Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e20383334.roa
File:                     3130342e3134352e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ETFL4CJVUvdqk38y3K0knpi/CV1uHJqTIWPxussj2nM=
Subject key identifier:   4E:65:11:E4:4C:CE:AC:FA:CA:AA:EF:2B:E3:FB:11:66:CD:A6:47:6B
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       16B5D243D1AF27B79673B4306B6861971638CE30
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e20383334.roa
Signing time:             Thu 30 Oct 2025 15:21:39 +0000
ROA not before:           Thu 30 Oct 2025 15:16:39 +0000
ROA not after:            Thu 29 Oct 2026 15:21:39 +0000
asID:                     834
IP address blocks:        104.145.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 17:10:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b5:d2:43:d1:af:27:b7:96:73:b4:30:6b:68:61:97:16:38:ce:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Oct 30 15:16:39 2025 GMT
            Not After : Oct 29 15:21:39 2026 GMT
        Subject: CN=4E6511E44CCEACFACAAAEF2BE3FB1166CDA6476B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4b:57:b7:42:2c:ed:5e:f2:68:08:1c:be:26:
                    78:46:1e:92:de:a9:dc:cd:59:70:85:b5:68:14:23:
                    02:74:b3:42:a4:36:34:03:8b:95:be:01:54:b8:2a:
                    29:b8:29:3b:0e:cc:ef:20:82:46:0d:89:c0:c1:c3:
                    d4:b8:12:2b:b4:9d:bc:c5:0b:15:60:65:13:0b:e4:
                    0a:53:38:0d:01:fc:fe:c2:06:d1:08:6a:b4:ea:57:
                    69:b3:be:2a:5b:8f:15:81:b7:68:48:e2:72:0d:7a:
                    ab:23:68:af:ea:6c:55:33:ba:44:de:04:59:49:bf:
                    c0:e3:cf:3e:86:13:87:ed:a8:27:0e:36:eb:e8:be:
                    3b:18:8d:41:ec:02:a0:28:03:c3:bd:9c:81:10:db:
                    fb:e2:3c:2f:91:c1:61:cb:4f:34:07:52:8a:d9:c5:
                    fe:ba:1c:29:74:60:1e:fb:4f:82:c5:38:3b:34:d0:
                    c6:77:f6:aa:2e:48:b4:d5:bb:d9:e3:bd:13:f7:d7:
                    a2:09:e1:a0:62:94:4c:d6:22:1b:42:54:96:5b:e0:
                    9c:24:6c:55:6c:30:76:da:84:87:c5:65:c6:3a:47:
                    98:50:1c:d3:cb:b3:64:55:2b:75:ef:a6:04:4f:61:
                    ac:c7:f5:63:38:98:b7:7f:b3:2e:ac:8f:e2:f7:35:
                    f8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:65:11:E4:4C:CE:AC:FA:CA:AA:EF:2B:E3:FB:11:66:CD:A6:47:6B
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:9c:6d:94:1b:ff:ab:ef:65:10:9a:dd:c2:5b:b7:38:71:cf:
         92:e4:6f:a9:cc:09:fd:12:f7:4a:a4:1a:60:58:80:49:db:a3:
         bc:91:f4:88:17:55:37:25:55:85:60:38:c8:4f:a3:f4:76:78:
         3d:60:85:62:d2:00:3f:75:5d:da:6a:8d:50:97:ba:fc:8e:af:
         2f:3f:eb:7b:86:6d:fa:b4:98:a2:39:bf:7e:95:a0:57:b9:69:
         7b:66:9d:64:ab:eb:93:fe:d3:92:9f:33:26:2e:37:f1:3b:fa:
         9c:9a:f3:e4:81:1a:14:dc:a2:f5:35:fb:df:b6:3b:a8:07:87:
         63:9e:03:0c:39:55:87:e4:0a:b2:dd:a5:4a:9b:12:ae:6a:fc:
         56:a2:06:00:22:ee:43:e7:28:ca:5b:89:a0:18:f9:f5:83:ae:
         b9:49:5b:d6:7f:8a:c3:92:17:9c:c3:ad:35:38:85:d8:7e:c3:
         0a:9a:9f:3a:75:3c:d2:d6:f0:b8:fa:f7:87:9c:3a:15:2f:de:
         e0:26:d4:5a:91:80:f6:c9:52:e7:c2:cf:a6:da:ee:90:0a:dd:
         88:22:e6:b9:fe:49:39:2f:ff:b4:ce:f1:61:5c:1b:06:04:d5:
         0a:56:a9:41:aa:6e:a7:f3:fd:f5:50:a7:c7:16:cf:45:05:93:
         6e:b0:e7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:39:10 2025 by rpki-client