Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f32302d3234203d3e203534303034.roa
File:                     34302e3138332e36342e302f32302d3234203d3e203534303034.roa (raw, json)
Hash identifier:          OiAun4X8EWfKjdbtp8kcaVE91buG2eaQ62JsHJiAkew=
Subject key identifier:   B4:49:1E:18:3A:A4:8E:FA:38:64:78:CE:FF:CC:08:3C:38:E5:3C:76
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       36B7FCBF3D4761ED310E75A108E8B850EC651DF2
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f32302d3234203d3e203534303034.roa
Signing time:             Thu 06 Mar 2025 02:28:26 +0000
ROA not before:           Thu 06 Mar 2025 02:23:26 +0000
ROA not after:            Thu 05 Mar 2026 02:28:26 +0000
asID:                     54004
IP address blocks:        40.183.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 08:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b7:fc:bf:3d:47:61:ed:31:0e:75:a1:08:e8:b8:50:ec:65:1d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Mar  6 02:23:26 2025 GMT
            Not After : Mar  5 02:28:26 2026 GMT
        Subject: CN=B4491E183AA48EFA386478CEFFCC083C38E53C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:3d:bb:3d:f7:4d:a3:38:58:41:c7:3e:46:
                    b9:16:78:3b:7a:f2:56:85:99:e8:67:39:f4:7f:f2:
                    03:eb:2c:9c:d4:20:0b:d7:39:51:12:02:46:65:fb:
                    86:a1:eb:3d:15:9f:73:58:26:ac:fa:d0:43:47:9f:
                    64:20:31:a0:d4:02:4c:22:2d:ae:72:35:60:37:8a:
                    55:92:c2:5b:25:d5:f4:46:eb:56:e7:48:30:62:0e:
                    ce:3d:8b:74:e7:e6:ac:0b:ee:7c:77:44:aa:50:83:
                    54:e3:db:83:4e:18:07:71:8d:a6:14:3b:de:db:4c:
                    f1:26:09:48:ad:6b:87:e3:03:86:46:5d:0e:53:d7:
                    54:83:19:e8:47:3b:e5:07:16:4d:45:6b:41:f9:36:
                    03:f1:ae:f3:85:91:25:e2:c6:e8:78:40:97:51:95:
                    97:7f:16:c6:b6:ce:fe:99:17:b8:7b:77:7e:01:5e:
                    40:2a:b1:dc:e2:a7:e4:f0:9b:60:f3:9d:81:04:ae:
                    d7:6a:a0:37:c2:b7:6b:2d:0d:68:d8:2e:8e:f7:64:
                    40:a9:50:f4:0d:c1:90:13:5b:35:f6:e9:aa:ed:e2:
                    b2:98:d1:d5:d1:c7:ec:22:af:4b:6d:fd:13:30:a3:
                    fb:36:04:7a:bf:c6:e2:41:d1:0f:5d:f0:b6:bc:9e:
                    1a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:49:1E:18:3A:A4:8E:FA:38:64:78:CE:FF:CC:08:3C:38:E5:3C:76
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e36342e302f32302d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:1a:55:79:32:fc:6d:9a:6b:ed:e1:c3:b1:e1:fd:bc:63:
         fa:42:1f:52:ee:bb:2d:f1:66:52:58:22:99:e6:c9:79:79:b7:
         0d:53:b3:47:de:02:d1:e1:d5:02:da:89:58:d0:94:0b:d1:e5:
         a6:bc:cb:3a:36:d1:ee:7e:6a:bb:8d:e9:85:cb:66:e2:c5:d8:
         9a:26:19:d9:6c:6d:eb:6d:c3:1f:ce:6d:9a:5b:9c:72:20:82:
         24:be:69:cc:86:5c:dd:dc:e7:63:e2:cd:37:69:24:98:fa:e7:
         01:81:b9:26:f8:45:e1:b1:da:97:08:13:31:37:48:2c:74:06:
         3a:20:3a:25:cf:2a:d8:38:69:84:7e:58:1e:64:95:66:23:ff:
         bf:ac:9b:91:f6:67:dc:c7:c7:20:01:c3:52:24:26:bb:37:98:
         ef:65:ad:66:b7:56:4a:74:5f:ac:35:72:bf:a4:cf:f5:93:3a:
         04:e6:c3:d9:b1:49:2b:60:d7:fd:32:ce:e9:71:c4:82:cf:47:
         41:7e:57:c2:7f:d9:7e:cb:36:21:b8:a4:52:0d:77:bc:5d:2d:
         4e:0e:d9:76:cb:1b:1d:91:7f:c4:89:a4:7c:07:18:e8:5d:6d:
         c1:df:38:4b:d3:73:71:9d:da:d6:dc:b8:2e:66:77:d2:ba:36:
         21:07:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:28 2025 by rpki-client