Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          gzaVi4W0Rk03T4XCzhFq1XIdv7xxrsaomh4/HNvKl3Q=
Subject key identifier:   82:80:FE:AF:ED:B1:51:80:E9:8A:6B:D9:DD:94:84:3A:93:C3:8B:C4
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       5DD6C558552D3226D8BA0FE9CE93CF2B84E83A85
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        173.247.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 00:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d6:c5:58:55:2d:32:26:d8:ba:0f:e9:ce:93:cf:2b:84:e8:3a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=8280FEAFEDB15180E98A6BD9DD94843A93C38BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:0b:18:93:68:1c:47:0f:f7:f8:7f:d4:f7:
                    3b:ed:4e:0b:9d:82:eb:76:03:85:a3:28:91:8f:88:
                    7b:d6:92:f3:bb:3e:49:52:a1:41:7a:ae:66:03:6a:
                    46:7e:35:9c:bf:00:3c:3c:2c:40:c3:1b:0c:fe:bc:
                    eb:f0:a5:ac:43:e0:b2:6f:a2:f5:11:3c:d0:5f:bf:
                    ff:b5:62:72:c6:50:76:71:ea:06:ff:94:f6:b9:94:
                    7f:ab:62:75:77:b8:f8:bd:bf:c9:2d:f5:c0:e8:b0:
                    30:2c:11:72:59:b5:ce:4f:68:9d:8b:74:d7:6e:eb:
                    a6:66:78:49:78:91:30:a2:c9:95:dd:39:10:21:00:
                    5e:70:a0:ac:b0:74:22:e0:49:de:98:49:52:75:eb:
                    4a:af:3e:e1:c6:b6:c7:4f:ad:da:66:52:cb:a3:08:
                    7d:d0:4b:28:85:91:c3:7d:53:6a:f1:aa:15:08:77:
                    ea:84:34:b2:4b:45:e7:c2:1c:86:32:2b:40:a7:04:
                    0b:d4:36:80:6f:56:78:b0:cb:2a:57:94:b0:d1:bf:
                    cb:ee:65:14:fd:c4:73:9f:47:b2:e0:9a:f5:97:d3:
                    ef:67:f1:ca:d7:da:cb:c9:1f:de:b8:d2:a2:4f:13:
                    5e:32:0b:d2:1d:9f:6a:9d:ef:5c:0f:38:5f:e5:1b:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:80:FE:AF:ED:B1:51:80:E9:8A:6B:D9:DD:94:84:3A:93:C3:8B:C4
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233372e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:fe:da:cf:ce:13:e3:77:d9:93:5a:68:d9:8f:34:6b:22:56:
         19:f3:02:01:a4:c3:58:bf:ed:9b:e3:c0:3b:b1:7a:b9:0f:00:
         b8:2b:65:7f:0d:16:39:ad:e4:70:63:07:e2:1a:d9:be:6b:64:
         30:65:52:84:e3:ae:3e:0b:9f:6e:e6:97:14:f6:9a:12:11:3c:
         e3:33:78:3b:fc:ab:a8:2f:12:a7:9d:d9:6b:a6:14:75:76:f2:
         a3:61:6e:3b:ec:6d:70:f6:7b:d2:6a:35:1b:53:ff:9f:9f:74:
         76:8f:6e:e0:2c:1a:d8:32:7e:1e:ad:d6:61:b3:85:9c:58:71:
         40:aa:c4:40:0a:b5:68:d1:e5:1e:b3:f6:1b:1c:d3:11:18:96:
         a0:b1:2f:8e:ba:4f:b7:03:0c:51:6a:b6:07:33:3b:d9:8d:b5:
         d8:a0:6e:1e:ff:75:75:97:87:69:2f:04:92:11:46:35:cb:42:
         4f:80:54:e8:f0:61:b7:bf:2b:3c:f5:aa:6c:ab:d3:45:fd:08:
         e5:4d:e6:d0:d2:89:31:f9:b1:83:cd:ae:8e:67:2a:ff:ef:2d:
         6e:cd:9b:bd:02:66:41:f6:2e:c3:43:8b:3b:32:c3:a9:17:8b:
         4e:12:2a:47:ef:6e:2e:34:59:cc:9d:ef:9a:5b:34:ce:88:b8:
         f0:73:1e:4e
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUXdbFWFUtMibYug/pzpPPK4ToOoUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNDI0MTEzNTEzWhcNMjYwNDIzMTE0MDEz
WjAzMTEwLwYDVQQDEyg4MjgwRkVBRkVEQjE1MTgwRTk4QTZCRDlERDk0ODQzQTkz
QzM4QkM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBULGJNoHEcP
9/h/1Pc77U4LnYLrdgOFoyiRj4h71pLzuz5JUqFBeq5mA2pGfjWcvwA8PCxAwxsM
/rzr8KWsQ+Cyb6L1ETzQX7//tWJyxlB2ceoG/5T2uZR/q2J1d7j4vb/JLfXA6LAw
LBFyWbXOT2idi3TXbuumZnhJeJEwosmV3TkQIQBecKCssHQi4EnemElSdetKrz7h
xrbHT63aZlLLowh90EsohZHDfVNq8aoVCHfqhDSyS0XnwhyGMitApwQL1DaAb1Z4
sMsqV5Sw0b/L7mUU/cRzn0ey4Jr1l9PvZ/HK19rLyR/euNKiTxNeMgvSHZ9qne9c
Dzhf5RssnwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIKA/q/tsVGA6Ypr2d2UhDqT
w4vEMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfftMA0GCSqGSIb3DQEB
CwUAA4IBAQAR/trPzhPjd9mTWmjZjzRrIlYZ8wIBpMNYv+2b48A7sXq5DwC4K2V/
DRY5reRwYwfiGtm+a2QwZVKE464+C59u5pcU9poSETzjM3g7/KuoLxKnndlrphR1
dvKjYW477G1w9nvSajUbU/+fn3R2j27gLBrYMn4erdZhs4WcWHFAqsRACrVo0eUe
s/YbHNMRGJagsS+Ouk+3AwxRarYHMzvZjbXYoG4e/3V1l4dpLwSSEUY1y0JPgFTo
8GG3vys89apsq9NF/QjlTebQ0okx+bGDza6OZyr/7y1uzZu9AmZB9i7DQ4s7MsOp
F4tOEipH724uNFnMne+aWzTOiLjwcx5O
-----END CERTIFICATE-----
Generated at Sat May 10 04:48:11 2025 by rpki-client