Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3235322e302f32332d3234203d3e20383334.roa
File:                     34302e3138332e3235322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          uaaMVZ+Fek+8GEj+WARuaKlzL2ysdA/kq8gnrnI+mfc=
Subject key identifier:   B3:42:72:08:94:98:FF:D5:0C:CA:87:B8:71:AC:05:E4:D2:49:05:99
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0EEDFE3061079D8E23924B2BC4607EF6F655425B
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3235322e302f32332d3234203d3e20383334.roa
Signing time:             Wed 04 Jun 2025 08:14:05 +0000
ROA not before:           Wed 04 Jun 2025 08:09:05 +0000
ROA not after:            Wed 03 Jun 2026 08:14:05 +0000
asID:                     834
IP address blocks:        40.183.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ed:fe:30:61:07:9d:8e:23:92:4b:2b:c4:60:7e:f6:f6:55:42:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun  4 08:09:05 2025 GMT
            Not After : Jun  3 08:14:05 2026 GMT
        Subject: CN=B34272089498FFD50CCA87B871AC05E4D2490599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:66:da:d7:24:75:ac:f9:2c:a3:d7:59:d3:
                    31:8b:17:94:96:52:93:b0:66:a8:21:01:60:0d:e9:
                    83:78:81:db:a7:30:9d:05:e6:73:fe:27:8a:e6:44:
                    4c:b0:33:00:37:ba:0d:b4:4d:83:15:4d:f3:1b:4b:
                    4a:79:c9:4f:05:53:78:1a:cf:79:98:65:32:67:8f:
                    2d:ad:40:43:51:d8:27:70:76:99:c6:2a:b7:e7:e5:
                    fb:38:61:eb:04:00:58:f8:3b:e9:68:86:81:b7:3a:
                    0f:a9:0f:07:19:c8:41:45:d5:54:2e:a9:46:99:b7:
                    bf:1b:58:ff:db:5b:3a:33:a0:f0:e8:19:41:71:e5:
                    89:0c:54:c9:39:50:26:06:5e:7e:7d:02:0d:73:79:
                    37:49:29:7a:f3:bb:0a:92:e0:d6:2b:52:ec:ca:33:
                    b7:a0:b8:ab:f2:2e:ff:38:92:b0:dc:9d:62:46:28:
                    56:02:05:b2:e4:29:a5:eb:7d:80:7d:1f:6d:b3:c0:
                    29:e0:e7:f8:ce:98:59:c8:84:3b:2c:f9:98:66:57:
                    10:00:44:45:38:1a:ce:3a:5d:89:15:06:f6:70:78:
                    c1:c9:c3:a3:a4:95:ea:fe:c2:d0:b7:2b:28:39:9e:
                    32:86:98:37:08:bb:3b:a5:a7:52:86:22:8e:6d:38:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:42:72:08:94:98:FF:D5:0C:CA:87:B8:71:AC:05:E4:D2:49:05:99
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3235322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:77:f1:68:8d:49:40:c3:05:d6:33:c1:a6:23:f5:00:be:52:
         ee:de:cb:da:ae:15:32:3d:35:91:c5:d8:98:9c:c9:71:3d:ff:
         ca:91:3d:d9:ac:38:d9:28:aa:7c:36:c4:cb:4c:09:1b:4d:65:
         3b:92:ce:3b:68:b3:54:e3:68:b7:cb:79:09:f4:15:d0:77:6f:
         c5:e0:70:90:fa:d6:3f:f7:fa:62:d9:d5:05:e1:a9:96:c8:23:
         4f:52:ca:1b:e7:4b:e9:55:cf:7a:0b:c1:2d:53:14:41:00:9f:
         d8:75:73:aa:04:7d:b5:c0:4e:38:28:8a:25:80:78:5d:59:cb:
         59:23:af:bf:af:ec:94:d6:37:c1:d7:c7:e4:7e:b9:b1:50:42:
         1a:e0:50:62:58:93:6c:29:0e:b2:64:af:fe:5c:f3:91:a3:42:
         a1:f4:80:e1:ba:43:51:15:fe:85:64:a7:c3:e5:28:84:9a:c2:
         1f:2e:78:76:98:ea:6a:c1:37:5f:e9:23:6f:c4:52:92:8c:de:
         25:0c:0f:0d:ad:43:23:e3:2c:23:40:b7:53:b6:e1:1e:8e:79:
         e9:6e:b5:e0:6c:49:88:1c:9b:22:e4:e1:26:1f:71:76:15:69:
         20:45:48:e4:38:fa:9d:45:29:2a:70:e6:ce:b8:5b:e7:7b:c6:
         9f:bb:9c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:07:44 2025 by rpki-client