Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20313531333733.roa
File:                     3130342e3134352e3231342e302f32342d3234203d3e20313531333733.roa (raw, json)
Hash identifier:          O1LJ6enKTPgOfUQvzI4p0w0w70r9tslso/Lel3/0UJA=
Subject key identifier:   C5:DA:84:71:42:D8:90:59:92:2B:2E:89:82:4E:03:B9:02:70:B0:34
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       34BB950167B5F3170752DBD441E7A4D0D39E341B
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20313531333733.roa
Signing time:             Fri 20 Jun 2025 05:47:09 +0000
ROA not before:           Fri 20 Jun 2025 05:42:09 +0000
ROA not after:            Fri 19 Jun 2026 05:47:09 +0000
asID:                     151373
IP address blocks:        104.145.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:bb:95:01:67:b5:f3:17:07:52:db:d4:41:e7:a4:d0:d3:9e:34:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 20 05:42:09 2025 GMT
            Not After : Jun 19 05:47:09 2026 GMT
        Subject: CN=C5DA847142D89059922B2E89824E03B90270B034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:1a:5a:dd:48:ee:95:ae:5b:04:ae:ed:85:
                    1a:88:d4:68:3d:97:6f:1f:d2:50:48:95:5a:1a:67:
                    af:72:80:d1:70:f9:4a:31:63:12:09:b1:5a:fe:6a:
                    03:db:1d:9a:81:9f:7b:c7:30:ed:13:ad:5b:4f:38:
                    36:b9:56:6e:ad:28:36:67:c5:5b:fa:05:4f:82:9d:
                    e2:c4:57:81:24:96:dc:c7:a2:56:af:59:0d:a5:3a:
                    21:bc:c4:78:fb:c7:32:c2:4b:fe:7f:fc:7d:35:11:
                    7c:2a:bb:45:68:d4:2a:56:df:f4:68:42:6f:76:25:
                    cb:d1:5a:3c:47:17:7f:f8:19:46:d0:a9:f8:6e:51:
                    32:69:34:70:6b:01:d4:41:48:4c:85:00:9d:0f:43:
                    d9:f4:fe:e2:9c:43:4a:9c:24:a9:83:c8:79:3e:ee:
                    99:61:ff:a8:3d:86:50:c6:57:a4:26:a9:a1:28:be:
                    8b:f2:88:eb:b2:81:7f:86:20:dd:9d:52:b6:09:da:
                    00:e8:63:1f:1e:b8:a8:51:d1:40:f9:06:e7:20:20:
                    ae:2d:3f:3a:4a:2a:6e:0a:90:f4:1a:e8:3a:66:40:
                    6b:12:1b:19:36:c7:e2:5c:ec:da:aa:76:fb:5f:85:
                    94:da:5c:c4:33:2c:13:6c:a7:91:0f:08:e8:82:b8:
                    51:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:84:71:42:D8:90:59:92:2B:2E:89:82:4E:03:B9:02:70:B0:34
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20313531333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3b:ff:10:72:a1:78:95:bb:6d:fb:ab:1a:3f:06:0b:e5:7f:
         8d:f1:93:ed:4e:46:2c:79:91:ec:20:8c:8a:f0:78:7f:a7:ad:
         71:b9:70:b9:82:ba:76:35:87:e2:a7:7f:19:7f:32:57:65:78:
         ae:01:41:76:9b:e3:4d:3b:2f:6e:e7:ff:4c:11:0d:42:6a:e2:
         5c:59:0a:10:74:b9:14:61:ad:32:fa:65:4f:58:96:6e:dc:34:
         fd:bb:2b:18:a6:10:a0:3e:6e:32:61:a9:e5:c5:60:28:3a:d7:
         54:1b:0e:ec:96:d5:9b:55:cb:16:a4:eb:08:2c:23:34:74:79:
         e9:9d:9f:bf:c1:47:8c:25:14:3f:0b:27:55:14:53:87:0a:11:
         9c:b9:cd:2c:a7:f9:b6:8a:97:6b:cf:47:ba:34:44:4a:1d:c8:
         2b:b0:2c:ab:62:0c:b9:a4:2c:34:31:69:21:97:79:84:35:1a:
         e6:c2:f1:7b:11:ff:f1:98:c6:7a:1a:a0:9a:2d:63:1f:4b:ce:
         69:c2:76:27:a6:55:ef:6e:1a:4c:4d:72:72:a9:f4:62:56:eb:
         53:cb:2f:81:6e:64:6e:d7:36:aa:6a:30:c9:8d:eb:4f:7b:78:
         72:10:d5:5c:44:33:9c:51:10:f6:ad:97:91:04:12:cb:cb:1c:
         f4:af:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:27:01 2025 by rpki-client