Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231372e302f32342d3234203d3e2039333034.roa
File:                     3130342e3134352e3231372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          mHjWWbreQ2qUixji9U7h+UgA/11tt0NoydLgcL7ty64=
Subject key identifier:   BC:63:F7:70:FB:23:24:1C:DE:EE:51:2E:83:54:A9:F4:EF:47:0C:97
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       3075B09DFEF3C54A621984DD784D4336C92E46AE
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231372e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 27 Oct 2025 04:56:02 +0000
ROA not before:           Mon 27 Oct 2025 04:51:02 +0000
ROA not after:            Mon 26 Oct 2026 04:56:02 +0000
asID:                     9304
IP address blocks:        104.145.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 17:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:b0:9d:fe:f3:c5:4a:62:19:84:dd:78:4d:43:36:c9:2e:46:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Oct 27 04:51:02 2025 GMT
            Not After : Oct 26 04:56:02 2026 GMT
        Subject: CN=BC63F770FB23241CDEEE512E8354A9F4EF470C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c6:db:7e:20:ed:d3:ab:4d:1b:b0:1c:e0:11:
                    91:e6:c5:a3:ea:e9:05:2e:07:dc:2d:77:a0:31:aa:
                    d2:dd:ef:72:0d:d2:37:70:6e:7e:4c:e0:6e:be:9e:
                    1a:98:f9:78:bf:f2:b7:57:f0:45:e2:17:44:f5:c8:
                    2b:65:99:93:cd:e4:be:56:6f:43:fc:16:a7:b0:50:
                    49:28:f7:fa:d3:a0:19:5d:67:b6:e4:85:24:cf:56:
                    d6:97:4e:48:8d:96:de:5a:8f:7d:82:c3:40:f3:0f:
                    24:dc:3f:0d:e1:aa:fd:b9:36:98:68:f8:e7:09:f6:
                    30:c7:f0:0a:84:70:a6:4c:6b:56:76:92:cd:f6:44:
                    f9:f9:ec:03:ab:b3:5d:02:1e:37:54:04:db:f1:73:
                    f3:6c:8d:de:2a:f1:58:57:98:55:86:c6:ba:18:8d:
                    ae:3a:cf:5d:79:f3:50:c7:97:b7:db:10:f2:99:b1:
                    27:9a:39:f0:93:c0:48:d0:0f:88:56:17:0c:1c:47:
                    bf:fc:64:1a:93:e2:d3:6c:ab:a2:eb:4c:ca:17:c7:
                    55:0d:8f:dc:8a:99:3b:8d:6c:d1:2b:b5:98:6e:13:
                    16:b0:08:ac:b8:f1:11:45:15:6d:1e:8c:0f:31:ca:
                    a1:0b:5e:e8:33:68:59:9e:8f:6f:3a:04:21:37:ba:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:F7:70:FB:23:24:1C:DE:EE:51:2E:83:54:A9:F4:EF:47:0C:97
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:86:b4:36:56:22:c0:6b:d8:28:60:e8:e9:76:b7:8d:94:cc:
         fa:67:0c:8b:ed:f0:4b:2f:1b:75:8b:97:32:16:f1:06:79:17:
         01:82:99:e5:b7:d1:26:a8:04:06:41:d9:3f:40:97:e4:89:c6:
         f6:b2:f6:75:bc:3b:93:4c:c2:b8:87:19:86:44:18:3d:32:6e:
         a2:bb:41:1b:7e:6b:05:4e:ad:93:91:ad:c2:b3:3e:45:19:60:
         be:8e:5f:9e:57:73:e7:f0:98:02:49:d2:c1:e5:33:87:ab:29:
         8e:3e:31:1f:05:36:81:99:9f:74:f8:24:80:a1:d1:73:ca:ea:
         47:92:3e:e4:bc:46:4d:0a:0f:a2:79:d4:aa:b9:2e:c2:35:68:
         c6:50:67:9d:46:8c:d5:bf:1c:1f:e7:ed:b7:2e:f0:b4:e1:e5:
         b1:09:a7:aa:79:89:95:d7:c3:98:ef:b1:f1:4c:93:48:16:ed:
         cb:4e:8c:75:81:0f:a9:1c:6c:ce:22:50:13:58:61:df:f3:ee:
         5a:a8:c3:4f:6b:e0:c6:cf:b8:61:15:3b:c0:10:cc:b0:f5:b2:
         77:cd:d0:a1:4e:b1:cc:5a:0a:79:b6:70:00:f0:06:e8:dc:ad:
         cf:ee:3c:65:a3:46:31:34:41:ea:6c:10:fb:5d:7e:80:29:8c:
         9a:25:f0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:00:05 2025 by rpki-client