Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f32302d3234203d3e20383334.roa
File:                     34302e3138332e3232342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          8I3QIeQwIzCs7ji954DO6CfNG+gFqSMwLQL/idZPY/Y=
Subject key identifier:   88:FF:F3:A8:AA:D8:A7:CE:6A:06:98:BB:F3:86:63:37:77:C5:F8:86
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2A1B4C497124DCB68B80B4D033C5953B720C23EE
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f32302d3234203d3e20383334.roa
Signing time:             Wed 04 Jun 2025 08:14:05 +0000
ROA not before:           Wed 04 Jun 2025 08:09:05 +0000
ROA not after:            Wed 03 Jun 2026 08:14:05 +0000
asID:                     834
IP address blocks:        40.183.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1b:4c:49:71:24:dc:b6:8b:80:b4:d0:33:c5:95:3b:72:0c:23:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  4 08:09:05 2025 GMT
            Not After : Jun  3 08:14:05 2026 GMT
        Subject: CN=88FFF3A8AAD8A7CE6A0698BBF386633777C5F886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:72:ba:8f:25:14:5a:58:ac:e8:79:9f:50:
                    e2:d5:9d:08:2a:7e:72:50:7f:94:1e:dd:fc:a0:cb:
                    37:17:9b:49:34:e1:af:23:a5:71:f6:ed:a1:5c:92:
                    a9:e8:a9:1f:c1:c0:e9:d0:40:2d:a3:56:3a:2e:97:
                    89:6e:19:f3:26:87:08:c5:63:2f:29:d3:04:78:32:
                    71:69:d3:8d:83:51:cc:5a:f8:36:e2:c4:cf:87:f7:
                    e5:f1:d1:81:67:7c:17:85:29:0b:46:bb:0a:49:5f:
                    ff:1f:b5:af:f3:da:f0:67:53:0d:60:a1:cd:d7:9a:
                    63:36:18:af:7b:ea:f0:b5:a4:7d:c5:e9:d0:21:2f:
                    97:1c:88:2e:95:72:32:b4:07:83:86:22:04:44:39:
                    6c:ca:7c:2b:e6:93:10:88:e1:6b:67:73:bc:21:ed:
                    e3:46:cf:5a:bd:10:9b:a0:17:90:ba:f6:6a:29:24:
                    13:3d:9b:13:b3:61:95:93:fb:f0:fa:38:6f:07:a0:
                    65:20:8c:4c:d9:9c:fa:bb:f9:a0:58:1a:9b:46:1f:
                    89:2d:ec:68:89:02:11:84:82:f7:f5:dd:ea:15:ef:
                    a4:75:89:17:5e:95:f3:39:0c:7a:b1:6f:a6:3e:40:
                    c8:77:07:ac:1d:29:8e:cc:80:4f:87:98:fa:d6:b4:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FF:F3:A8:AA:D8:A7:CE:6A:06:98:BB:F3:86:63:37:77:C5:F8:86
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3232342e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:29:a1:69:ac:4d:86:ec:f8:d1:0a:a1:08:3b:b2:6b:c1:5d:
         c6:f3:db:bc:8f:93:ba:b0:ee:e5:e1:4e:c4:62:b0:60:df:0e:
         60:c0:71:36:93:dc:c0:91:0c:00:46:a2:3a:ab:72:95:04:ca:
         63:b3:a9:8e:bb:9c:3b:0d:ce:69:41:90:1a:e0:08:c7:f4:ca:
         c7:b8:d4:23:4b:81:7c:31:09:b5:75:3e:68:b0:6e:57:66:07:
         9e:d8:ff:29:6e:af:59:0f:bd:93:68:be:5f:c8:c8:74:5d:58:
         70:68:b3:10:3e:87:f5:40:b7:94:e2:ab:7b:d7:4f:34:0e:f7:
         9c:df:b5:43:18:90:13:8a:9d:79:de:e8:73:ce:47:9a:8d:af:
         82:85:8a:cd:de:da:2d:a0:cd:c4:7a:0b:d4:84:d0:e9:c9:1a:
         99:e3:31:c9:c0:f3:15:84:d3:70:ea:bd:f3:cb:e1:8c:70:df:
         cc:df:d8:08:b3:03:9f:a1:50:89:7e:53:e3:76:43:9f:05:30:
         70:79:28:de:8f:07:de:c0:83:5c:61:58:45:f3:64:66:97:2c:
         c3:e1:c4:e3:25:ec:9d:db:9b:27:4c:87:55:ae:76:0d:ac:0e:
         1c:26:35:80:94:51:ba:e6:1d:43:e6:1a:22:11:49:b7:0f:e9:
         0c:9b:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 15:59:17 2025 by rpki-client