Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30633.roa
File:                     AS30633.roa (raw, json)
Hash identifier:          JI0wWG3TafF7vlC4H7jWktR50s54z5p/755q3PvMJ0Q=
Subject key identifier:   41:84:F3:66:55:C4:A8:89:7D:30:BB:A1:F8:52:05:C2:4B:9D:33:48
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       12549D88F814D2416F82198545AB837D79D4D9F8
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30633.roa
Signing time:             Tue 01 Jul 2025 05:07:25 +0000
ROA not before:           Tue 01 Jul 2025 05:02:25 +0000
ROA not after:            Tue 30 Jun 2026 05:07:25 +0000
asID:                     30633
IP address blocks:        40.27.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 02:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:54:9d:88:f8:14:d2:41:6f:82:19:85:45:ab:83:7d:79:d4:d9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jul  1 05:02:25 2025 GMT
            Not After : Jun 30 05:07:25 2026 GMT
        Subject: CN=4184F36655C4A8897D30BBA1F85205C24B9D3348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:08:11:31:70:27:fc:23:e6:9a:6f:ea:19:
                    c1:f6:4d:58:90:61:78:fa:f9:86:92:7c:8e:d4:94:
                    95:2e:d7:63:41:09:4b:c8:ea:98:f8:3c:0d:89:6b:
                    d3:23:78:5f:79:55:1b:2a:e1:a5:21:f5:45:22:e5:
                    df:32:3f:d4:c6:a6:49:38:c3:25:c8:88:4e:3f:32:
                    e0:22:36:e4:18:15:e5:75:0c:71:96:b9:2f:9e:60:
                    10:c0:ca:c0:be:34:c5:82:5e:15:7b:e0:dc:e5:1e:
                    bc:65:f6:31:b3:48:b8:25:a3:51:d3:ce:99:11:a9:
                    17:28:b8:72:8e:60:8e:f7:e0:ad:b2:2e:df:fc:6d:
                    fd:c2:59:3c:2a:ad:a3:ce:32:4a:ff:4c:e9:bc:dc:
                    b6:76:96:bd:15:6f:92:88:58:a7:ea:ce:94:3d:60:
                    19:1c:2e:7c:8c:cd:17:65:cd:5d:3e:2e:86:1c:24:
                    ea:c4:92:79:84:53:2d:f4:a8:e4:57:80:7d:f0:5a:
                    f1:a6:98:71:4e:15:ab:d8:bd:cd:39:15:69:23:82:
                    06:42:82:0a:d7:08:8c:ad:42:5f:f6:a7:c3:1f:76:
                    c4:4f:15:2d:30:15:9b:a1:51:66:b5:b2:f5:1a:d0:
                    af:f7:13:90:4f:7c:27:88:22:df:c1:12:39:30:99:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:84:F3:66:55:C4:A8:89:7D:30:BB:A1:F8:52:05:C2:4B:9D:33:48
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS30633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:c2:b3:b2:d1:c2:b7:ea:46:21:08:bf:2e:41:7a:e4:73:
         48:b6:19:7c:1f:80:da:1b:0f:72:70:1f:f3:52:7b:2c:2f:8e:
         3b:ea:0b:b1:73:d8:d7:35:69:9f:11:8b:a0:90:e7:7b:a0:27:
         74:73:44:44:57:1e:ce:7d:c7:6a:b9:74:0b:52:9b:46:10:9b:
         07:62:90:c5:11:b0:53:46:6e:94:fe:81:08:56:a8:9b:c2:d0:
         52:a1:fb:84:c2:0f:f5:70:e4:98:52:97:67:a2:44:15:6a:41:
         e1:0b:67:77:17:ef:5d:83:9c:69:5f:2a:a8:b3:61:53:50:e7:
         af:bd:10:f3:fa:8d:d1:18:ee:d8:8c:b8:3a:5b:ff:19:61:06:
         54:64:0a:1b:4d:00:ba:95:e5:23:0e:7d:6a:c5:4c:04:92:3e:
         b6:99:5d:12:db:a0:b8:dc:45:92:d9:de:8b:40:dd:2b:6f:db:
         81:3a:e4:46:2d:22:94:6a:84:ce:86:04:c6:90:e9:ce:96:8a:
         03:9d:64:6d:28:16:73:62:97:b9:4c:41:4e:83:e4:2f:ff:d6:
         10:76:28:cc:2c:35:8c:b5:48:4f:75:9e:2a:89:6f:63:1e:59:
         cb:36:1a:45:70:0c:0b:e7:3e:b9:8d:96:a3:ac:00:ad:c6:51:
         9a:29:a5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 02:07:42 2025 by rpki-client