Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa
File:                     3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa (raw, json)
Hash identifier:          jCL8mFWV33/rQcCRd26+u/FUiOXIYssabT8ICHyyeNQ=
Subject key identifier:   53:24:13:7B:47:BD:6D:FB:F1:EF:64:42:37:7A:A4:6D:CD:8D:02:71
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       44F83AFF8B6F849644C8E437984F770DCF5BA6DD
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa
Signing time:             Tue 06 May 2025 12:39:24 +0000
ROA not before:           Tue 06 May 2025 12:34:24 +0000
ROA not after:            Tue 05 May 2026 12:39:24 +0000
asID:                     14135
IP address blocks:        173.247.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:3a:ff:8b:6f:84:96:44:c8:e4:37:98:4f:77:0d:cf:5b:a6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May  6 12:34:24 2025 GMT
            Not After : May  5 12:39:24 2026 GMT
        Subject: CN=5324137B47BD6DFBF1EF6442377AA46DCD8D0271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:da:70:1b:c4:af:f6:75:ed:c8:a2:4e:49:
                    07:7b:f3:84:17:c2:57:e1:40:30:4b:d2:f8:1f:22:
                    74:c8:83:61:db:11:6b:e7:b4:a2:a2:5a:0c:13:e4:
                    20:f9:7e:a6:87:22:ac:42:6f:e5:22:d5:62:47:86:
                    e2:c6:46:60:18:30:f9:3a:a4:87:02:0f:51:d0:5e:
                    46:e3:0a:6c:a3:fb:aa:d3:9c:a3:c7:9a:b0:36:26:
                    21:02:71:cb:d5:27:91:0c:59:57:51:ca:44:b1:5d:
                    1d:98:2c:be:36:af:92:f8:67:82:8c:1b:3a:75:b2:
                    40:d4:80:14:c1:ed:58:06:fd:d0:12:b0:7c:e4:e0:
                    4f:52:2a:c9:38:c0:71:53:0f:b6:35:03:a5:0b:13:
                    8e:73:89:07:cb:e3:4d:3c:19:8f:76:29:47:39:6f:
                    b1:2b:91:c9:6f:16:39:34:26:7c:47:d2:28:95:69:
                    ec:aa:4d:0a:17:dc:9b:28:88:5c:5c:5e:cc:09:d2:
                    7a:df:7a:f1:f5:66:91:75:95:39:a8:06:4a:2c:47:
                    7c:79:8e:f1:5c:58:c2:92:ec:f1:30:28:db:99:c8:
                    aa:68:a7:e4:af:d9:83:48:e3:e9:34:10:2d:c9:58:
                    70:6a:62:d1:a4:e7:da:6c:67:e2:af:7d:b1:fe:b3:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:24:13:7B:47:BD:6D:FB:F1:EF:64:42:37:7A:A4:6D:CD:8D:02:71
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:dd:8e:32:f1:2e:1f:b4:df:ec:a5:42:7e:cf:fb:b0:df:dd:
         72:45:92:ee:a7:af:4b:fa:f0:b0:72:79:8e:eb:84:02:cd:c0:
         85:00:41:8f:1b:47:a8:1e:42:29:02:19:76:35:8f:96:e4:91:
         94:a6:ba:1b:e8:1f:92:5b:89:5e:06:e4:b1:e9:dd:c8:05:87:
         06:d3:52:17:81:17:83:c8:f7:61:46:fd:48:74:36:db:c1:d3:
         d0:2d:60:22:39:30:2d:10:39:1b:1b:5e:1f:6f:b8:ed:82:19:
         d1:d5:28:43:77:e9:ef:ef:55:cc:d6:d9:d3:c5:c2:d5:4d:cc:
         e2:0a:ea:61:0f:70:e0:b0:4f:79:b7:a1:66:33:dd:30:08:cd:
         26:42:90:cb:68:e2:3e:f0:61:98:2b:84:ca:94:52:c6:b4:dd:
         f5:ce:79:76:16:b4:88:60:01:e3:d5:ca:30:26:ed:ae:d2:1f:
         bf:ed:3e:05:e5:3b:0c:c8:54:ed:c1:b1:b4:e8:b1:6a:30:5b:
         44:f2:13:00:1c:48:63:ea:3b:85:dc:8a:41:0f:c1:34:3f:16:
         9c:fd:38:c4:81:63:6d:b0:22:1e:d2:b0:4e:df:6e:5d:f5:dc:
         fb:e3:49:8b:79:72:00:76:0c:a4:de:fb:a1:f8:af:dc:c5:d0:
         e3:af:c6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 04:52:13 2025 by rpki-client