Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3234302e302f32312d3234203d3e20383334.roa
File:                     34302e3138332e3234302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          POvORzeZC9g1UrNfbm0lINBa40mohxLFClUaOPZsvUE=
Subject key identifier:   A0:19:EF:06:FC:45:D8:C9:43:86:FE:89:FA:0C:0B:13:95:FA:B9:58
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6B5E6503C17CC7CB691DAEC039E42DDDB8761B9C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3234302e302f32312d3234203d3e20383334.roa
Signing time:             Wed 04 Jun 2025 08:14:05 +0000
ROA not before:           Wed 04 Jun 2025 08:09:05 +0000
ROA not after:            Wed 03 Jun 2026 08:14:05 +0000
asID:                     834
IP address blocks:        40.183.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5e:65:03:c1:7c:c7:cb:69:1d:ae:c0:39:e4:2d:dd:b8:76:1b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  4 08:09:05 2025 GMT
            Not After : Jun  3 08:14:05 2026 GMT
        Subject: CN=A019EF06FC45D8C94386FE89FA0C0B1395FAB958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:46:23:11:e8:eb:4e:3b:60:b1:f6:04:de:
                    55:fd:e0:a6:2b:8b:90:06:1b:a0:32:d8:6b:80:bb:
                    81:c5:54:b3:08:e6:ee:06:5e:4c:98:04:42:c4:d1:
                    5b:16:82:40:61:82:90:ce:1b:f5:4a:05:c5:43:b6:
                    5a:b2:78:09:ab:49:3f:34:71:2a:a4:3c:8c:0d:91:
                    a4:a8:b1:9b:cc:77:7b:1c:d7:81:76:0f:aa:19:08:
                    3a:38:34:2b:b9:8d:47:e4:d9:4d:5a:37:06:7e:32:
                    8d:ce:ae:84:76:ce:9c:13:33:f4:df:f8:60:ea:95:
                    47:e0:7b:da:a5:59:83:06:92:d0:9d:fb:5f:e4:e9:
                    1b:a2:8b:e7:9b:4e:6d:46:db:b1:54:2a:5c:ec:20:
                    26:2f:b5:59:b0:a9:58:c3:ae:86:c4:66:7b:b4:76:
                    f0:3e:b8:39:98:df:d3:23:34:6f:b9:2e:44:93:b1:
                    bf:48:cb:bb:c9:87:6c:11:38:d8:e6:08:0f:43:43:
                    7e:e3:0f:29:94:12:eb:95:e5:d7:a0:f3:b6:77:59:
                    3e:38:6f:7c:59:27:f6:09:32:4b:d1:01:ae:3f:81:
                    9f:f7:a1:37:cd:f4:f3:52:3b:80:ef:40:3c:e4:57:
                    92:e3:e0:10:29:de:b6:e7:f6:5b:9f:50:89:e1:61:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:19:EF:06:FC:45:D8:C9:43:86:FE:89:FA:0C:0B:13:95:FA:B9:58
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3234302e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:bc:8a:f2:c0:2a:ba:fa:70:57:27:eb:26:8b:0a:92:83:
         4d:da:37:31:9a:27:81:b1:a7:5a:f6:5a:42:fb:01:9f:95:1c:
         44:78:0e:d2:b9:cf:0a:4f:9c:b7:58:a9:0c:64:42:98:38:fa:
         b4:95:52:68:f2:4f:b5:f3:64:f5:cf:de:3e:c1:f4:15:76:7c:
         6c:74:b1:66:7d:e5:51:f5:a3:51:66:db:37:c5:a9:28:ab:bd:
         f1:79:84:b3:44:95:bf:8d:5a:b4:58:ee:99:96:32:d0:fd:1b:
         b5:dc:45:ea:ee:c3:3e:aa:6d:d2:da:df:9d:f8:8a:ab:91:b1:
         e1:84:30:72:70:c1:9b:d7:b1:92:33:40:cb:5f:a0:2e:d1:ab:
         b4:d5:7c:28:fb:7a:ea:2b:52:36:c4:32:e8:6e:70:33:4a:28:
         2e:1d:e6:e5:95:f9:43:6f:94:51:0a:2b:4b:e8:55:87:a9:06:
         b5:b1:d1:c7:b7:12:81:ec:b5:8b:9b:89:f6:d6:e7:0f:d4:d6:
         5b:9e:3b:3b:8e:2b:1b:a9:09:87:09:8a:5f:3e:56:5d:7e:72:
         fe:d2:f8:0d:2d:c5:34:31:7e:e4:d2:38:e2:1b:a6:79:6e:41:
         ce:3e:12:c1:9e:d1:9e:04:c5:bc:f3:be:aa:8a:b3:11:bd:b5:
         34:23:cc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:00:41 2025 by rpki-client