Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e20383334.roa
File:                     3130342e3134352e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          euqCpFxLIhyWfMDdPPYxDVb7opWJmf8NoOXhel3rSes=
Subject key identifier:   21:5E:A8:A8:9B:E0:E1:51:A8:0C:29:81:71:B6:DA:82:DB:8B:FB:37
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       1BBBA501DA13C391E8AF46110F0468B42524A676
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e20383334.roa
Signing time:             Wed 13 May 2026 04:28:31 +0000
ROA not before:           Wed 13 May 2026 04:23:31 +0000
ROA not after:            Wed 12 May 2027 04:28:31 +0000
asID:                     834
IP address blocks:        104.145.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 16:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bb:a5:01:da:13:c3:91:e8:af:46:11:0f:04:68:b4:25:24:a6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: May 13 04:23:31 2026 GMT
            Not After : May 12 04:28:31 2027 GMT
        Subject: CN=215EA8A89BE0E151A80C298171B6DA82DB8BFB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:86:bb:ff:a6:81:e0:36:a5:c1:3b:68:48:
                    66:00:ec:bd:d0:72:34:8d:14:e5:7f:de:70:61:39:
                    98:06:9c:87:c8:72:c8:8f:f7:d9:32:4d:b0:46:e1:
                    cc:96:c2:c8:f6:de:27:e6:b4:49:af:89:92:a4:a4:
                    ae:f3:1b:57:8f:c6:9e:4f:89:97:ab:67:b5:b1:e6:
                    da:ab:e4:d4:80:cc:27:10:ca:bc:f7:da:4c:61:9d:
                    f1:59:96:fb:1f:7f:7b:ad:11:9a:b4:2d:e7:ff:55:
                    1e:c2:ce:18:b7:54:6f:6f:7d:69:8c:f9:5d:50:08:
                    ec:65:1b:27:36:e6:27:19:62:09:23:b5:57:46:d0:
                    12:a0:95:47:fb:f4:ee:72:61:d6:76:4a:ae:19:ac:
                    80:59:03:b9:ea:6f:07:0f:0f:00:74:ea:a8:0c:19:
                    77:c3:67:a4:28:2c:e6:b5:e1:3f:f6:b8:91:43:e8:
                    7b:36:a4:21:8f:86:7c:13:60:6a:33:18:f6:01:ae:
                    88:0c:a9:b5:53:b3:a4:06:b2:bf:36:8a:a4:ad:89:
                    a0:c9:1c:7e:23:db:c6:b5:c9:b5:c3:ff:98:89:04:
                    b9:0a:24:bc:36:d6:bc:b2:9a:0b:29:7f:24:b2:56:
                    ef:b7:d5:a1:00:f2:bb:37:5e:11:e7:53:68:d9:27:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5E:A8:A8:9B:E0:E1:51:A8:0C:29:81:71:B6:DA:82:DB:8B:FB:37
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5f:48:c2:f8:38:5d:92:68:17:e3:41:22:fb:dc:a5:b5:d0:
         1e:48:eb:26:84:3e:6e:8d:ab:77:0a:8a:0a:eb:fb:87:90:dc:
         61:4d:f0:f7:7f:61:b3:7c:85:1f:08:9b:d7:38:8b:c6:e1:ed:
         35:68:b7:43:97:25:a3:d1:7b:be:92:c8:56:c8:a1:e4:3d:ab:
         dd:6b:82:3e:88:54:e4:05:19:8a:3e:a4:d4:05:b0:14:1a:52:
         a2:ae:49:6a:dc:0e:9a:1e:42:d4:75:5c:da:3c:9e:f0:07:ac:
         b7:e4:ed:96:1a:46:7e:fe:52:f7:01:18:f9:fe:52:33:7f:35:
         0f:e5:fa:76:80:e7:d1:f1:f0:3b:a9:6e:ce:a5:69:e5:93:29:
         ca:1e:f6:39:78:1d:9e:1f:9a:a3:2d:7f:d7:95:df:27:70:09:
         b3:82:ac:2f:80:2e:da:52:b1:c5:df:7d:1f:41:e4:91:ff:55:
         57:6f:1a:60:e4:74:eb:e9:34:dd:a0:10:2e:85:ae:aa:a1:dc:
         73:ac:6e:47:d9:5d:cd:c0:f6:00:63:e7:83:5c:c1:1d:24:d8:
         d1:14:25:05:53:1d:b3:ca:f8:08:b2:9a:f3:7c:3e:c6:16:57:
         7a:b4:99:e1:4b:55:f1:38:e3:d3:2d:66:e5:5c:3b:b4:35:4a:
         0f:b5:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 08:24:23 2026 by rpki-client