Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203239383032.roa
File:                     3230342e31342e37352e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          iGsgapH/gYrloEhOEpkHCOwXxPBakrEFmZwFtsy5s44=
Subject key identifier:   7E:F2:DA:CD:A9:D5:A8:75:4B:16:ED:2E:DC:60:85:C4:B5:7C:C1:39
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       7352CB408B4023D882550988919511DE1F55C1AD
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 30 Jun 2026 00:49:47 +0000
ROA not before:           Tue 30 Jun 2026 00:44:47 +0000
ROA not after:            Tue 29 Jun 2027 00:49:47 +0000
asID:                     29802
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:52:cb:40:8b:40:23:d8:82:55:09:88:91:95:11:de:1f:55:c1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Jun 30 00:44:47 2026 GMT
            Not After : Jun 29 00:49:47 2027 GMT
        Subject: CN=7EF2DACDA9D5A8754B16ED2EDC6085C4B57CC139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:57:53:d8:52:25:ea:d3:95:6e:00:35:e4:
                    44:85:54:16:c0:29:50:d7:56:91:40:a7:99:55:31:
                    11:04:1c:d2:52:8f:2f:91:d5:9f:4f:83:26:1f:a2:
                    95:39:81:34:12:32:bd:83:f9:53:b9:82:1d:66:0d:
                    92:d4:01:fd:1d:07:1c:42:d7:4f:0c:1a:fc:69:88:
                    49:be:98:32:84:fa:fd:91:fb:18:46:56:0d:67:9e:
                    89:01:f2:62:ad:5c:26:c2:24:cd:9e:77:c5:cc:f0:
                    12:ba:f7:91:20:be:11:d3:7e:a9:5b:f6:5e:51:8e:
                    90:44:00:a2:bc:6b:85:b0:f4:37:e4:66:83:a8:83:
                    12:6e:75:57:ee:92:b1:ab:37:06:3b:b6:0b:f8:1c:
                    e3:ce:a8:28:01:88:6c:4b:50:8c:aa:8f:37:3f:7f:
                    15:f0:e0:b6:03:58:fd:de:7d:9e:3b:d4:54:d0:b8:
                    dc:70:93:69:18:79:0b:33:03:7c:5c:c1:23:bd:a9:
                    95:dd:bf:41:f7:9f:04:da:75:95:0d:6d:9b:dd:a8:
                    8c:12:a0:3e:14:08:07:12:de:b8:38:51:35:5c:7b:
                    2a:94:e2:76:ae:c6:52:34:5b:c6:3a:d1:7e:5b:60:
                    45:45:95:bd:5f:e6:80:79:af:d9:c4:90:d9:8a:c6:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F2:DA:CD:A9:D5:A8:75:4B:16:ED:2E:DC:60:85:C4:B5:7C:C1:39
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:71:88:41:f7:0e:c8:d5:6c:db:d1:a6:80:10:b0:96:0a:7e:
         9a:60:db:32:b6:1b:58:99:4b:3b:dc:1e:80:3c:aa:ef:57:bd:
         1e:25:20:b6:d8:68:d2:42:fb:cb:c9:d9:74:86:a2:4b:15:b3:
         32:d7:db:eb:a3:0a:57:fa:3f:7e:68:1a:00:16:c4:e1:58:2d:
         ae:b9:08:b4:4b:74:3f:d8:10:df:b3:8b:a6:d3:57:ab:f4:e1:
         a2:0b:9f:b2:df:88:78:48:9c:0d:c9:56:63:d1:3c:55:0c:9e:
         4e:90:61:06:b2:2b:9e:57:d5:f6:4f:2f:33:73:b5:e0:8a:09:
         ca:8a:b6:c2:68:fe:49:1a:d0:83:aa:43:b9:5f:62:e2:5f:b1:
         44:d8:bd:60:37:52:cb:94:3f:4c:bf:f1:8a:e0:5f:c9:ba:53:
         41:3a:13:ef:d5:52:91:fd:81:f0:b5:17:5d:ea:a0:d8:49:2e:
         14:6f:0e:a2:0f:0e:ac:e5:f1:e4:44:41:f3:44:c1:38:1b:e5:
         7c:64:11:c0:31:80:e2:0e:94:a7:80:7a:af:e2:86:7d:5c:74:
         e2:6b:9c:3f:0f:46:74:a2:e8:cd:32:8a:d3:9f:c3:54:28:6c:
         4d:4b:9e:ef:ff:47:6c:6a:f1:ce:44:12:42:d4:4d:c5:cd:7b:
         11:69:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:50:55 2026 by rpki-client