Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e203232373733.roa
File:                     3230342e31342e37342e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          9zGFd6OxhDDuQOstwLfzZBp1qMkPKC6eMNmwtX7FDn4=
Subject key identifier:   43:46:66:8E:DD:F7:E0:65:E6:00:1C:86:61:2E:C1:8E:AC:FE:B9:91
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       413936A126BA83355C068676CAFFB1A6389F9B09
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e203232373733.roa
Signing time:             Tue 09 Sep 2025 10:09:50 +0000
ROA not before:           Tue 09 Sep 2025 10:04:50 +0000
ROA not after:            Tue 08 Sep 2026 10:09:50 +0000
asID:                     22773
IP address blocks:        204.14.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 05:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:39:36:a1:26:ba:83:35:5c:06:86:76:ca:ff:b1:a6:38:9f:9b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Sep  9 10:04:50 2025 GMT
            Not After : Sep  8 10:09:50 2026 GMT
        Subject: CN=4346668EDDF7E065E6001C86612EC18EACFEB991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:40:54:73:ac:78:62:6c:54:e4:7e:a9:e8:
                    47:2e:86:c9:e0:83:23:09:8c:76:5b:2e:6e:0b:cc:
                    eb:e4:35:30:94:70:e5:ef:06:b9:65:11:36:fd:76:
                    9b:4a:1b:5a:f0:2c:ef:3a:67:cf:21:bc:80:29:0b:
                    d1:52:d5:42:7b:e2:d0:8e:49:19:0b:f9:1d:3c:1b:
                    a1:0b:c9:c5:23:47:d0:5e:02:48:35:91:6e:9e:0e:
                    5e:0d:d2:a6:fe:1f:24:30:bd:10:95:c8:5b:08:c1:
                    97:fe:e5:aa:47:bf:63:2d:15:9a:cf:0b:61:73:56:
                    f0:35:59:d1:57:ba:d4:27:cd:c0:d3:07:d6:66:97:
                    a8:fb:ec:6d:8b:b2:74:02:8d:bc:80:98:d2:59:db:
                    5c:be:c9:bd:ab:10:dd:ee:74:1d:9a:cf:fb:85:73:
                    4c:e4:67:de:bf:d3:82:0e:72:a5:0c:3b:01:7c:d3:
                    9d:67:3b:1d:10:bb:e2:4b:46:03:da:81:33:9b:fa:
                    b3:d1:61:76:da:25:36:fe:4b:ad:14:83:79:da:65:
                    35:56:f7:85:71:a9:3e:d1:7a:05:9c:02:08:c5:c6:
                    c1:69:29:c8:51:f6:56:fc:83:f4:33:18:f6:e3:a8:
                    f0:b2:01:2e:77:c0:c8:6d:e0:a9:de:b4:64:47:63:
                    45:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:46:66:8E:DD:F7:E0:65:E6:00:1C:86:61:2E:C1:8E:AC:FE:B9:91
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ee:15:e4:df:fc:16:41:ab:51:fe:cb:97:21:94:5f:8d:e3:
         87:e1:0f:2d:6c:9e:06:37:da:db:a1:01:4e:db:03:78:68:a8:
         f0:42:50:2d:1a:61:fa:4b:e0:60:47:3e:e3:d7:b0:c5:26:ab:
         59:93:b1:f8:81:ca:cd:cb:46:b8:2a:c1:37:66:69:f1:46:16:
         79:d3:0d:a8:33:46:16:dd:7b:5a:2e:a8:be:37:3f:c7:3c:b5:
         56:71:22:c8:b1:ce:dd:12:39:f3:d3:d2:fe:07:fb:74:49:ff:
         65:36:ce:88:be:63:36:42:47:95:8e:4e:14:97:45:14:e1:25:
         92:7a:33:e4:5e:71:6d:06:88:08:59:ae:82:e6:b9:b7:23:df:
         31:42:3d:2c:2e:60:71:c8:71:6c:37:0c:16:f9:6e:7e:9c:9c:
         39:bc:d6:0d:a8:0c:9c:0c:47:43:37:28:93:c2:3c:68:c0:6e:
         39:84:e9:f1:43:07:e4:d9:9d:fb:48:cc:a3:82:01:70:dd:35:
         fb:26:e8:27:73:57:82:c6:a4:1d:d3:37:41:26:bc:9c:9e:87:
         9f:e7:d6:f2:51:a0:f8:43:5f:c2:cc:0c:e9:9d:4d:7f:03:0f:
         59:4f:51:97:98:9f:30:8d:7b:64:fe:e5:fd:b9:25:44:aa:f5:
         2c:15:07:40
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUQTk2oSa6gzVcBoZ2yv+xpjifmwkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj
Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjUwOTA5MTAwNDUwWhcNMjYwOTA4MTAwOTUw
WjAzMTEwLwYDVQQDEyg0MzQ2NjY4RURERjdFMDY1RTYwMDFDODY2MTJFQzE4RUFD
RkVCOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoctAVHOseGJs
VOR+qehHLobJ4IMjCYx2Wy5uC8zr5DUwlHDl7wa5ZRE2/XabShta8CzvOmfPIbyA
KQvRUtVCe+LQjkkZC/kdPBuhC8nFI0fQXgJINZFung5eDdKm/h8kML0QlchbCMGX
/uWqR79jLRWazwthc1bwNVnRV7rUJ83A0wfWZpeo++xti7J0Ao28gJjSWdtcvsm9
qxDd7nQdms/7hXNM5Gfev9OCDnKlDDsBfNOdZzsdELviS0YD2oEzm/qz0WF22iU2
/kutFIN52mU1VveFcak+0XoFnAIIxcbBaSnIUfZW/IP0Mxj246jwsgEud8DIbeCp
3rRkR2NFMQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFENGZo7d9+Bl5gAchmEuwY6s
/rmRMB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv
REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0
YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmIy
ZGFiN2NjMGE5MS8wLzMyMzAzNDJlMzEzNDJlMzczNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzIzNzM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMDkowDQYJKoZIhvcNAQELBQAD
ggEBAKfuFeTf/BZBq1H+y5chlF+N44fhDy1sngY32tuhAU7bA3hoqPBCUC0aYfpL
4GBHPuPXsMUmq1mTsfiBys3LRrgqwTdmafFGFnnTDagzRhbde1ouqL43P8c8tVZx
Isixzt0SOfPT0v4H+3RJ/2U2zoi+YzZCR5WOThSXRRThJZJ6M+RecW0GiAhZroLm
ubcj3zFCPSwuYHHIcWw3DBb5bn6cnDm81g2oDJwMR0M3KJPCPGjAbjmE6fFDB+TZ
nftIzKOCAXDdNfsm6CdzV4LGpB3TN0EmvJyeh5/n1vJRoPhDX8LMDOmdTX8DD1lP
UZeYnzCNe2T+5f25JUSq9SwVB0A=
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:19:44 2025 by rpki-client