Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32322d3234203d3e20383334.roa
File:                     3130342e3134352e3230382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          N/j1T2LZPC6iCFh4mB/Ker6ZhYNjfPES/itB+Cj4/S0=
Subject key identifier:   4C:18:7C:E1:9F:D7:0A:B4:EB:C0:6D:52:59:0F:61:8C:47:09:A1:35
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       3440EA1C4504636B5F6778711344A1BEE38874DC
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32322d3234203d3e20383334.roa
Signing time:             Sat 28 Jun 2025 12:06:26 +0000
ROA not before:           Sat 28 Jun 2025 12:01:26 +0000
ROA not after:            Sat 27 Jun 2026 12:06:26 +0000
asID:                     834
IP address blocks:        104.145.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 07:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:40:ea:1c:45:04:63:6b:5f:67:78:71:13:44:a1:be:e3:88:74:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 28 12:01:26 2025 GMT
            Not After : Jun 27 12:06:26 2026 GMT
        Subject: CN=4C187CE19FD70AB4EBC06D52590F618C4709A135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:5d:59:5f:d4:cf:12:48:ee:bf:fb:6c:ad:
                    3f:1b:c5:50:42:d7:34:38:83:1d:17:ef:49:e2:bb:
                    35:58:a1:63:af:06:3c:28:54:16:fd:04:6c:45:06:
                    97:44:b2:0d:56:92:f6:57:df:b2:ba:e5:37:28:26:
                    67:18:b9:6d:ba:e6:71:10:cc:24:df:67:e6:e4:31:
                    1f:f4:53:b6:3c:30:f5:1f:84:15:73:a6:3f:b6:6e:
                    2e:4d:0a:19:4b:cf:36:8c:42:d7:af:13:49:65:52:
                    3b:ac:a7:8c:1f:9d:7e:e8:00:29:71:19:9b:e6:d8:
                    fc:58:1b:c0:f6:6e:a3:67:b2:d1:80:f2:29:e5:d1:
                    a3:41:13:26:00:a3:cf:1b:0b:03:64:d8:2b:75:f6:
                    ec:40:42:93:64:53:02:3b:af:4a:de:93:83:26:a0:
                    98:8d:95:cb:c6:5e:af:c1:4d:d5:c7:ec:1d:3c:43:
                    2f:27:89:b7:3b:49:8d:56:fb:f3:10:9a:ff:01:79:
                    1e:c9:17:2d:cc:77:a8:e2:be:1e:91:e3:91:61:75:
                    3b:d6:ff:16:88:27:af:43:d0:86:80:77:80:c7:7a:
                    a7:95:8f:a5:d2:69:7b:4c:17:bb:7e:07:36:9a:c8:
                    ad:2f:e8:89:a5:55:57:87:19:5e:15:d0:fd:86:05:
                    87:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:18:7C:E1:9F:D7:0A:B4:EB:C0:6D:52:59:0F:61:8C:47:09:A1:35
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:6e:61:87:ac:69:ad:a9:91:61:a2:a5:8d:0a:bf:87:9a:af:
         21:29:dd:da:26:98:63:42:bc:cb:08:9a:ee:57:d5:42:36:cc:
         30:21:71:a8:47:89:5d:78:84:65:ac:39:f7:e8:70:89:4c:e0:
         cb:a9:06:da:c5:00:ab:92:ba:29:73:fd:1a:df:94:ca:ad:90:
         a2:1c:ac:99:af:cc:ec:8a:8d:e6:35:c2:1c:98:eb:5a:bb:01:
         e8:89:cc:6c:69:6e:0f:f1:f2:10:a3:3d:45:4f:be:87:d6:6b:
         a6:ff:48:41:b0:0f:7d:6e:0d:06:86:47:7e:0b:71:6d:90:7d:
         7c:89:eb:11:1c:d6:ed:a9:fb:94:fd:b9:d1:c1:d0:08:4f:92:
         86:7c:3d:32:a4:3c:70:e8:a6:50:86:27:c4:99:81:e3:2d:54:
         d8:52:85:50:7f:fd:9e:ba:2d:4e:13:80:7d:49:a7:8e:98:1b:
         44:53:9a:cd:c5:30:13:13:6e:03:02:ca:65:90:47:de:12:91:
         62:45:b7:0e:11:d9:0f:59:3d:78:eb:d1:86:07:42:5d:f5:4b:
         1c:3d:ae:c6:3c:c2:9a:a8:bc:9e:4b:44:e6:5c:40:83:4d:18:
         a3:f2:f7:96:2f:fb:18:e6:cb:8e:4a:cc:7f:8f:f0:1b:33:6e:
         c7:57:fe:3c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUNEDqHEUEY2tfZ3hxE0ShvuOIdNwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdhOGVkZDlkNDk1Y2NlNDYyN2I1Zjk0NDUyZGZiYWNl
NjU0OWI5ZjY0ZDRiY2ZjYmQwHhcNMjUwNjI4MTIwMTI2WhcNMjYwNjI3MTIwNjI2
WjAzMTEwLwYDVQQDEyg0QzE4N0NFMTlGRDcwQUI0RUJDMDZENTI1OTBGNjE4QzQ3
MDlBMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ORdWV/UzxJI
7r/7bK0/G8VQQtc0OIMdF+9J4rs1WKFjrwY8KFQW/QRsRQaXRLINVpL2V9+yuuU3
KCZnGLltuuZxEMwk32fm5DEf9FO2PDD1H4QVc6Y/tm4uTQoZS882jELXrxNJZVI7
rKeMH51+6AApcRmb5tj8WBvA9m6jZ7LRgPIp5dGjQRMmAKPPGwsDZNgrdfbsQEKT
ZFMCO69K3pODJqCYjZXLxl6vwU3Vx+wdPEMvJ4m3O0mNVvvzEJr/AXkeyRctzHeo
4r4ekeORYXU71v8WiCevQ9CGgHeAx3qnlY+l0ml7TBe7fgc2msitL+iJpVVXhxle
FdD9hgWHxwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEwYfOGf1wq068BtUlkPYYxH
CaE1MB8GA1UdIwQYMBaAFEAjs/cyIhklQMzcMWcchQZjMd2iMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzMzODMwMzQ2MTkxMjQxY2ViNjkyOWM0ZjY5MTJlZjkxLzAv
NDAyM0IzRjczMjIyMTkyNTQwQ0NEQzMxNjcxQzg1MDY2MzMxRERBMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2VkY2ZlOGQzLTZhZjktNGQ2MC04ZTk2LWY2ZGZiNDU1MzYxYy9lN2E4
ZWRkOWQ0OTVjY2U0NjI3YjVmOTQ0NTJkZmJhY2U2NTQ5YjlmNjRkNGJjZmNiZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8zMzgzMDM0NjE5MTI0MWNlYjY5Mjlj
NGY2OTEyZWY5MS8wLzMxMzAzNDJlMzEzNDM1MmUzMjMwMzgyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJokdAwDQYJKoZIhvcNAQELBQAD
ggEBAHNuYYesaa2pkWGipY0Kv4earyEp3dommGNCvMsImu5X1UI2zDAhcahHiV14
hGWsOffocIlM4MupBtrFAKuSuilz/RrflMqtkKIcrJmvzOyKjeY1whyY61q7AeiJ
zGxpbg/x8hCjPUVPvofWa6b/SEGwD31uDQaGR34LcW2QfXyJ6xEc1u2p+5T9udHB
0AhPkoZ8PTKkPHDoplCGJ8SZgeMtVNhShVB//Z66LU4TgH1Jp46YG0RTms3FMBMT
bgMCymWQR94SkWJFtw4R2Q9ZPXjr0YYHQl31Sxw9rsY8wpqovJ5LROZcQINNGKPy
95Yv+xjmy45KzH+P8BszbsdX/jw=
-----END CERTIFICATE-----
Generated at Sat Jul 5 21:28:00 2025 by rpki-client