Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa
File:                     3230342e31342e37362e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier:          Ng+VhHuQAlAirf8dvXDUwY1uwx18qCOLXljsSGzbVpY=
Subject key identifier:   92:E1:EF:F6:BA:EA:27:B7:B3:3A:FC:B0:1D:A0:D0:7B:69:30:9A:A8
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       64B5701A1BC64B9F5413A12AA2F16A504E9837C5
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa
Signing time:             Mon 30 Jun 2025 06:02:43 +0000
ROA not before:           Mon 30 Jun 2025 05:57:43 +0000
ROA not after:            Mon 29 Jun 2026 06:02:43 +0000
asID:                     152672
IP address blocks:        204.14.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 13:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:70:1a:1b:c6:4b:9f:54:13:a1:2a:a2:f1:6a:50:4e:98:37:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Jun 30 05:57:43 2025 GMT
            Not After : Jun 29 06:02:43 2026 GMT
        Subject: CN=92E1EFF6BAEA27B7B33AFCB01DA0D07B69309AA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:63:5f:91:b1:e6:24:30:bd:29:7a:84:f1:
                    35:84:b2:74:aa:3b:99:23:2f:88:78:a7:99:e6:82:
                    33:b6:e7:5e:e8:16:45:13:6c:9d:b3:66:a4:58:d3:
                    45:c6:4a:b0:cf:cb:73:60:14:e7:1c:5f:2c:92:44:
                    d8:14:05:1f:a6:aa:df:c9:69:ff:9c:4f:6f:b1:ca:
                    60:4a:c2:97:93:44:8a:ed:28:b3:a4:7b:12:37:9d:
                    0b:e4:d4:55:a1:31:6a:1c:e3:f6:3b:0b:fe:1a:6c:
                    f5:91:25:29:69:76:9a:82:66:8d:3c:a1:e2:25:51:
                    47:86:25:83:a2:6b:37:4d:4e:9d:19:58:48:1d:06:
                    aa:aa:28:b9:0d:d3:24:fc:49:24:8e:3d:5f:8f:b0:
                    64:20:83:57:d7:8f:54:73:77:9a:14:3d:5b:c1:34:
                    7d:8d:6b:fb:e2:1b:c8:f8:61:dd:d5:34:a7:9a:c6:
                    45:c2:38:fa:a4:8d:f3:87:91:55:e1:cd:28:a3:99:
                    44:0d:d3:7f:42:5e:aa:37:fa:ca:b1:6a:5c:72:16:
                    8b:f8:43:40:89:92:96:0f:ea:8b:02:6e:3d:bb:10:
                    a2:18:76:9c:9a:9d:56:cc:8a:0a:ee:0c:f0:ee:b0:
                    95:2c:1f:bb:05:a8:5a:d3:b1:5e:ce:6e:b5:13:73:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E1:EF:F6:BA:EA:27:B7:B3:3A:FC:B0:1D:A0:D0:7B:69:30:9A:A8
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:22:9e:91:29:00:f3:37:26:a4:5a:60:82:ea:42:f0:c7:52:
         7c:a8:85:32:d6:4f:7c:8c:a5:e3:84:49:32:e0:c0:35:49:12:
         4d:37:d9:ef:4b:df:1c:ca:5f:7f:77:f3:c4:0f:5d:45:96:be:
         6f:f7:e3:91:bd:43:10:10:d1:b8:f9:13:f2:5d:98:38:52:d0:
         31:5a:33:3c:a8:4a:58:78:80:42:96:67:44:c5:44:50:ee:e9:
         f8:2a:e3:32:37:5a:3e:fe:8a:17:7a:0e:a0:e9:0a:3c:e3:8a:
         fd:11:40:9e:41:66:da:9b:fa:56:5d:b2:55:4d:96:80:2e:83:
         c0:f8:b0:fe:36:0b:6b:9e:92:56:8b:d6:91:ce:2d:05:24:1b:
         95:89:1a:57:ba:84:ac:79:d4:96:ee:fe:60:43:0e:6d:2c:06:
         2e:33:c2:e2:7d:51:5c:ce:35:fc:95:e7:7f:bf:94:f8:0d:2e:
         a8:e1:b1:55:39:86:77:e9:54:2f:5a:d4:ef:f2:7d:b8:81:46:
         81:9a:51:5b:6d:6c:46:e9:b1:fd:ca:66:ae:ca:c7:9a:d5:56:
         be:db:65:c9:38:f4:a7:21:da:07:c3:12:70:33:24:e2:f6:74:
         4c:6b:72:d9:1c:5e:11:d5:3d:d8:51:26:4b:7a:d3:77:de:4e:
         9e:7b:34:09
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUZLVwGhvGS59UE6EqovFqUE6YN8UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj
Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjUwNjMwMDU1NzQzWhcNMjYwNjI5MDYwMjQz
WjAzMTEwLwYDVQQDEyg5MkUxRUZGNkJBRUEyN0I3QjMzQUZDQjAxREEwRDA3QjY5
MzA5QUE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGBjX5Gx5iQw
vSl6hPE1hLJ0qjuZIy+IeKeZ5oIztude6BZFE2yds2akWNNFxkqwz8tzYBTnHF8s
kkTYFAUfpqrfyWn/nE9vscpgSsKXk0SK7SizpHsSN50L5NRVoTFqHOP2Owv+Gmz1
kSUpaXaagmaNPKHiJVFHhiWDoms3TU6dGVhIHQaqqii5DdMk/Ekkjj1fj7BkIINX
149Uc3eaFD1bwTR9jWv74hvI+GHd1TSnmsZFwjj6pI3zh5FV4c0oo5lEDdN/Ql6q
N/rKsWpcchaL+ENAiZKWD+qLAm49uxCiGHacmp1WzIoK7gzw7rCVLB+7Baha07Fe
zm61E3NknwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJLh7/a66ie3szr8sB2g0Htp
MJqoMB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv
REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0
YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmIy
ZGFiN2NjMGE5MS8wLzMyMzAzNDJlMzEzNDJlMzczNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzUzMjM2MzczMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMwOTDANBgkqhkiG9w0BAQsF
AAOCAQEAdCKekSkA8zcmpFpggupC8MdSfKiFMtZPfIyl44RJMuDANUkSTTfZ70vf
HMpff3fzxA9dRZa+b/fjkb1DEBDRuPkT8l2YOFLQMVozPKhKWHiAQpZnRMVEUO7p
+CrjMjdaPv6KF3oOoOkKPOOK/RFAnkFm2pv6Vl2yVU2WgC6DwPiw/jYLa56SVovW
kc4tBSQblYkaV7qErHnUlu7+YEMObSwGLjPC4n1RXM41/JXnf7+U+A0uqOGxVTmG
d+lUL1rU7/J9uIFGgZpRW21sRumx/cpmrsrHmtVWvttlyTj0pyHaB8MScDMk4vZ0
TGty2RxeEdU92FEmS3rTd95Onns0CQ==
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:52:49 2025 by rpki-client