Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e2039333034.roa
File:                     3130342e3134352e3231322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          qMnPnB5cpj0exFppt7KVslaqzMSzs2GxwTzcTzozCt0=
Subject key identifier:   98:D7:D8:8E:A3:63:6E:DF:E2:5E:C8:B3:9D:EB:6B:BF:6E:2B:3E:85
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       3E1065BEB90F692E217392185F3BDE965B94FC0A
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 02 Jun 2025 16:10:34 +0000
ROA not before:           Mon 02 Jun 2025 16:05:34 +0000
ROA not after:            Mon 01 Jun 2026 16:10:34 +0000
asID:                     9304
IP address blocks:        104.145.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 14:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:65:be:b9:0f:69:2e:21:73:92:18:5f:3b:de:96:5b:94:fc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  2 16:05:34 2025 GMT
            Not After : Jun  1 16:10:34 2026 GMT
        Subject: CN=98D7D88EA3636EDFE25EC8B39DEB6BBF6E2B3E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e9:5c:a2:22:18:03:47:34:74:d2:72:fd:c6:
                    01:73:bf:38:2b:c8:a9:2a:38:2b:99:09:bc:9b:ec:
                    39:cb:0b:40:f5:d7:28:df:96:8f:5b:43:e8:5e:49:
                    b5:89:b1:25:7d:23:40:84:71:08:fa:ba:e9:e6:94:
                    4a:14:54:73:62:5c:70:d9:e5:f7:23:65:4e:55:73:
                    53:15:75:23:ff:0e:13:3a:20:d0:b2:46:b0:6a:1b:
                    f8:0c:ae:53:28:22:36:60:00:05:5a:4f:3b:94:fb:
                    1e:b4:bb:ff:5f:d9:b3:b4:2b:d5:a8:1c:70:c3:10:
                    57:05:d9:ba:64:fb:ef:28:b9:c9:a5:c9:27:a0:3f:
                    06:0d:a0:d3:72:1d:fb:cc:0e:97:1b:79:68:21:09:
                    de:72:d2:04:c7:83:77:5b:4a:a3:22:56:98:90:b2:
                    da:26:7d:51:50:af:44:23:1f:77:e3:b4:64:f7:0a:
                    68:2b:71:ed:fe:12:93:c6:82:4f:6b:76:14:38:29:
                    cb:64:93:bb:e1:1c:0d:0e:cf:f0:c2:a0:5b:56:b5:
                    21:ea:18:e2:e3:82:e1:db:e7:8a:41:ed:a7:3f:9f:
                    bb:2e:4d:3f:84:e6:0a:97:66:48:a5:d1:19:ba:5c:
                    b7:4e:28:e4:8f:8d:d7:18:5c:13:de:c4:ca:ec:58:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D7:D8:8E:A3:63:6E:DF:E2:5E:C8:B3:9D:EB:6B:BF:6E:2B:3E:85
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231322e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:8b:30:f5:d8:50:31:74:90:c6:07:73:9f:4a:cb:f1:a6:
         22:c8:17:54:cf:50:6b:07:d5:54:8f:9b:b6:93:d8:f6:14:79:
         17:f6:f1:e4:36:72:f9:5f:81:05:2d:50:b5:27:04:cc:fe:49:
         47:49:26:3c:be:a0:8d:cd:88:aa:39:66:13:5c:03:7c:bf:76:
         bb:e2:d3:c1:cc:49:1b:35:2e:96:46:bf:a2:b6:67:a0:a4:ae:
         c8:95:47:a3:90:3b:42:dc:20:3f:60:8f:d1:05:da:5d:60:32:
         e2:85:fa:81:12:62:ed:61:4c:ee:c6:0a:18:3b:b7:6c:59:c6:
         a7:46:ee:5e:44:1d:de:37:1b:fb:a7:38:fe:10:5b:99:d2:c9:
         c5:74:1e:c1:40:d0:74:02:c2:ae:95:2a:e6:36:63:a8:2a:c1:
         22:5c:0e:5e:e9:00:2e:bc:5f:cb:3c:36:fb:72:a6:47:da:35:
         07:29:c5:57:c8:88:06:25:48:a0:6f:8a:21:0e:52:4b:3f:ae:
         bf:77:e2:09:16:c5:1d:ba:18:47:8b:0b:a0:85:20:da:5e:7c:
         93:2f:b7:f3:fa:3c:96:83:5e:f9:33:74:6d:70:d7:58:ec:8c:
         a6:1a:88:de:34:0d:04:4d:0e:21:5a:8d:e5:85:5e:df:95:03:
         16:df:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:59:02 2025 by rpki-client