Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e203235313938.roa
File:                     3130342e3134352e3230382e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          44jikopXiAW1LP17+al9oyIFXDGr6tdEzlXAGPKb82A=
Subject key identifier:   43:71:11:03:91:02:6A:A1:70:B3:A9:63:BF:CB:76:F7:E8:B1:A1:80
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       0C318CD9E488532F40D64FE6A3B360066AFF9FDB
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e203235313938.roa
Signing time:             Mon 14 Jul 2025 05:57:29 +0000
ROA not before:           Mon 14 Jul 2025 05:52:29 +0000
ROA not after:            Mon 13 Jul 2026 05:57:29 +0000
asID:                     25198
IP address blocks:        104.145.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:31:8c:d9:e4:88:53:2f:40:d6:4f:e6:a3:b3:60:06:6a:ff:9f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jul 14 05:52:29 2025 GMT
            Not After : Jul 13 05:57:29 2026 GMT
        Subject: CN=4371110391026AA170B3A963BFCB76F7E8B1A180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:3c:74:39:1b:39:9f:ed:74:45:62:db:46:
                    4b:3b:af:d3:78:c5:ef:fa:9c:b8:60:d6:73:73:bf:
                    47:fb:fb:6a:10:3a:93:dc:34:17:d7:94:16:bf:a5:
                    e0:66:c5:dd:3a:98:eb:7e:07:b0:a6:84:6f:d8:1e:
                    dd:5e:8a:b0:b9:4c:ac:3c:b4:59:4c:96:62:51:9c:
                    44:24:03:20:9d:08:15:b2:70:7e:19:78:60:46:1c:
                    19:3d:a3:50:ac:e8:ea:44:93:30:38:d4:20:aa:88:
                    d1:63:a9:57:83:c4:a1:5d:ed:c8:0b:b6:d6:28:44:
                    2a:8b:d0:9e:fb:82:9b:3b:04:9c:c7:45:82:54:5a:
                    2f:57:12:d4:7d:0d:f1:7e:4b:fd:3b:6e:b9:4a:bb:
                    55:12:57:72:05:89:48:f0:5d:23:af:60:2c:e6:21:
                    73:57:60:03:4f:97:36:fb:00:41:e0:c4:7c:7c:1b:
                    c5:96:c9:30:4b:5b:8f:9a:5d:97:88:2f:a5:ef:2c:
                    b3:82:fc:46:2d:be:b4:cd:09:87:75:1f:15:b9:bb:
                    e5:91:70:5c:c9:8c:2f:0c:6a:0a:76:d6:2d:3d:34:
                    c2:77:4c:49:d3:ce:c9:86:c6:c1:ca:b9:54:8d:e7:
                    cc:a6:e4:4f:f7:d3:f9:ca:4c:71:e7:9f:84:02:28:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:71:11:03:91:02:6A:A1:70:B3:A9:63:BF:CB:76:F7:E8:B1:A1:80
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:d6:d8:bf:2d:44:da:04:71:95:4d:15:07:0b:bb:34:13:3d:
         66:34:66:9a:c4:01:45:26:45:b3:8c:4d:7c:b0:f8:ad:c6:23:
         cc:cc:be:24:12:28:8f:7d:30:99:c3:ba:a4:e4:4e:8d:d5:1c:
         17:67:d7:6f:98:b3:17:55:95:25:aa:cf:d8:2b:11:87:60:6e:
         20:6b:08:1b:b5:cc:2c:23:82:ec:c5:f2:cf:89:48:4a:4b:f7:
         b2:c5:8e:66:1d:16:aa:17:52:b4:2e:47:ac:71:5b:a1:ec:55:
         d6:ce:ec:df:70:87:14:44:db:f4:15:e3:a3:6f:ff:df:b6:fb:
         a7:61:05:59:1e:c8:15:44:75:11:a7:00:51:5c:7e:85:77:4d:
         9e:5a:e7:2d:2d:4f:9e:ba:cd:e3:e0:35:c8:a9:4e:9c:2b:01:
         7c:56:c3:f0:c9:b9:71:e4:63:70:dc:da:25:db:33:b3:67:08:
         e2:b9:76:94:23:15:c7:92:9b:db:b0:32:18:69:af:c8:06:05:
         85:5d:b8:5e:56:f8:60:03:2f:f4:b6:10:0e:cb:49:8e:65:a3:
         d2:77:6c:06:1a:33:a8:fb:f1:29:59:b0:84:0d:c0:19:6e:14:
         e0:f7:85:3a:e7:ef:e6:48:a8:81:52:8d:1a:43:b7:c5:e4:14:
         55:a3:e4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:28:23 2025 by rpki-client