Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32332d3234203d3e20383334.roa
File:                     3130342e3134352e3230382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          KG6gjpNfEgBxN52knPoi8xbDtEU+3jm7abIRiXZvGGM=
Subject key identifier:   0A:48:1F:BC:3F:E7:28:05:2E:F4:60:FB:2C:F8:7E:3B:36:6B:D1:29
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       130555994CCE2AE1202B3E7FF6EF401B257CB66E
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32332d3234203d3e20383334.roa
Signing time:             Mon 15 Jun 2026 09:16:58 +0000
ROA not before:           Mon 15 Jun 2026 09:11:58 +0000
ROA not after:            Mon 14 Jun 2027 09:16:58 +0000
asID:                     834
IP address blocks:        104.145.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 17:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:05:55:99:4c:ce:2a:e1:20:2b:3e:7f:f6:ef:40:1b:25:7c:b6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 15 09:11:58 2026 GMT
            Not After : Jun 14 09:16:58 2027 GMT
        Subject: CN=0A481FBC3FE728052EF460FB2CF87E3B366BD129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:9d:87:91:a6:98:1a:42:3a:a9:86:db:cd:
                    7c:01:8f:14:e1:f3:a5:6b:85:d9:1b:84:e2:0d:ea:
                    48:8b:a6:f4:b6:ee:c6:25:cc:b3:1e:c4:b5:03:10:
                    76:68:db:89:16:76:1a:c9:80:33:0d:f2:3b:fd:9f:
                    34:99:98:1e:02:2a:fa:5e:ca:40:80:1c:06:7a:46:
                    6b:0b:8f:a9:ea:c9:47:78:6c:25:4e:aa:00:1b:33:
                    f6:0b:0c:29:d3:5d:49:99:b0:b5:63:54:91:f1:c4:
                    ea:24:4a:61:b7:1b:25:37:e7:d1:21:c8:65:61:35:
                    75:af:60:4a:dd:7c:7f:3f:4a:d0:e8:f7:ba:e1:6e:
                    04:e0:c3:42:7b:ed:ab:31:7c:0b:a2:40:ed:e5:00:
                    df:97:96:1a:78:93:1f:45:36:7b:fa:3a:e0:f9:eb:
                    c4:dd:45:54:f0:61:fd:6c:87:7c:80:69:c9:a4:03:
                    b5:02:fd:7f:93:49:6e:f5:c9:f4:b1:c2:35:c6:0f:
                    df:3a:db:89:46:62:2e:9d:b5:93:e4:05:22:00:86:
                    cf:b0:9c:79:98:ca:ec:62:70:d4:d7:2e:b9:d3:10:
                    75:72:97:c0:00:fe:ba:48:d1:35:a7:39:8c:91:3c:
                    e0:df:b1:8b:17:ab:43:86:38:3f:f9:2a:92:b5:b4:
                    74:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:48:1F:BC:3F:E7:28:05:2E:F4:60:FB:2C:F8:7E:3B:36:6B:D1:29
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:a9:b3:91:e2:3f:b3:eb:d2:1b:09:67:14:6b:e0:c7:39:18:
         08:0e:80:50:92:3a:09:7d:bb:20:06:74:30:7a:72:75:6a:8b:
         8a:f6:1f:68:7a:37:28:04:36:b7:a3:e6:c1:82:9d:b5:5c:3f:
         93:58:6e:df:ae:a9:9e:8a:e1:f3:8f:29:f0:89:ee:20:01:f6:
         b4:b2:10:ad:57:ba:e5:36:16:a6:8b:32:41:39:27:62:15:f5:
         42:6a:a7:67:92:ce:23:d0:bd:65:9d:2f:79:20:9b:1a:f6:6e:
         84:96:ce:3f:cd:69:49:c6:08:4d:6e:52:e9:db:9a:dd:75:01:
         86:93:37:ff:36:08:0a:13:23:f5:74:8f:a4:4b:8f:12:f6:46:
         29:e1:d3:d6:6f:f6:bc:44:5b:ec:dc:57:b7:75:b4:18:19:de:
         e4:2d:83:44:9d:f7:76:e6:87:40:11:5c:0d:84:cb:3c:d1:1d:
         1d:7c:f9:36:30:9b:54:6f:99:7f:50:e1:fa:29:76:9b:a7:ef:
         26:b7:fe:34:bc:62:09:43:8a:92:dd:4a:66:a2:e6:95:f3:a0:
         05:72:d6:d8:9a:78:e3:f8:34:23:bd:0e:58:c2:be:6c:68:ce:
         fe:37:5c:74:04:f3:22:11:e7:aa:ec:c9:34:2d:ae:c5:97:ae:
         5b:83:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:02:04 2026 by rpki-client