Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3234382e302f32322d3234203d3e20383334.roa
File:                     34302e3138332e3234382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          6ADIz6LRASQYEjB7x3kuQW7yakpjxHbx8f5lzTSn+wA=
Subject key identifier:   94:FB:38:34:48:F0:C0:74:60:D9:32:C1:72:E2:9D:B2:75:EE:BE:44
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       05E19B4220A0764B96D154405D5933CFF5E7EEFA
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3234382e302f32322d3234203d3e20383334.roa
Signing time:             Wed 04 Jun 2025 08:14:05 +0000
ROA not before:           Wed 04 Jun 2025 08:09:05 +0000
ROA not after:            Wed 03 Jun 2026 08:14:05 +0000
asID:                     834
IP address blocks:        40.183.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e1:9b:42:20:a0:76:4b:96:d1:54:40:5d:59:33:cf:f5:e7:ee:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  4 08:09:05 2025 GMT
            Not After : Jun  3 08:14:05 2026 GMT
        Subject: CN=94FB383448F0C07460D932C172E29DB275EEBE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:73:31:aa:73:0d:e2:30:2c:29:79:83:e5:65:
                    61:d0:f2:80:c0:1e:06:93:99:01:10:64:4b:8c:b8:
                    9b:3b:46:2a:1f:1f:ba:24:10:75:f0:be:3c:13:a7:
                    76:fc:f4:f0:96:3c:f6:07:d5:6c:e1:f3:94:0f:52:
                    d3:ae:91:4d:09:36:fa:c9:46:7d:d8:d3:d1:e8:cf:
                    b4:3b:2f:dc:0a:b6:df:0c:83:f3:a8:99:69:16:16:
                    ae:67:34:dd:4b:a6:02:ff:f1:7c:df:f0:6a:7c:7a:
                    43:28:ef:3b:06:e3:e4:32:53:07:88:46:69:55:3a:
                    86:46:6a:0d:ad:c4:b3:05:c9:7c:c7:aa:c6:a7:6e:
                    21:1b:48:dc:db:5f:50:f4:68:ea:72:df:9b:8f:37:
                    a5:5e:56:00:82:a3:e8:44:d0:08:67:fb:e5:56:69:
                    f3:cf:86:7d:4f:a8:62:5f:58:45:65:ec:b2:94:cd:
                    7b:d1:57:f1:5e:25:ec:95:ca:25:4e:76:ec:05:7b:
                    89:1f:21:0a:6a:33:18:8c:3d:a6:a3:70:04:29:f3:
                    fe:4a:9f:65:8e:cd:d3:b7:cb:bb:57:ab:83:cb:90:
                    f2:bb:da:c0:c5:f3:f7:7b:f8:16:57:a2:52:2b:63:
                    ac:ec:b2:0a:d3:1f:19:1f:cd:bc:f1:8c:c6:ea:2c:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:38:34:48:F0:C0:74:60:D9:32:C1:72:E2:9D:B2:75:EE:BE:44
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3234382e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:09:2d:0c:9c:92:9a:6f:14:13:5e:83:8e:b8:0b:2f:76:16:
         e4:3e:95:53:7d:f3:55:71:0c:04:52:37:9f:8b:5e:b2:71:c0:
         c6:ee:00:5a:2a:9c:c1:53:d3:51:0f:02:c7:21:15:6d:79:44:
         29:77:4e:3c:05:da:74:95:8d:77:59:cf:32:b6:03:d2:73:ef:
         c9:58:b3:eb:25:d0:7d:d3:f8:f0:25:7d:9c:a0:e9:8e:14:17:
         f0:90:f3:ac:43:20:bf:99:b7:27:f7:4b:11:86:9b:18:ef:b8:
         eb:54:21:27:cb:65:dc:03:a5:b9:ad:6d:f2:45:cd:f0:9f:d6:
         57:e5:80:34:62:e6:df:c2:05:ff:a7:37:69:85:08:39:83:06:
         14:49:6e:11:7f:ac:54:6e:d9:4c:e4:7b:d2:07:99:a6:93:d8:
         38:46:1f:85:c6:a8:f6:b5:f8:c3:ee:e0:58:73:34:71:d5:db:
         18:2a:47:ce:ce:18:56:85:53:97:ea:5b:25:de:72:e4:aa:f2:
         4c:8b:c6:b7:f4:38:81:f9:b7:ee:17:f2:6c:39:6c:7b:e8:23:
         bc:ca:d1:8b:3f:d2:a4:61:1a:78:c1:ce:14:13:24:c1:55:ec:
         73:73:7d:cf:bc:70:d0:95:7c:b3:2c:ce:84:f4:43:dd:a1:2b:
         cf:1d:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:09:04 2025 by rpki-client