Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203231383539.roa
File:                     3137332e3234372e3233302e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          ZEWs0RS8z9o7s0KTHq6DXA62N83KvqHuz0JdaqyMVVs=
Subject key identifier:   61:9A:52:F6:23:06:43:26:0A:C4:4C:05:BF:01:78:0B:A2:41:68:D5
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       5A62A6E319EC86BCE0C9B3FFD0C6FB1FF46993FE
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 19 Sep 2025 11:50:00 +0000
ROA not before:           Fri 19 Sep 2025 11:45:00 +0000
ROA not after:            Fri 18 Sep 2026 11:50:00 +0000
asID:                     21859
IP address blocks:        173.247.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:62:a6:e3:19:ec:86:bc:e0:c9:b3:ff:d0:c6:fb:1f:f4:69:93:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Sep 19 11:45:00 2025 GMT
            Not After : Sep 18 11:50:00 2026 GMT
        Subject: CN=619A52F6230643260AC44C05BF01780BA24168D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:7e:83:60:a6:e9:15:0d:3f:d8:f7:10:1a:
                    1f:af:7b:2f:8a:4f:77:67:ec:d6:42:d2:82:64:6c:
                    95:c0:ee:1d:79:d9:77:60:51:a6:d3:b9:30:99:68:
                    4d:3b:35:8f:bd:10:fa:76:b0:05:b1:11:d7:c0:9d:
                    ab:7f:c5:d8:d1:30:58:d4:2f:36:91:14:55:fc:14:
                    e5:6e:42:10:2a:b6:a4:33:38:2a:f7:8d:4a:4c:f4:
                    09:dd:7c:e7:1d:6a:bf:fa:11:6d:0f:fe:04:14:3a:
                    fb:12:3c:82:3a:ac:d2:c0:fd:fd:03:26:d6:41:80:
                    15:ce:67:f2:ec:b1:26:b1:d1:41:b9:7a:9e:bc:71:
                    3a:c2:0d:28:86:26:9c:d7:10:47:3f:04:7b:cc:a4:
                    08:cd:59:27:a4:3a:63:96:32:c5:c0:c8:bd:99:62:
                    89:55:cf:0e:2e:98:17:00:4e:c3:01:ff:41:e9:39:
                    17:b3:a6:33:43:5f:d5:a0:c2:0b:b5:4a:e8:32:be:
                    12:31:5f:30:e8:5d:3f:3f:3a:e2:7a:f3:77:c9:96:
                    19:17:90:5d:9d:d1:b1:cf:eb:e4:e5:4f:3e:e4:2a:
                    7a:88:2c:fe:4c:67:bb:72:13:e9:20:7e:a0:41:06:
                    77:37:18:c1:f4:f2:4c:ca:e6:77:e6:2d:3a:c4:24:
                    21:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9A:52:F6:23:06:43:26:0A:C4:4C:05:BF:01:78:0B:A2:41:68:D5
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a8:81:fd:48:84:a0:51:20:0b:9d:bc:99:d7:b4:78:f6:dd:
         5d:02:88:7f:16:db:bd:22:d9:26:e2:df:64:7d:b0:4f:41:02:
         1d:b2:e9:76:70:83:cb:a9:3d:f3:20:41:ce:4c:a7:67:56:d1:
         ed:9a:e7:fc:6c:98:cd:b6:16:15:83:03:b6:cf:33:65:fd:20:
         6e:d3:c0:dd:8c:a2:a5:88:b4:cf:dd:ae:0b:c1:d6:a7:ca:53:
         27:3c:ff:64:61:21:6e:7d:64:ee:23:b7:57:cd:49:94:f1:51:
         99:72:02:01:c7:02:df:b7:0d:de:86:04:e7:20:07:7d:90:b1:
         71:b3:d3:63:da:cd:5b:d1:fb:e8:fe:6c:6b:6b:c1:cd:eb:7d:
         c0:c7:7b:70:ea:fd:9f:85:c6:c4:d9:77:ce:a3:a4:62:8c:0b:
         6f:7c:b2:fb:a1:62:de:3f:fc:06:19:1f:c7:3c:9f:32:6d:57:
         45:34:4d:72:d0:6a:11:4f:9d:b9:76:6a:02:0c:65:93:2b:ce:
         b3:23:f5:44:5f:12:9d:86:29:3d:5e:73:68:31:02:a2:a2:fe:
         c9:2f:68:44:7a:7f:27:a6:22:5b:58:d4:6b:e7:84:d9:4f:39:
         ba:fc:1a:f2:58:7f:fa:0c:a0:4c:03:a8:d8:49:10:22:1d:88:
         47:5e:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:43 2025 by rpki-client