Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134333135.roa
File:                     3137332e3234372e3232352e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          7cev6xavMBoggZTcK8IqiM82hcbjAIbqDhuslVIju5E=
Subject key identifier:   A4:24:9D:D9:00:DC:AC:FD:D0:C2:19:94:19:DE:DE:D9:D1:32:62:CF
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       660C571BF8C33C4A6C175431B8732A37923D3E61
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134333135.roa
Signing time:             Fri 09 May 2025 04:05:25 +0000
ROA not before:           Fri 09 May 2025 04:00:25 +0000
ROA not after:            Fri 08 May 2026 04:05:25 +0000
asID:                     14315
IP address blocks:        173.247.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0c:57:1b:f8:c3:3c:4a:6c:17:54:31:b8:73:2a:37:92:3d:3e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May  9 04:00:25 2025 GMT
            Not After : May  8 04:05:25 2026 GMT
        Subject: CN=A4249DD900DCACFDD0C2199419DEDED9D13262CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:a7:9f:94:e5:0d:01:ac:c2:7a:31:ee:85:
                    8f:29:1a:4f:d0:19:32:de:be:5b:23:0a:1b:3e:13:
                    92:bc:56:ec:84:cb:79:e7:a4:09:07:d0:d8:08:70:
                    fd:7e:44:ac:01:8a:d9:2a:49:d6:e8:1a:b5:95:95:
                    eb:42:f8:3b:f6:77:01:3e:72:da:6c:a6:cf:1d:60:
                    1e:38:5b:45:9c:c4:63:1a:ee:d1:27:83:35:64:bd:
                    f1:b9:b3:51:df:13:9c:3d:2d:44:53:67:cc:ab:c0:
                    b1:6f:6d:a0:eb:b5:de:af:76:bd:c0:a6:dc:3a:96:
                    e8:b7:5b:c2:da:32:1c:e2:84:2f:c0:ba:5a:8f:8e:
                    a3:05:bf:42:34:84:cf:c0:75:ea:4e:ec:51:23:27:
                    b1:9b:06:01:3e:5f:12:8f:0d:16:8e:58:04:69:54:
                    a2:e6:12:6b:07:d4:03:44:6c:0c:83:dd:6c:fa:4e:
                    33:bb:2e:0a:86:76:b7:0d:13:2d:be:5d:c8:b7:0e:
                    1b:be:b9:5b:26:7e:b2:8c:1e:60:35:00:3b:1d:b8:
                    3d:5d:9a:73:38:84:62:bf:1d:24:fd:62:3d:0a:b9:
                    1f:27:8f:35:3e:05:a2:4a:4e:0f:5f:9d:1e:3b:aa:
                    f4:bc:91:c3:08:79:56:72:90:54:de:69:d1:c1:9b:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:24:9D:D9:00:DC:AC:FD:D0:C2:19:94:19:DE:DE:D9:D1:32:62:CF
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a1:03:a0:45:af:8d:7a:cd:5f:2c:71:fc:7f:e6:93:63:e3:
         9f:76:37:d3:86:68:9b:d4:74:ed:73:e7:c2:f9:57:24:15:f6:
         2e:f5:a7:3c:17:a0:89:6e:15:e7:f4:78:25:bc:1d:dc:65:7d:
         d1:00:9f:84:52:69:ae:3b:85:d9:e8:7b:b8:e2:e0:2d:88:c0:
         d2:f5:57:c1:14:97:68:96:35:ee:61:4c:ca:6d:fd:22:9c:69:
         72:96:50:b9:99:a0:d4:28:47:b6:d5:b7:77:03:02:fc:76:72:
         26:31:c4:41:73:3d:bf:af:db:39:73:91:18:e2:1f:61:e9:b1:
         89:9c:25:e1:d4:40:a4:75:4f:05:6a:ee:85:59:5b:59:33:a1:
         b4:e0:8d:19:97:b7:6d:64:82:4e:a5:b6:00:7d:c6:cd:81:7b:
         b0:a5:56:3f:4b:15:1e:03:94:93:4d:6b:95:d5:4f:87:86:a7:
         ef:af:ed:fc:b5:f1:c3:dc:8f:37:aa:36:6b:67:29:bc:11:f5:
         ff:a1:53:60:4b:7c:b0:22:43:cf:39:e1:ad:49:11:d2:17:39:
         46:c9:74:7e:83:f3:15:ea:7a:0a:e6:c6:79:a2:8b:47:66:91:
         12:01:bc:3f:f7:fb:b5:95:0e:24:36:81:39:b9:f1:30:8f:97:
         dd:f3:a3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:32:16 2025 by rpki-client