Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231302e302f32332d3234203d3e20383334.roa
File:                     3130342e3134352e3231302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          kacG1P7njaNwRR40vvNTrHDhGKUxAYvDtQrbBlHJTgM=
Subject key identifier:   7B:29:6E:D0:79:D6:A7:7C:4B:F4:17:5D:5C:BD:E6:95:4B:A6:F9:42
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       26B4B89862A7CB1E8C68FE395D9BA64339017EF2
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231302e302f32332d3234203d3e20383334.roa
Signing time:             Mon 02 Jun 2025 16:12:51 +0000
ROA not before:           Mon 02 Jun 2025 16:07:51 +0000
ROA not after:            Mon 01 Jun 2026 16:12:51 +0000
asID:                     834
IP address blocks:        104.145.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b4:b8:98:62:a7:cb:1e:8c:68:fe:39:5d:9b:a6:43:39:01:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  2 16:07:51 2025 GMT
            Not After : Jun  1 16:12:51 2026 GMT
        Subject: CN=7B296ED079D6A77C4BF4175D5CBDE6954BA6F942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cc:41:c7:67:e6:34:24:48:29:94:fc:f1:f0:
                    80:40:78:35:a5:a7:01:f6:f9:7f:be:89:82:08:c7:
                    ff:7a:6f:66:a3:c0:36:e2:7f:34:1c:2f:b5:5e:09:
                    31:64:b4:35:a3:5e:90:02:a5:f4:62:ae:bc:5c:44:
                    eb:50:34:36:ae:7a:e1:c0:12:2a:ba:64:b1:b5:df:
                    b9:dd:91:75:60:b1:7d:d7:e7:d6:0b:93:93:71:5d:
                    9e:13:49:1f:40:d3:bf:d8:f9:4e:d0:19:e1:3c:82:
                    7d:2a:f2:96:15:47:5b:e3:c7:7d:e4:fc:9c:f3:d8:
                    36:73:9e:95:68:97:4a:af:66:71:00:f9:4d:7b:7f:
                    44:a1:34:b9:d2:57:ff:18:83:f4:65:59:89:0a:d5:
                    f1:30:2d:3f:c2:23:60:54:50:b6:f7:9c:86:70:17:
                    05:22:09:75:cf:9c:30:a3:23:4a:80:7e:44:07:d5:
                    5a:b6:88:28:26:e5:3c:85:f0:13:e6:f0:11:70:ba:
                    a6:dd:69:6a:7e:cd:9f:c3:b0:03:a7:81:25:48:a9:
                    2d:89:68:02:d4:ef:fa:38:68:cc:85:eb:0e:4e:d3:
                    52:c2:3c:83:fb:96:7e:75:62:a1:51:99:bd:30:08:
                    d9:9b:99:7d:8f:c3:85:c0:34:65:bd:e9:26:53:5a:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:6E:D0:79:D6:A7:7C:4B:F4:17:5D:5C:BD:E6:95:4B:A6:F9:42
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:b2:fe:a6:28:da:a4:a4:72:f2:d3:bd:ce:af:8e:3b:a6:3a:
         dc:30:98:e7:10:e6:4a:16:89:9f:67:47:a4:28:0a:1d:a2:28:
         19:7e:7a:59:9e:92:fd:aa:fe:6d:af:99:2b:4a:7e:33:b3:41:
         b0:ee:56:4c:40:13:6c:35:54:41:63:26:cb:a0:2a:f7:de:86:
         e3:35:a5:b5:6a:14:75:15:bf:7b:87:e4:fc:13:6e:d9:a4:7f:
         f1:56:2b:9f:c9:bd:65:9f:17:c2:36:07:56:16:50:21:46:86:
         72:88:26:0c:9a:c2:e1:db:2b:bd:84:bb:c1:ef:df:01:f0:d7:
         de:01:83:4e:80:c0:9c:50:59:11:9f:22:ed:e8:03:7f:49:f6:
         d6:ab:d6:6e:2d:85:5e:90:e5:eb:b0:ec:d2:7b:9d:bd:de:08:
         ed:98:dc:a2:54:07:48:34:ef:e5:ae:a3:ff:a0:92:7c:d8:02:
         4c:47:4e:81:bb:62:63:e8:ee:47:f2:99:2e:78:08:0d:b1:3c:
         71:56:1d:c7:02:27:1a:1f:36:c5:e1:fd:75:ff:cd:8c:f3:e7:
         e6:e2:c2:d1:5e:f2:91:b9:b3:0b:59:9d:32:e5:2c:c3:09:bf:
         26:ca:89:79:54:16:c0:52:5b:5d:23:a1:70:2c:76:c5:e2:4c:
         99:10:ac:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:36:08 2025 by rpki-client