Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231332e302f32342d3234203d3e20323133373334.roa
File:                     3130342e3134352e3231332e302f32342d3234203d3e20323133373334.roa (raw, json)
Hash identifier:          7EQXGgLb7ANm1FebBWNa8v1ZJrpxWQcYKxOjQctuQhw=
Subject key identifier:   35:95:16:9A:92:2E:75:12:9C:27:20:0C:E7:DA:01:A8:9F:06:8E:A5
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       0244725FEA572F63B10A42589347390679F4BAA1
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231332e302f32342d3234203d3e20323133373334.roa
Signing time:             Tue 15 Jul 2025 02:16:04 +0000
ROA not before:           Tue 15 Jul 2025 02:11:04 +0000
ROA not after:            Tue 14 Jul 2026 02:16:04 +0000
asID:                     213734
IP address blocks:        104.145.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 11:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:44:72:5f:ea:57:2f:63:b1:0a:42:58:93:47:39:06:79:f4:ba:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jul 15 02:11:04 2025 GMT
            Not After : Jul 14 02:16:04 2026 GMT
        Subject: CN=3595169A922E75129C27200CE7DA01A89F068EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b9:39:13:a3:c4:14:14:4f:a2:15:d8:df:a3:
                    ea:4d:08:29:1f:a5:97:3e:ea:a6:3c:3a:b2:3b:ee:
                    23:98:b2:38:59:05:44:de:a6:6d:ae:2b:9c:34:66:
                    0b:a1:cc:7b:b7:ca:74:63:06:ee:2c:f3:99:b7:04:
                    0b:ec:3d:49:d3:37:24:a5:49:76:f0:9b:eb:63:49:
                    7a:c2:01:54:c4:20:70:75:ef:41:84:35:ef:f5:5b:
                    65:82:62:c1:ed:98:19:64:96:94:c9:a5:41:60:60:
                    3e:21:09:0d:16:2d:07:38:aa:2b:0d:9e:95:cc:fb:
                    7c:15:9e:13:a9:af:67:01:b1:ae:1b:48:17:a2:84:
                    16:8a:9e:2f:d2:ec:43:ae:4c:71:26:43:9c:5a:fe:
                    2b:41:a1:1c:13:88:2b:39:59:f5:aa:37:ac:e1:a6:
                    ef:e9:c5:b4:35:dd:71:28:7c:f1:14:db:08:09:2b:
                    e6:59:83:92:1a:7b:50:bd:3b:b7:58:0b:1c:ea:b7:
                    04:4b:22:d5:29:ef:b3:11:f7:0c:3e:ae:bc:50:e8:
                    0e:6d:24:d4:78:2c:f9:ed:64:49:2b:54:37:c2:55:
                    79:3e:6e:31:a1:d8:a9:9f:35:9c:4c:74:b6:a5:61:
                    1e:08:39:d0:b9:49:ba:61:97:50:18:83:83:89:ae:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:16:9A:92:2E:75:12:9C:27:20:0C:E7:DA:01:A8:9F:06:8E:A5
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231332e302f32342d3234203d3e20323133373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:d0:23:14:a4:c6:7e:51:0f:50:29:67:18:92:8f:4e:88:df:
         1b:72:48:a3:b3:11:09:89:00:4c:2c:af:57:48:0d:0e:20:b0:
         48:7b:8b:2d:70:82:b5:23:c7:1c:97:1a:80:c2:cb:e6:ee:af:
         8f:ed:ee:5b:31:22:86:94:13:f4:8c:4b:61:5f:3c:43:24:ec:
         45:56:6a:a6:da:71:95:5e:84:80:7b:80:65:60:9c:66:65:30:
         9e:dd:2d:f8:89:70:71:54:50:6f:1c:67:96:f4:db:0c:eb:ad:
         77:cf:be:59:c6:48:8a:b9:69:49:54:10:5a:46:71:38:89:56:
         78:5f:01:11:f9:50:d3:d1:44:a2:64:a8:c5:29:56:64:c0:77:
         8a:81:89:59:95:99:19:bf:8f:14:e7:07:1b:f7:3e:dd:f5:0b:
         b4:be:f6:4d:9c:51:e6:b6:fb:10:e1:0c:7c:7c:f3:02:0e:cf:
         00:70:42:a0:ad:4c:2f:d6:cd:fa:c8:ce:60:43:87:53:8f:a4:
         26:ad:41:1e:98:a8:79:b0:7f:89:43:8b:4d:6c:fb:06:4b:de:
         ef:a5:26:89:37:6b:ae:bf:0c:9d:bc:3f:a4:b4:ee:c2:6a:d7:
         e5:12:5d:3f:01:71:0d:3c:5d:66:31:04:aa:56:82:ee:d0:34:
         76:de:e8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:56:36 2025 by rpki-client