Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e20323138383239.roa
File:                     3130342e3134352e3231322e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier:          aylv2c0bpNwlxrT3ly2npxyjcTKEEiBBlortGjtFZLk=
Subject key identifier:   36:91:C6:92:5E:16:3C:0B:90:ED:E4:F7:0B:7B:61:56:E5:2A:5B:51
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       65427C6E5A7B7C01ACF0AF1A19A6619869B9C857
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e20323138383239.roa
Signing time:             Mon 07 Sep 2026 05:57:40 +0000
ROA not before:           Mon 07 Sep 2026 05:52:40 +0000
ROA not after:            Mon 06 Sep 2027 05:57:40 +0000
asID:                     218829
IP address blocks:        104.145.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:42:7c:6e:5a:7b:7c:01:ac:f0:af:1a:19:a6:61:98:69:b9:c8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Sep  7 05:52:40 2026 GMT
            Not After : Sep  6 05:57:40 2027 GMT
        Subject: CN=3691C6925E163C0B90EDE4F70B7B6156E52A5B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:7b:b3:3e:e8:ce:11:45:b7:fd:1c:c4:c7:
                    9b:35:0e:f5:b3:e3:c6:f3:10:aa:b7:6f:73:b3:71:
                    24:6b:72:f1:86:f8:d7:15:d4:b9:bf:08:87:b5:0f:
                    0a:4d:df:ea:46:a9:d2:26:cb:78:38:55:eb:4b:6b:
                    7a:a3:99:e6:29:4e:8b:01:fd:cb:b4:d5:6d:d9:4f:
                    80:bf:14:68:9e:c7:d5:4e:1e:38:76:3f:23:38:e5:
                    7c:70:88:fe:94:48:30:84:4f:2a:e2:30:c8:ac:05:
                    d7:63:70:b7:84:5e:e1:b0:b2:31:da:23:be:f6:cb:
                    0a:38:31:e2:07:4a:34:9c:96:bd:c0:55:62:6e:0c:
                    01:57:35:84:28:2c:7b:1a:97:ea:88:95:2e:f7:10:
                    93:2e:74:7c:fa:61:68:4a:ce:a6:aa:e0:e5:78:f0:
                    e7:df:0b:da:8a:ab:95:01:83:c5:13:47:51:e3:c0:
                    11:5e:49:7f:1f:63:f2:8a:7c:8c:ae:bc:95:31:cc:
                    da:bd:5d:40:06:55:9c:53:f8:c6:ec:42:16:8c:dc:
                    19:77:a3:03:79:82:7c:2a:73:99:0b:ea:bb:ad:8e:
                    1c:36:d2:7e:2f:65:f4:37:35:11:33:f6:ee:c7:65:
                    e2:f3:70:15:c9:0e:47:03:4e:06:c0:b4:95:4b:4a:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:C6:92:5E:16:3C:0B:90:ED:E4:F7:0B:7B:61:56:E5:2A:5B:51
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e20323138383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:76:6e:fa:0f:ae:05:22:3f:5f:16:78:79:3a:f3:8e:c8:14:
         41:95:6d:b1:1e:39:dc:d7:1c:b3:4f:f8:98:40:21:c7:a7:a2:
         7d:91:81:91:85:29:25:cb:2d:fd:7f:16:1b:18:a2:a0:80:5d:
         b9:61:e7:6a:6c:35:a3:70:92:08:42:e6:03:c7:e9:6e:51:b1:
         67:69:b7:f5:31:d8:31:c5:ad:6f:a4:8a:88:d8:8e:42:b0:a2:
         64:b4:21:ff:fd:ff:9f:aa:5f:6b:d6:9c:de:9c:c2:44:f6:50:
         70:95:ae:42:61:17:06:51:09:2b:05:de:97:0a:43:c2:d5:62:
         c6:1d:26:de:80:fe:11:12:d4:30:07:1e:cc:c5:0e:50:58:11:
         b2:fa:a0:d2:ae:c1:d3:88:f2:57:e4:02:5d:8e:fb:b3:3e:5d:
         79:8d:15:e6:c3:52:d2:4a:43:0e:10:fc:50:e8:a4:93:be:f9:
         3f:1f:99:9f:0a:87:fd:34:08:7a:9c:22:54:ab:85:d8:7f:9d:
         4e:92:6a:5a:7f:84:7a:21:17:4d:6f:17:43:d6:67:ae:e6:48:
         2a:e2:cb:71:0f:31:e7:fe:2f:3f:96:d1:82:d9:84:17:0e:34:
         5b:a2:3f:ae:f2:bd:2d:36:3f:e9:35:1c:f0:1c:b4:ca:ff:7c:
         48:6a:da:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:20:27 2026 by rpki-client