Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20323035323230.roa
File:                     3230342e31342e37352e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier:          SffKXG/V7a65JHnwhlKtpYZr+VEtY7VwmhOdiRzGBjg=
Subject key identifier:   FE:22:63:F6:5E:17:19:0F:1A:C6:E9:4C:12:CB:2B:DB:07:22:96:35
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       7DD71C1BB9494DCB87AD73BD01A5C8589C99E4D9
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20323035323230.roa
Signing time:             Thu 28 Aug 2025 19:29:44 +0000
ROA not before:           Thu 28 Aug 2025 19:24:44 +0000
ROA not after:            Thu 27 Aug 2026 19:29:44 +0000
asID:                     205220
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 05:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d7:1c:1b:b9:49:4d:cb:87:ad:73:bd:01:a5:c8:58:9c:99:e4:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Aug 28 19:24:44 2025 GMT
            Not After : Aug 27 19:29:44 2026 GMT
        Subject: CN=FE2263F65E17190F1AC6E94C12CB2BDB07229635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:cc:97:74:e0:5c:a2:80:79:38:26:96:80:
                    eb:91:90:ac:76:f5:f0:cf:41:64:b6:41:9a:7a:fb:
                    e7:4a:e6:62:84:83:24:2c:0d:7f:7c:02:6e:e1:34:
                    03:84:aa:dd:f7:60:59:4a:61:48:7f:56:97:48:21:
                    55:7c:8c:0e:34:dc:50:1c:a2:8d:1e:77:0d:1c:27:
                    71:5d:9e:7e:a4:38:6a:ed:12:08:4c:ee:d9:24:c7:
                    da:3f:11:e6:54:46:cc:17:48:29:42:49:49:c0:da:
                    af:b5:d3:49:38:1b:b6:f1:78:d8:b9:b5:23:80:da:
                    75:d7:12:e9:fe:83:bd:00:aa:54:ed:16:f7:1f:9d:
                    06:5e:ee:c6:40:be:b8:0d:c6:e6:ba:49:4f:35:c8:
                    f9:4b:9e:ff:8f:18:70:04:29:e4:b9:0f:da:46:ff:
                    fb:82:c0:9b:3f:cc:a7:e5:39:1d:45:a2:33:f3:8c:
                    02:3f:1d:33:4a:17:e5:cb:f2:89:d0:da:bc:2e:6c:
                    8a:dc:6d:1a:b6:f7:9d:c0:29:0b:76:03:5c:26:5c:
                    00:a3:1a:0e:e8:4d:84:a6:eb:c5:b1:67:34:45:cf:
                    cb:ed:6a:d8:b6:22:dd:77:c0:5e:3a:9f:bb:a2:4d:
                    2c:5e:ce:12:96:7e:17:21:92:ca:ca:af:ba:2f:2e:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:22:63:F6:5E:17:19:0F:1A:C6:E9:4C:12:CB:2B:DB:07:22:96:35
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:75:e8:da:9f:15:52:74:44:dc:bc:46:23:e8:b1:25:f7:23:
         29:06:44:2f:52:36:27:c2:4a:a0:e2:7d:fc:41:bb:a4:97:11:
         4d:8f:17:ed:cd:a1:02:6d:c8:99:ae:31:cb:d5:b7:e0:91:59:
         16:c0:0f:b2:b9:e6:42:67:21:28:30:6f:08:5c:6b:31:89:e1:
         cf:3e:e6:2c:06:e5:69:5a:37:eb:b1:3a:4d:9b:1b:75:90:1b:
         ef:2e:6f:fe:d3:94:75:0c:a9:95:53:b5:c3:f6:ff:b6:a9:27:
         a4:09:47:14:f9:05:be:c7:c4:ad:37:f7:fb:7b:5e:a7:5c:65:
         2a:64:7e:b5:74:19:46:11:c0:b2:a8:dd:55:cb:12:99:7e:a0:
         9f:06:d8:e1:1c:34:a0:a3:cb:cf:93:30:cd:c5:8a:d2:a2:d2:
         eb:af:24:c2:a2:f5:7a:73:27:15:04:5a:3d:66:f2:a5:ad:76:
         7c:11:3c:81:04:05:03:aa:78:0e:48:ae:bb:0e:21:ab:87:b8:
         f5:6d:bc:c7:01:d2:de:a7:94:eb:4f:41:05:26:d3:b3:4e:2d:
         f6:a9:23:5b:1e:fd:e7:d2:35:92:7e:f4:39:86:fa:1e:da:59:
         ea:de:0e:d4:ae:76:8e:65:f5:73:9c:c5:3c:ef:84:4d:96:70:
         5d:da:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:19:44 2025 by rpki-client