Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e20323138393131.roa
File:                     3230342e31342e37342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier:          aAY4RA22ADFDszV4dPvuKa3s4kE4O5hSwO7XbwtjnDo=
Subject key identifier:   8D:4A:04:AC:88:50:2F:02:4B:B9:22:F1:E0:7A:EC:98:F9:38:DC:E3
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       12BD626ED7906B4F5B36D2D1F45AF9E2D9DD9B6D
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e20323138393131.roa
Signing time:             Mon 07 Sep 2026 09:47:44 +0000
ROA not before:           Mon 07 Sep 2026 09:42:44 +0000
ROA not after:            Mon 06 Sep 2027 09:47:44 +0000
asID:                     218911
IP address blocks:        204.14.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Sep 2026 06:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:62:6e:d7:90:6b:4f:5b:36:d2:d1:f4:5a:f9:e2:d9:dd:9b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Sep  7 09:42:44 2026 GMT
            Not After : Sep  6 09:47:44 2027 GMT
        Subject: CN=8D4A04AC88502F024BB922F1E07AEC98F938DCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:11:71:4d:01:42:8d:05:d0:0d:c0:52:60:
                    df:78:1c:04:b6:41:0a:88:54:30:f0:47:7f:16:14:
                    29:b2:50:b5:d0:f2:40:77:56:b7:dd:50:e6:5f:a6:
                    76:c1:c6:8f:10:c2:0c:f7:1e:bd:a3:2c:f1:17:aa:
                    79:a3:01:13:13:67:35:88:ce:b8:01:97:48:41:23:
                    4a:cc:24:ba:97:4a:e7:ad:13:4e:9b:42:e9:c8:e7:
                    fb:55:89:17:ae:df:7b:b4:be:22:cf:2f:63:99:ff:
                    01:af:4b:84:eb:ce:6c:5c:ad:d8:72:72:68:1c:39:
                    bc:46:19:e6:b9:6a:b9:7c:fd:56:4f:22:19:a1:db:
                    c5:94:ba:8b:b9:1a:67:7d:40:2f:f7:b4:7c:10:f2:
                    42:2e:ae:b0:ec:02:0e:cd:49:da:56:80:25:2f:7f:
                    b2:e8:b6:ca:20:f6:53:d9:e2:b9:07:7c:64:bd:78:
                    37:44:32:be:b3:dd:d1:34:d9:c9:23:9d:74:12:97:
                    ff:70:12:c0:26:d5:7d:cb:92:b5:04:82:1e:0e:f4:
                    92:d9:00:2c:57:86:cf:80:23:04:f5:8c:0e:94:65:
                    ba:af:15:15:e3:1b:8a:99:20:34:05:ad:e9:6d:7d:
                    ca:09:50:bb:2f:8a:5c:22:1e:8f:69:f2:e3:41:d1:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4A:04:AC:88:50:2F:02:4B:B9:22:F1:E0:7A:EC:98:F9:38:DC:E3
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e20323138393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:a1:22:f8:dc:bb:e4:64:af:fc:eb:c3:56:48:74:87:22:ec:
         11:43:3a:a3:b7:76:01:db:55:ab:31:2a:36:c0:d2:c9:13:8c:
         23:91:01:1d:07:68:d9:1c:ea:c8:1a:25:2d:85:b5:2e:0c:cd:
         fc:ad:0b:9d:d4:54:71:4d:d8:18:b2:79:1f:22:22:44:51:68:
         ce:47:39:da:a6:7b:b0:2c:f4:3a:09:0b:7f:89:75:f5:99:a8:
         8e:3c:93:2c:91:47:8b:52:5e:4c:a8:5f:c8:b9:d8:a6:5a:9b:
         6a:74:d6:d8:9a:d4:0e:79:73:bf:bf:8e:2e:66:b2:c9:e4:fa:
         84:ee:8c:27:3f:1f:f4:30:28:08:da:f7:f8:b4:a0:6d:58:01:
         0c:36:dd:04:1c:28:16:2b:95:b5:ab:bd:8f:d8:0f:0b:73:b5:
         1b:c7:a6:26:23:ab:6c:5e:7c:59:fd:7c:97:c9:ab:9d:33:fc:
         b2:85:0a:4a:15:77:38:fa:d1:3d:e0:4b:7e:87:a8:a6:58:bc:
         42:db:a3:b9:03:11:10:5e:8c:7e:a7:09:50:98:52:03:c3:47:
         4b:86:b6:67:3d:f5:f5:48:1d:db:c2:93:62:26:93:4c:cb:95:
         34:1f:d2:5c:c7:56:10:5e:0e:b9:ca:96:ea:f8:d2:29:c3:d1:
         23:eb:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 19:46:48 2026 by rpki-client