Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32332d3234203d3e20383334.roa
File:                     3130342e3134352e3231342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          QinlMqTgl9NchJ4IltncqiJDvTwBdsLYLTAVmHmrJjY=
Subject key identifier:   F4:FD:53:47:FC:E5:5F:30:C3:3A:06:79:23:E3:D7:99:08:D1:FD:11
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       10D92183B1C8481ACD3495A25422378EFB950004
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32332d3234203d3e20383334.roa
Signing time:             Mon 02 Jun 2025 16:12:51 +0000
ROA not before:           Mon 02 Jun 2025 16:07:51 +0000
ROA not after:            Mon 01 Jun 2026 16:12:51 +0000
asID:                     834
IP address blocks:        104.145.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d9:21:83:b1:c8:48:1a:cd:34:95:a2:54:22:37:8e:fb:95:00:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  2 16:07:51 2025 GMT
            Not After : Jun  1 16:12:51 2026 GMT
        Subject: CN=F4FD5347FCE55F30C33A067923E3D79908D1FD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:4a:a0:cf:8f:78:02:64:77:33:fb:ed:eb:
                    f3:8c:24:62:72:91:0e:9c:f6:d5:ce:ea:58:11:b1:
                    c9:c5:e4:c3:62:37:f1:39:f3:d8:a9:f0:a7:d4:af:
                    dc:c4:90:bd:86:ee:e4:76:4d:c7:fd:9d:ee:af:f8:
                    e5:52:87:0a:24:94:9d:59:8b:5a:e8:df:75:2d:a5:
                    65:e8:55:6e:df:e3:d6:a1:ac:41:bd:0c:50:a9:2c:
                    d7:5f:35:8c:13:b1:94:79:d1:12:32:22:e5:52:2f:
                    f0:60:3a:24:d5:b5:77:5c:f8:71:3a:ca:dd:66:55:
                    20:21:54:29:21:4e:6e:e4:57:1b:6b:9f:4d:6c:40:
                    f1:5c:e9:43:8f:98:ef:2b:f9:58:f5:75:2a:e2:eb:
                    5d:8e:54:69:15:27:d8:e5:d1:e4:6d:c9:23:5d:7f:
                    e2:e4:d4:f5:2e:a7:56:0b:1e:c0:f2:7c:12:dc:1c:
                    ea:d3:a7:8e:23:95:66:c3:58:21:ff:8c:51:4f:e2:
                    72:c8:db:e5:06:fd:9b:49:2a:f0:0b:97:f5:b6:85:
                    1a:54:64:a0:67:13:db:9c:d1:dd:0a:d7:84:05:48:
                    13:dd:4e:7e:b2:22:de:e3:3d:36:0f:e9:c7:81:e7:
                    13:86:87:7a:42:32:e2:e9:37:8b:f6:42:09:69:df:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FD:53:47:FC:E5:5F:30:C3:3A:06:79:23:E3:D7:99:08:D1:FD:11
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:81:7a:94:da:2d:09:91:cf:53:4a:64:47:18:7d:01:af:6a:
         4a:a9:5c:24:af:ab:47:9b:68:01:04:cd:bc:34:be:ae:7b:84:
         41:da:f4:e6:49:6c:72:7e:0b:c6:0c:13:cb:b8:9d:ca:8f:e9:
         ff:60:63:f3:ec:2b:d6:87:f1:b1:85:d4:a5:80:9b:ea:07:d3:
         9a:e6:4d:7a:12:f4:61:a8:81:cc:0e:b6:8c:88:33:e5:0e:89:
         cb:2c:17:ea:a0:aa:cd:4e:69:00:8d:c9:8c:29:cf:06:01:0c:
         17:d8:1c:09:b3:e3:15:68:a1:81:e9:07:b7:de:b6:19:5b:08:
         c5:17:fd:20:47:9c:ec:8b:5b:05:c2:86:ce:db:17:be:c6:cb:
         fc:ff:4d:f8:16:ce:93:60:7f:6a:2f:20:c3:59:cb:f0:6c:92:
         94:68:b3:66:6b:77:a8:ec:51:e2:0d:86:74:cb:47:20:02:0d:
         3e:1e:ba:f5:65:66:ca:57:ab:ac:da:3b:e4:40:32:cf:62:c6:
         c3:bf:15:05:20:88:00:0b:fd:28:57:61:ab:e6:21:96:5d:9d:
         69:8d:e7:04:78:f6:1b:7e:13:3f:6b:f1:7b:70:41:ba:9c:d8:
         81:71:06:7a:c3:74:58:20:d0:ab:71:3d:ce:0d:3f:e7:55:f4:
         28:b2:82:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:19:33 2025 by rpki-client