Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e20383334.roa
File:                     3130342e3134352e3231322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          aIWzPhulyhh08TcKWEHQ1jfMtjgPiz8UiOyv0T+X60w=
Subject key identifier:   AC:94:56:8A:1A:BF:13:4C:A6:C3:6A:B8:16:80:75:FB:8B:92:C1:34
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       604F49ECD1545F466CF4965B75B8CA0484DD56D5
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e20383334.roa
Signing time:             Sat 07 Nov 2026 00:02:58 +0000
ROA not before:           Fri 06 Nov 2026 23:57:58 +0000
ROA not after:            Sat 06 Nov 2027 00:02:58 +0000
asID:                     834
IP address blocks:        104.145.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4f:49:ec:d1:54:5f:46:6c:f4:96:5b:75:b8:ca:04:84:dd:56:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Nov  6 23:57:58 2026 GMT
            Not After : Nov  6 00:02:58 2027 GMT
        Subject: CN=AC94568A1ABF134CA6C36AB8168075FB8B92C134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dc:db:21:eb:26:94:f9:2d:3a:2d:92:a2:48:
                    65:86:ab:0f:b7:c6:8d:94:ed:86:d5:47:27:6f:92:
                    27:6a:55:75:ac:e6:3b:00:67:75:04:8e:1f:f4:45:
                    5f:4a:ef:14:9a:87:80:91:83:f3:a1:26:5b:48:11:
                    f6:21:af:d0:80:b3:66:86:74:5a:e1:d2:e7:bc:93:
                    f2:4e:de:aa:3a:8e:2e:f5:8a:a8:84:63:6b:29:e4:
                    51:7d:52:f0:4d:87:14:2f:1c:c6:98:cc:d3:7b:b7:
                    1b:45:ae:c3:ce:66:69:67:43:10:d6:39:3a:ed:2e:
                    48:9a:8d:ae:a3:89:2f:9e:5c:01:d3:ce:f5:9f:f6:
                    2f:8b:ed:dd:08:75:6f:cd:92:47:66:de:a3:2e:4f:
                    ea:7a:bc:2c:f1:a8:a1:ec:b5:cd:38:35:9a:d2:ff:
                    69:c0:27:8b:8e:f0:45:a6:56:d7:17:66:ec:83:01:
                    01:f5:5d:04:24:2d:fa:89:e3:ba:61:b4:f3:2a:13:
                    5e:80:82:c3:2c:ff:40:17:5a:1a:ad:9e:d5:f0:40:
                    da:e0:1f:ce:17:9a:87:0b:73:7b:62:a1:70:2a:6b:
                    a1:83:75:99:cf:09:b2:ea:49:ee:17:80:fe:48:ca:
                    55:d2:f5:a7:0d:cf:1d:56:74:e2:94:91:50:e9:71:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:56:8A:1A:BF:13:4C:A6:C3:6A:B8:16:80:75:FB:8B:92:C1:34
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:91:21:4a:c8:41:da:7c:69:6b:38:8d:16:0a:e8:af:a8:bb:
         d6:e5:bf:c2:e3:e6:d6:13:40:85:69:27:f8:8a:27:67:be:0d:
         1f:d6:2e:86:26:bd:66:d3:40:fc:7f:72:99:4c:59:2a:56:fc:
         38:dd:18:a0:89:64:dc:11:00:e0:1b:e5:3a:c8:d0:e6:e4:83:
         9d:bc:53:46:66:dc:d0:44:12:7e:78:48:5e:b9:dc:68:d5:57:
         ec:f2:49:52:9f:1a:20:ab:20:13:5f:1e:9b:9c:39:5a:a6:a3:
         b0:c8:ed:79:0f:63:9d:9e:0e:dd:b4:90:8d:15:48:64:f2:ca:
         e0:6d:3d:61:94:bd:1b:1a:1b:f9:56:0f:75:b8:d5:4f:d1:fa:
         39:4e:5b:77:e1:68:c1:15:ae:36:ed:40:04:12:6f:30:fd:68:
         6a:3e:50:b8:0b:43:8e:8e:a5:8f:cf:6a:ae:92:11:74:15:bb:
         6d:4c:68:1d:f1:0a:5c:f8:92:6c:50:2e:66:3b:37:8e:49:2e:
         8c:10:6e:fd:94:a0:6b:c8:b9:91:63:dc:2c:ad:6e:bb:fb:d7:
         22:cc:c5:74:8b:15:15:b1:bb:7c:47:79:8e:88:bf:cd:bb:75:
         e0:19:e4:57:65:d1:e5:9d:65:01:df:a6:b4:e8:86:56:79:5b:
         94:b0:15:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:46:28 2026 by rpki-client