Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e203632323430.roa
File:                     3130342e3134352e3230392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          a3uVhUlKr06WUdvV1pYqjfTczsA0aTMu8yHH30xkxSU=
Subject key identifier:   84:D3:1C:B9:FD:FA:65:42:C0:08:B8:F1:5B:0A:62:FD:08:35:D3:28
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       0602EECBF361FC8F7BE65F3FA6F568FFFCE3A864
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e203632323430.roa
Signing time:             Sun 01 Jun 2025 10:37:25 +0000
ROA not before:           Sun 01 Jun 2025 10:32:25 +0000
ROA not after:            Sun 31 May 2026 10:37:25 +0000
asID:                     62240
IP address blocks:        104.145.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:02:ee:cb:f3:61:fc:8f:7b:e6:5f:3f:a6:f5:68:ff:fc:e3:a8:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  1 10:32:25 2025 GMT
            Not After : May 31 10:37:25 2026 GMT
        Subject: CN=84D31CB9FDFA6542C008B8F15B0A62FD0835D328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:31:25:bb:4e:49:f5:9e:1a:60:5e:5a:80:
                    e6:ca:a0:bb:ff:bb:69:c3:99:af:68:9d:5a:f8:08:
                    d1:14:8b:5f:2f:c8:57:95:24:95:4a:17:4a:f5:23:
                    64:ff:d3:25:51:63:0e:a3:a8:7f:76:fe:14:60:1c:
                    6a:68:1e:a2:7e:fd:46:ec:9e:7e:bd:60:2c:47:5b:
                    65:0d:b7:0a:e8:3d:50:27:f3:80:07:41:4f:2a:e4:
                    87:26:d4:60:30:1f:50:0e:af:75:a0:49:92:5c:ec:
                    cf:dd:8a:53:e1:eb:23:a0:64:9f:58:09:5c:96:f7:
                    9e:5c:99:69:d8:b1:5b:1c:87:55:f2:7f:50:3b:e6:
                    3a:e5:b0:f9:55:15:ba:b6:fd:c0:0e:0b:18:e3:a2:
                    ac:4a:0b:cd:3c:4d:7b:d8:37:15:c3:86:c2:ca:30:
                    8a:4a:06:72:45:8e:1a:b3:c8:71:f7:cf:72:06:35:
                    d8:1f:d6:b3:79:ac:59:3f:cd:6d:49:f7:54:ed:9c:
                    95:71:09:10:e0:07:15:1b:8a:4a:ed:76:c0:68:8b:
                    cd:4e:2b:89:f2:8a:ac:d3:8f:d8:f5:84:e9:94:01:
                    d2:f3:95:3a:6e:f1:23:a8:e6:08:9c:f4:6f:17:0c:
                    a0:bb:74:64:c9:9f:01:1f:28:e8:19:c1:57:eb:03:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D3:1C:B9:FD:FA:65:42:C0:08:B8:F1:5B:0A:62:FD:08:35:D3:28
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:96:57:10:3b:b1:bf:e2:07:f3:78:ce:81:38:5b:98:f2:cc:
         95:55:a4:d6:71:6d:85:a8:a2:2f:23:b0:09:11:a3:32:fd:97:
         94:a7:64:d7:d5:ae:7e:2f:74:40:ce:35:61:5e:84:39:8d:c9:
         2f:f0:22:5e:b0:45:01:df:ca:bd:64:e8:78:a2:86:bb:67:6e:
         57:9d:72:d6:de:62:ae:20:fa:4e:3e:05:7b:b4:7f:c9:16:8f:
         e2:09:22:48:62:86:18:bc:87:3f:cb:35:c5:eb:bc:98:50:74:
         6e:f8:92:6d:57:d5:03:cd:f2:89:cb:eb:d7:31:eb:ba:b3:91:
         38:4f:96:36:52:50:be:0d:69:83:14:1e:d8:01:c1:8b:55:69:
         3c:7e:72:da:fa:48:44:6c:7a:62:02:68:ce:52:34:bd:04:1e:
         e3:e4:d7:e7:7a:72:13:35:0b:2a:19:8c:a8:3c:5e:4b:e1:71:
         f5:be:95:26:1a:d7:91:a5:f6:48:19:fd:c6:7c:6f:94:d7:ba:
         95:92:32:15:19:48:2a:9d:52:83:4a:11:96:48:24:1e:a5:ec:
         fe:28:0e:54:25:5b:ef:d9:93:da:ce:e8:c8:e9:cf:1b:e9:98:
         11:0a:89:e0:0c:45:e3:66:82:20:33:74:cd:98:0a:98:cb:3e:
         25:54:2e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:50:28 2025 by rpki-client