:26:49:85:bf:79:5b:0c:
         ba:80:78:6b:60:a1:38:7d:95:08:ae:ee:df:f4:a3:99:53:19:
         d6:f7:41:22:12:99:2d:da:4b:1a:b1:2e:02:5c:e4:ac:17:bb:
         f4:83:c3:47:68:7c:4c:03:4f:25:0d:da:89:12:bf:cd:d4:65:
         8e:0f:06:ca:f0:ef:1a:30:6d:c2:11:14:43:64:db:2e:99:30:
         00:58:22:d8:8d:29:f0:33:5b:7e:74:89:f3:e2:60:4d:ba:20:
         af:51:c7:e3:3f:78:10:69:70:22:ca:a3:fc:4d:4a:6e:2c:cf:
         f4:d4:a3:ea:ab:4f:81:28:1a:bf:03:96:a3:43:2c:60:10:0b:
         6e:61:30:fa:ed:3b:eb:bc:61:01:fa:9d:c7:1b:a7:8b:4b:1f:
         de:f9:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:57:28 2025 by rpki-client