Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231312e302f32342d3234203d3e203336313935.roa
File:                     3130342e3134352e3231312e302f32342d3234203d3e203336313935.roa (raw, json)
Hash identifier:          wUWEdU9v8KYC3SBl+VOY4wREpkfXXJykQwZeku+pFnA=
Subject key identifier:   9A:77:B3:17:60:DB:B6:6C:C0:6A:E2:BB:96:20:73:4D:5C:F7:95:26
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       7E29AB8060AD7628E352513C48494FAB470D1EDA
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231312e302f32342d3234203d3e203336313935.roa
Signing time:             Wed 03 Jun 2026 21:21:34 +0000
ROA not before:           Wed 03 Jun 2026 21:16:34 +0000
ROA not after:            Wed 02 Jun 2027 21:21:34 +0000
asID:                     36195
IP address blocks:        104.145.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 10:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:29:ab:80:60:ad:76:28:e3:52:51:3c:48:49:4f:ab:47:0d:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  3 21:16:34 2026 GMT
            Not After : Jun  2 21:21:34 2027 GMT
        Subject: CN=9A77B31760DBB66CC06AE2BB9620734D5CF79526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:40:1a:0e:20:61:53:54:92:9c:2a:af:89:
                    ab:3a:70:53:50:94:ab:8e:a1:71:12:4a:4c:e2:e8:
                    93:fb:bc:dc:40:50:6f:72:4b:f5:e2:3e:9f:e1:ff:
                    e6:31:3c:5e:65:2f:17:ba:21:81:a9:77:fd:6a:66:
                    8e:e2:77:95:53:cb:f0:ca:9e:e2:0a:1b:64:f1:fd:
                    4e:bb:7f:ae:32:e4:5f:4a:f4:5a:78:a9:7d:08:81:
                    82:ac:87:32:d9:e1:83:b4:0b:a4:94:2a:98:86:94:
                    23:aa:0d:26:e0:53:57:ec:11:04:43:48:17:00:57:
                    8e:c5:24:80:c7:0e:0b:c6:86:a9:ce:5b:61:62:5d:
                    5c:af:91:89:81:9f:1a:82:ab:38:d5:9f:e8:db:02:
                    d9:e2:eb:f8:2d:82:14:21:ca:d4:e4:eb:f4:b2:d1:
                    b6:74:2f:fc:78:cd:c1:10:1e:9d:93:39:f9:5a:46:
                    90:7c:f0:fe:31:28:bb:c3:cf:66:8b:55:30:86:a2:
                    da:94:c0:51:8a:a0:88:08:44:b7:1d:35:ed:50:09:
                    a2:9a:74:50:5a:a1:32:ca:db:f4:ec:5f:e5:63:5b:
                    be:27:55:a6:56:28:56:bf:e6:5a:26:79:96:84:18:
                    0b:8d:02:30:cc:ab:0e:fe:8b:e7:0e:b5:33:e9:e6:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:77:B3:17:60:DB:B6:6C:C0:6A:E2:BB:96:20:73:4D:5C:F7:95:26
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231312e302f32342d3234203d3e203336313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:20:f4:62:c6:ae:1c:ca:e3:e4:16:91:fc:31:a4:f8:9b:5b:
         8f:31:15:d2:a6:df:71:ca:99:ea:1e:82:a7:c4:9c:81:66:df:
         17:87:61:ba:45:d4:66:8e:f0:71:4b:4a:c9:5b:3c:c6:eb:e9:
         02:4d:7f:e6:22:6a:82:25:76:44:3e:0d:84:32:0c:a2:3d:20:
         f4:ab:15:dd:88:d8:b8:87:95:ce:45:15:5a:9a:9e:1d:cb:c9:
         a4:99:5b:dd:4e:82:cd:bc:7c:cf:71:20:40:40:ad:20:72:78:
         c5:c4:ec:65:be:ed:25:9d:0c:f3:e8:d1:1a:2b:80:c5:ff:b2:
         6f:a6:0b:13:1a:4e:a3:16:06:f0:91:5b:24:96:5a:99:2d:9b:
         10:e7:ac:d5:29:b6:00:73:6d:8d:5f:99:c9:77:fc:3f:45:7c:
         3f:a5:28:e2:48:ff:1c:cb:b7:48:c6:c6:71:e8:29:47:ab:67:
         31:ff:93:3c:bd:40:25:5c:1c:f5:a0:57:f5:47:ed:8e:93:3c:
         c1:b0:cd:01:a5:5a:53:3d:d8:37:fa:97:d9:ba:cd:20:74:ec:
         eb:f7:46:a4:23:8f:37:21:11:45:48:b2:36:ac:e6:e2:de:9e:
         ba:8d:16:12:bf:66:b1:60:d2:07:62:a9:1b:0e:b4:19:15:1c:
         32:aa:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 15:15:46 2026 by rpki-client