Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
File:                     3230352e3231312e3135342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          xY4hMSYciaHZ1hydjFbWAcH9Te0ZJc6AlQ/k18NTCjY=
Subject key identifier:   10:4F:B6:AB:A6:D7:7B:E0:C3:54:10:7B:FE:0E:60:99:63:01:B9:8C
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       050069DBEA32B8C45A71B919AFB2C9E496A553EC
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 25 Jul 2025 08:18:50 +0000
ROA not before:           Fri 25 Jul 2025 08:13:50 +0000
ROA not after:            Fri 24 Jul 2026 08:18:50 +0000
asID:                     834
IP address blocks:        205.211.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:00:69:db:ea:32:b8:c4:5a:71:b9:19:af:b2:c9:e4:96:a5:53:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Jul 25 08:13:50 2025 GMT
            Not After : Jul 24 08:18:50 2026 GMT
        Subject: CN=104FB6ABA6D77BE0C354107BFE0E60996301B98C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:78:f7:a7:b0:f6:a4:e2:e7:21:be:9a:6d:
                    00:41:6a:d1:a6:6b:d0:4d:e1:20:0d:e0:99:db:76:
                    ee:c3:14:dc:a0:52:4d:8b:c9:ac:c4:8e:0b:8d:9b:
                    bc:bf:c6:78:5e:49:32:2a:b2:3d:71:f6:03:16:a3:
                    8a:1f:08:9c:17:cf:16:1e:73:c7:e6:f5:c9:0d:9c:
                    40:d6:7b:8e:4f:25:f5:27:d7:48:08:a9:88:4f:17:
                    7d:b2:ff:f7:e4:12:1d:51:98:39:88:b5:f2:5f:67:
                    29:64:16:1b:e3:2f:cc:5a:d8:cd:2f:3b:91:e6:2d:
                    31:c5:34:63:b3:9a:d1:54:18:8f:c9:7b:54:bf:a0:
                    6b:d7:96:24:18:dc:c5:60:54:25:d4:20:13:a9:f1:
                    05:15:d0:e5:a9:b1:c8:1f:43:74:53:80:63:b5:5a:
                    8f:5b:d3:a9:b0:22:a9:38:7a:17:ea:5d:8b:54:d9:
                    8b:c9:05:c4:9f:f5:de:56:bc:ef:11:03:83:d3:46:
                    52:38:f4:78:42:e8:43:18:97:27:77:25:34:21:a1:
                    8a:c4:c5:2f:4e:a0:8f:1c:43:17:14:45:94:53:3c:
                    b1:1b:f3:da:2c:0b:86:f4:ec:39:6c:02:f9:57:03:
                    74:27:ac:a8:95:5a:21:d2:1b:2c:4c:aa:07:d1:59:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4F:B6:AB:A6:D7:7B:E0:C3:54:10:7B:FE:0E:60:99:63:01:B9:8C
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:07:72:bd:5d:11:67:20:23:ed:92:3c:f0:56:bf:58:47:fd:
         6a:ca:a2:a1:78:e3:b8:2d:b2:34:5e:6d:b7:f7:f6:a0:6e:c6:
         38:eb:0a:25:26:03:da:79:b4:d4:07:6e:ce:86:b0:5f:0b:88:
         3a:5a:b8:a5:b4:55:e9:81:aa:ff:c0:15:16:a4:77:11:36:eb:
         08:ed:ad:87:38:a1:0d:70:6a:cd:d0:21:a8:75:e2:98:76:8c:
         fe:64:f0:8d:b2:8f:95:98:f1:51:13:66:ec:d2:07:20:b8:52:
         fb:a0:c1:95:4f:d6:d0:7f:25:8a:25:13:82:61:77:d7:fe:db:
         ed:7a:0e:8c:5a:c8:88:15:d3:71:65:1d:af:15:8b:3d:96:65:
         59:39:66:04:a2:aa:15:f0:54:95:7d:f9:b9:d4:51:d6:95:b3:
         16:c7:00:f4:92:1a:4e:29:3d:02:3d:a0:36:be:14:dc:cf:6b:
         7b:47:6f:7a:f0:ea:bd:d9:6b:f5:b9:30:ff:9e:49:30:15:6c:
         a1:5a:01:0e:b6:ef:f2:64:b4:21:70:75:77:6c:ad:6b:97:d3:
         0a:4d:79:d9:58:d0:ab:6a:9d:0c:d0:68:44:85:24:5e:e1:12:
         37:fb:8c:e2:15:49:ea:a6:fc:87:00:eb:66:8b:2e:4a:5d:31:
         dc:24:67:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:52 2025 by rpki-client