Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          SE8QffZyEbRRcVZvc22QLAjHfac/dfIx6IEWADuhfFQ=
Subject key identifier:   11:E9:01:66:99:48:E0:45:22:1B:63:F6:31:18:9E:82:0F:73:24:C6
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       3F8414EE53CC3984B1706282FB6677F29F1C38E5
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        205.134.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 00:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:84:14:ee:53:cc:39:84:b1:70:62:82:fb:66:77:f2:9f:1c:38:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=11E901669948E045221B63F631189E820F7324C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d7:f8:11:50:9f:b3:a8:63:ad:75:6d:7f:f7:
                    e1:ec:07:7f:5f:77:f5:df:47:86:c1:19:7e:91:d9:
                    36:3d:55:73:93:d4:ad:e1:74:bf:49:fc:2d:87:23:
                    8b:22:f9:97:53:83:6b:2f:6d:f9:b5:4e:4b:f2:c7:
                    ec:6e:89:57:42:0d:91:56:69:93:c6:90:51:60:7a:
                    de:0f:46:d3:46:d4:ab:50:79:4e:e0:13:40:5d:b0:
                    1d:7b:78:fd:44:dc:e7:2c:d5:87:d6:9a:b5:2f:c1:
                    9c:da:8e:25:20:c8:44:ed:e7:7e:80:b3:99:d0:90:
                    a9:7a:f1:b1:a4:7d:d8:e6:65:9b:89:2c:97:21:47:
                    4f:a9:21:ad:c6:ca:65:ff:17:20:09:a4:3e:c4:18:
                    6e:8d:1a:49:3b:f4:7b:a3:a9:b1:34:cc:04:44:1e:
                    8d:0b:b3:a3:61:f1:9c:24:9d:3d:6e:19:e2:55:66:
                    1f:33:b5:06:b9:59:09:42:14:52:37:31:b6:bc:fa:
                    34:60:56:74:6c:93:3a:6c:92:fd:ce:66:1d:a1:85:
                    ca:a1:1d:1f:60:61:68:5c:54:2f:3c:d6:50:3b:d4:
                    50:a5:db:c3:f6:fe:b9:c5:16:1f:21:1d:1d:37:6a:
                    77:3d:71:66:19:61:cf:81:ca:a2:c9:c8:40:14:64:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E9:01:66:99:48:E0:45:22:1B:63:F6:31:18:9E:82:0F:73:24:C6
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:35:b0:34:d6:85:27:40:5f:7a:0a:c8:44:f0:b2:b2:4f:11:
         4c:f2:27:ca:21:62:47:72:55:e9:8d:04:de:00:0b:03:f3:b4:
         3f:c1:32:29:bd:3c:d6:f6:7a:ff:eb:e5:cc:a3:1d:ca:13:fa:
         8e:ba:ad:10:65:c3:30:dd:ef:2a:7b:67:d5:8e:38:b3:cf:79:
         95:85:97:d1:44:40:87:8d:52:46:45:6a:f2:18:3a:23:20:e3:
         72:ae:a8:cc:a5:41:c7:dd:14:a1:9e:91:c3:71:a1:06:04:6c:
         c9:ef:8c:bb:71:31:70:05:f9:ba:ca:50:e6:dd:12:61:7e:84:
         ee:68:7d:84:79:bc:90:dc:7e:86:06:8a:1a:d0:11:8a:47:53:
         f7:3f:94:ce:e1:68:08:d4:4f:cb:91:86:9e:c8:c3:48:31:f3:
         86:1c:65:e9:87:58:35:43:8d:1f:c3:84:b5:da:c7:c7:3b:62:
         8c:f7:41:31:dd:32:00:d4:a5:bd:42:fd:eb:e0:0f:a1:cd:4f:
         cb:8d:ab:e1:cb:4d:55:16:03:03:c1:04:39:b9:08:91:bc:68:
         93:96:03:2a:fa:d1:c0:b5:63:eb:69:6d:e2:d0:9e:91:ba:cf:
         a5:0f:37:ab:98:8d:96:83:2a:65:0b:29:46:01:24:3e:d4:2b:
         f2:3f:5e:f8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUP4QU7lPMOYSxcGKC+2Z38p8cOOUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNDI0MTEzNTEzWhcNMjYwNDIzMTE0MDEz
WjAzMTEwLwYDVQQDEygxMUU5MDE2Njk5NDhFMDQ1MjIxQjYzRjYzMTE4OUU4MjBG
NzMyNEM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tf4EVCfs6hj
rXVtf/fh7Ad/X3f130eGwRl+kdk2PVVzk9St4XS/SfwthyOLIvmXU4NrL235tU5L
8sfsbolXQg2RVmmTxpBRYHreD0bTRtSrUHlO4BNAXbAde3j9RNznLNWH1pq1L8Gc
2o4lIMhE7ed+gLOZ0JCpevGxpH3Y5mWbiSyXIUdPqSGtxspl/xcgCaQ+xBhujRpJ
O/R7o6mxNMwERB6NC7OjYfGcJJ09bhniVWYfM7UGuVkJQhRSNzG2vPo0YFZ0bJM6
bJL9zmYdoYXKoR0fYGFoXFQvPNZQO9RQpdvD9v65xRYfIR0dN2p3PXFmGWHPgcqi
ychAFGSItQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBHpAWaZSOBFIhtj9jEYnoIP
cyTGMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMyMzAzNTJlMzEzMzM0MmUzMjMyMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzYbkMA0GCSqGSIb3DQEB
CwUAA4IBAQBUNbA01oUnQF96CshE8LKyTxFM8ifKIWJHclXpjQTeAAsD87Q/wTIp
vTzW9nr/6+XMox3KE/qOuq0QZcMw3e8qe2fVjjizz3mVhZfRRECHjVJGRWryGDoj
IONyrqjMpUHH3RShnpHDcaEGBGzJ74y7cTFwBfm6ylDm3RJhfoTuaH2EebyQ3H6G
Booa0BGKR1P3P5TO4WgI1E/LkYaeyMNIMfOGHGXph1g1Q40fw4S12sfHO2KM90Ex
3TIA1KW9Qv3r4A+hzU/Ljavhy01VFgMDwQQ5uQiRvGiTlgMq+tHAtWPraW3i0J6R
us+lDzermI2WgyplCylGASQ+1CvyP174
-----END CERTIFICATE-----
Generated at Sat May 10 10:27:49 2025 by rpki-client