Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e2039333034.roa
File:                     3130342e3134352e3230392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          h+EICx2IlJw5ORX4vHvRbf0E3ljsbwW2LeI4ot0+J5k=
Subject key identifier:   D9:81:15:DE:18:6A:75:39:7B:FC:C4:3D:3F:BE:57:EC:DE:4F:FC:3E
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       5CA0FFE0D6A4F0DB6EE2227EA7F2AFEF2CC05B65
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e2039333034.roa
Signing time:             Sat 30 Aug 2025 15:28:41 +0000
ROA not before:           Sat 30 Aug 2025 15:23:41 +0000
ROA not after:            Sat 29 Aug 2026 15:28:41 +0000
asID:                     9304
IP address blocks:        104.145.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a0:ff:e0:d6:a4:f0:db:6e:e2:22:7e:a7:f2:af:ef:2c:c0:5b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Aug 30 15:23:41 2025 GMT
            Not After : Aug 29 15:28:41 2026 GMT
        Subject: CN=D98115DE186A75397BFCC43D3FBE57ECDE4FFC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:9e:88:a0:cc:05:4b:eb:38:0a:76:8a:19:
                    a8:27:4a:12:f2:10:d4:71:40:64:a6:a0:7a:64:4f:
                    46:38:00:b0:1b:b7:75:ab:7b:8f:4f:7c:75:9a:10:
                    08:29:2e:b8:4b:76:b6:d5:bb:48:c0:9a:f1:17:8f:
                    47:5e:d4:6c:5e:56:e8:34:0d:bc:79:7e:9e:dd:d2:
                    4b:a9:bc:80:a4:dd:7e:f8:02:a7:6f:97:e7:72:78:
                    16:4e:fa:00:3e:b4:e8:1b:87:26:24:fc:03:ea:50:
                    48:58:86:08:cf:ae:4f:f7:72:0b:58:34:55:f4:5e:
                    9a:e0:c0:b5:44:aa:15:d5:7e:77:00:22:7a:4e:cc:
                    b2:94:e5:f1:98:b2:a2:84:51:19:68:da:5b:ff:af:
                    e0:9c:81:dd:6d:59:28:aa:e7:67:fb:de:5c:c4:a9:
                    6b:d1:5c:31:d9:af:38:cb:fe:ce:ed:21:da:0c:0f:
                    2d:6a:2a:3a:ae:05:8a:1a:9d:d7:5e:df:50:ec:d9:
                    7a:0f:ca:d4:da:15:44:4e:b5:06:6f:b6:2e:32:8f:
                    37:6d:b7:8b:c0:b2:d0:07:8a:85:b0:be:d3:bc:80:
                    88:36:18:77:dc:02:f9:71:83:c2:89:69:04:2b:df:
                    81:e3:cc:67:47:42:b7:ff:7e:a1:fa:86:13:2a:f9:
                    ab:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:81:15:DE:18:6A:75:39:7B:FC:C4:3D:3F:BE:57:EC:DE:4F:FC:3E
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:b2:66:68:4b:b5:59:c0:1e:1a:a0:1a:99:4b:73:9d:e0:9f:
         8d:b4:ba:b3:08:55:5d:83:1b:72:3f:3e:cc:62:49:45:f3:cf:
         fa:1f:3c:62:a2:98:b1:86:3d:72:18:2f:2b:c8:cf:0a:47:d4:
         02:04:74:97:90:48:fa:2e:58:cb:2f:90:76:29:1f:7f:bb:63:
         a6:33:7d:77:65:1a:4b:16:46:61:80:b4:24:ce:61:91:e0:5f:
         97:04:c3:af:79:d1:16:10:f9:bc:82:9a:df:0a:e5:c8:c9:24:
         e1:49:dc:25:4e:45:fe:fb:dc:1d:3b:c1:a9:2f:23:34:86:76:
         5d:58:c0:7a:8a:78:ec:ff:65:bb:17:5d:84:aa:79:7e:cf:2c:
         a3:3e:d0:e1:49:cb:1a:a3:26:ef:37:64:c0:3c:00:a1:8e:0f:
         f8:a5:84:d5:c7:e1:9f:94:e5:af:0b:94:7e:0f:b0:22:af:0d:
         e7:d3:3a:6f:5c:76:6d:65:1d:ca:bf:19:d1:ec:de:40:82:d0:
         02:88:2b:eb:4d:e4:1c:4e:f7:78:04:8b:54:2c:a1:58:e8:04:
         78:0b:5e:e2:c1:bf:a5:7a:da:a5:61:64:53:26:5c:05:55:6c:
         70:f4:9a:9f:94:82:13:3b:fa:37:7e:eb:6e:26:72:8a:a0:81:
         d6:09:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 10:06:56 2025 by rpki-client