Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
File:                     3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          Vgvajf2oKu06U3XmuVuH1zOP+prd+IppCV2Idp/Nic8=
Subject key identifier:   C1:90:50:B3:61:19:1F:D4:10:36:5D:41:33:B7:AE:A8:AF:C0:5B:1C
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       218C325412C24B8D18DE7EE23F17F1E1C1ED6654
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 11 Feb 2025 13:28:26 +0000
ROA not before:           Tue 11 Feb 2025 13:23:26 +0000
ROA not after:            Tue 10 Feb 2026 13:28:26 +0000
asID:                     212384
IP address blocks:        104.254.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 19:09:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8c:32:54:12:c2:4b:8d:18:de:7e:e2:3f:17:f1:e1:c1:ed:66:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Feb 11 13:23:26 2025 GMT
            Not After : Feb 10 13:28:26 2026 GMT
        Subject: CN=C19050B361191FD410365D4133B7AEA8AFC05B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:64:74:14:27:78:22:2d:85:0d:59:c3:75:
                    0e:a0:ad:18:9b:4e:ce:f4:33:7f:43:63:06:2d:82:
                    b4:39:32:c4:c1:fe:48:c5:1e:a0:89:f3:da:fa:22:
                    da:e2:5f:81:8a:58:2f:11:97:f9:b8:ee:db:01:1c:
                    5d:1c:8a:b6:9c:7e:2f:cc:f7:90:b7:62:2d:d2:f1:
                    81:8b:ab:66:e0:4b:19:05:08:44:57:e4:13:48:9b:
                    58:5a:53:dd:8c:e7:15:13:1f:91:70:71:d9:f6:2f:
                    5d:a3:62:14:b8:d3:76:98:26:37:bb:30:23:95:99:
                    2c:ab:49:3f:6d:cb:40:b1:bc:33:cf:6a:64:12:7f:
                    2d:4e:0b:98:9c:05:4f:0c:6b:3c:6a:f8:5f:92:b1:
                    cc:5f:a9:42:55:b1:6c:16:57:2a:99:c2:85:2d:5f:
                    b7:74:e3:94:17:8c:b1:c4:5d:59:cc:9a:fb:47:3c:
                    4d:4d:6c:7f:f0:00:d6:a0:26:24:ff:93:28:7c:2b:
                    fd:00:46:84:8e:e7:e1:4f:fb:f4:b2:08:49:7a:c6:
                    63:7d:75:ae:4a:61:08:f4:e1:ec:9f:a4:ef:c9:18:
                    ba:96:45:89:0b:95:83:69:fb:4d:e7:6d:a3:53:9f:
                    68:4b:14:24:68:b3:3b:af:6d:83:40:d3:53:51:fd:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:90:50:B3:61:19:1F:D4:10:36:5D:41:33:B7:AE:A8:AF:C0:5B:1C
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139352e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:4a:a6:60:41:16:38:ed:ef:2f:bc:d7:eb:25:a3:06:58:ab:
         cc:5a:94:1e:47:f5:ce:be:2f:7f:1e:c3:44:08:a6:1e:cf:2f:
         b2:a7:ac:80:ca:50:40:34:b3:3e:24:91:95:fc:91:27:bf:c7:
         34:60:35:c7:ff:f7:ed:db:4c:3c:57:0f:57:27:e6:b8:c2:21:
         c0:d7:d8:3f:3d:a6:c8:88:cc:ec:a8:cb:62:33:b4:19:64:dc:
         92:68:31:ca:c0:3d:e3:42:27:dc:4d:05:2f:f1:77:ac:88:16:
         cb:66:d6:f8:71:8e:53:aa:ab:03:75:ff:30:ac:fd:60:1e:cc:
         37:59:de:be:a4:d1:d0:1d:89:ef:8f:32:5f:58:f2:13:ec:3f:
         a4:4a:f4:5e:45:b0:17:ea:67:b1:72:82:99:e5:52:f3:9b:83:
         4b:79:32:99:1d:2d:7c:56:c6:19:36:22:14:2a:a0:91:1d:dd:
         f9:76:7b:cc:31:3c:b6:55:81:44:a6:5a:98:3f:e1:30:8e:ac:
         de:08:82:7a:08:21:ff:08:ba:59:61:6d:54:ae:2a:32:c3:93:
         db:94:ec:f3:bd:76:d0:2a:70:99:c7:b6:a8:ac:18:a3:9e:f2:
         88:1c:9b:0d:9a:26:6a:2b:7c:0d:5a:cd:5c:75:fb:05:58:f4:
         a4:75:82:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:30:51 2025 by rpki-client