Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20333935383339.roa
File:                     3130342e3134352e3231342e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          WNRA7oF+KyQdt4qWapPw47Ufi9N/aodawQEEe6FWkJw=
Subject key identifier:   5F:A9:E9:DE:C2:E4:09:AD:19:F9:92:D9:E0:2B:9D:ED:B9:05:5D:CB
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       56E904B5AA345B17B58CC984A178AC35B93E7038
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20333935383339.roa
Signing time:             Wed 11 Nov 2026 21:22:31 +0000
ROA not before:           Wed 11 Nov 2026 21:17:31 +0000
ROA not after:            Wed 10 Nov 2027 21:22:31 +0000
asID:                     395839
IP address blocks:        104.145.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 17:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e9:04:b5:aa:34:5b:17:b5:8c:c9:84:a1:78:ac:35:b9:3e:70:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Nov 11 21:17:31 2026 GMT
            Not After : Nov 10 21:22:31 2027 GMT
        Subject: CN=5FA9E9DEC2E409AD19F992D9E02B9DEDB9055DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b2:76:26:54:5e:de:9d:ea:1f:86:17:df:5d:
                    12:94:75:e7:a2:e5:cd:f4:dc:13:dc:19:07:7c:ab:
                    67:2f:85:a8:6e:8f:fa:8d:89:b3:5b:f9:07:25:ed:
                    81:8d:a6:cf:b9:ff:8d:07:84:96:4f:1c:c1:72:17:
                    33:ca:3b:eb:4b:d4:41:11:4a:ee:c0:ad:00:ae:f7:
                    65:0c:71:3b:72:13:16:0e:43:49:cb:2a:67:c1:4c:
                    58:4f:73:e6:4b:53:47:16:09:47:71:01:a0:fe:84:
                    08:e7:7c:2c:44:f4:c2:16:46:31:99:42:b9:38:c2:
                    a6:e1:c1:06:ba:c4:19:72:f9:39:3e:77:64:68:1c:
                    46:5c:3d:4d:d9:12:a2:a8:49:94:03:8a:be:92:05:
                    9a:2d:72:91:9f:5f:cc:74:41:cd:a7:a5:87:3d:e7:
                    44:fa:9c:b8:36:13:fb:c0:17:7b:40:98:ab:6e:fb:
                    cf:e5:32:d4:96:61:a4:14:cb:e2:18:00:ca:a8:2a:
                    4a:88:41:b7:b0:9b:81:f6:db:32:0b:c5:10:d3:34:
                    e3:73:f2:d5:99:22:a5:8d:bc:22:2a:4b:1e:17:2a:
                    72:29:db:99:16:23:2a:3e:a0:af:f6:0a:e4:f7:ef:
                    91:3e:cb:79:93:52:19:84:0a:1f:5c:28:4b:fd:83:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A9:E9:DE:C2:E4:09:AD:19:F9:92:D9:E0:2B:9D:ED:B9:05:5D:CB
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231342e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:c7:03:7d:26:5f:b3:c8:f2:2d:fe:b8:f1:7f:2d:e2:fd:
         ce:37:5e:c1:75:ed:7a:fb:4a:95:ce:00:97:33:40:2c:ff:aa:
         96:9e:ca:bd:d5:c4:01:14:56:41:a0:8c:32:a8:28:9d:8a:e7:
         ef:75:4b:d2:8b:f6:ef:37:70:f7:f4:de:a2:4c:88:9e:2e:6f:
         3e:40:24:4c:35:99:7f:d3:63:b8:d4:8c:e2:80:c7:f5:6f:c4:
         a4:16:4c:3f:5a:28:58:24:10:25:15:ed:17:f6:a0:7a:ee:e4:
         07:36:3b:9b:45:58:33:8e:4e:31:73:ac:68:73:c2:c0:82:bf:
         d3:92:5b:76:61:b9:75:86:ef:79:1a:f5:4c:c9:2e:79:ac:ef:
         69:60:50:4a:fd:26:b2:dd:7a:f6:e5:c1:d8:dd:08:46:fb:89:
         cf:72:81:f1:23:0d:ae:04:a3:88:ef:50:37:da:4c:5c:37:14:
         7a:86:3e:27:ab:d2:5c:e6:a0:70:75:01:02:99:50:e0:e7:c0:
         c5:3a:40:b9:b2:c0:eb:1c:ab:32:0a:6c:db:94:bf:ee:e8:77:
         1d:7c:b4:91:f3:4b:58:3e:c8:d8:c1:ab:88:74:6a:e2:ab:a0:
         9e:8f:da:b8:c2:91:f9:b4:c2:02:6a:39:53:e2:33:79:c5:2d:
         aa:b1:00:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:24 2026 by rpki-client