Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
File:                     3230342e31342e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          g4ZuyWwX6eseWt1kkIRniSmZmJucBQh1QCl0bD0tgUM=
Subject key identifier:   7A:EA:30:49:56:EC:CA:2B:9A:84:61:E4:75:68:E6:EC:09:E9:DB:A8
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       07CED49D43D1C28576F52992ACF01A89FCD3A4D6
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 04 Mar 2026 13:57:58 +0000
ROA not before:           Wed 04 Mar 2026 13:52:58 +0000
ROA not after:            Wed 03 Mar 2027 13:57:58 +0000
asID:                     834
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 19:25:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ce:d4:9d:43:d1:c2:85:76:f5:29:92:ac:f0:1a:89:fc:d3:a4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Mar  4 13:52:58 2026 GMT
            Not After : Mar  3 13:57:58 2027 GMT
        Subject: CN=7AEA304956ECCA2B9A8461E47568E6EC09E9DBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3e:c3:23:c1:ac:9b:8b:29:5f:48:78:be:cd:
                    f6:4d:2a:c5:0b:b3:40:78:20:32:15:9d:3d:c9:45:
                    1f:8d:b5:f2:92:d7:ea:8e:14:db:3e:3e:4e:33:5f:
                    32:2c:d8:28:32:d7:f8:c0:19:65:bd:9e:2d:d6:24:
                    c7:c1:42:41:f6:08:3e:eb:81:2b:0c:a5:3d:fb:52:
                    e7:b5:02:eb:ec:de:48:91:c4:38:52:d0:f7:e7:08:
                    b2:af:44:85:3b:3f:b1:a4:59:fa:12:db:1a:60:bf:
                    fd:18:18:30:7c:db:34:55:f8:8b:3d:e6:ac:df:5e:
                    a8:32:68:0f:03:55:a2:3b:7b:f8:44:58:40:bf:a5:
                    36:85:87:79:90:24:9c:0a:eb:33:d2:40:ff:eb:93:
                    43:1f:3f:1a:44:45:ff:c7:ff:29:ae:24:68:c3:c7:
                    3d:de:60:f9:8c:15:23:bf:c4:d3:65:2c:03:a0:da:
                    ec:43:e5:b4:e2:cc:f5:6a:ad:ec:5a:21:fb:e3:98:
                    4e:9d:8f:11:b4:a7:65:ab:ea:ad:7e:f1:5c:91:c8:
                    84:38:42:e3:b7:c3:2e:60:39:52:15:70:14:d6:16:
                    cf:4e:9d:eb:8f:9c:2e:98:9d:96:5e:fd:91:1d:a2:
                    9e:2c:a9:60:9b:c0:45:98:d5:57:f5:7c:e0:26:c7:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:30:49:56:EC:CA:2B:9A:84:61:E4:75:68:E6:EC:09:E9:DB:A8
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:4e:49:ea:79:62:72:e4:05:e4:fd:ff:51:27:19:ff:f4:56:
         3f:1f:d4:39:f9:8c:d7:bd:ea:67:8e:82:bb:6d:50:97:06:3b:
         13:f1:ee:17:89:38:c3:44:5f:e1:e7:82:57:f6:64:8b:51:a4:
         96:8b:21:f7:1d:99:18:97:f1:0e:c7:e5:e0:89:af:c1:8e:d6:
         a1:02:84:92:29:78:4e:90:20:3f:76:69:0a:96:a7:c3:f4:90:
         3c:78:2a:12:6b:83:52:d2:c7:69:29:27:ef:f0:bc:4e:ae:a7:
         c1:bb:53:ed:4e:3b:a4:3e:6c:23:53:96:df:da:29:34:08:18:
         37:b5:61:b1:47:ca:72:48:35:2f:51:bc:2e:2d:ea:f8:59:4c:
         7a:b8:71:9a:37:9e:b7:b1:21:33:72:90:37:dc:33:80:63:07:
         67:01:09:5a:a6:d0:de:fe:c4:9a:09:b7:71:20:fb:3e:4f:e0:
         9a:30:49:30:7d:bb:c1:98:7f:20:81:77:c7:db:3c:3a:b2:50:
         4d:a8:92:99:2b:9a:8c:fa:00:20:b5:e2:79:ed:ff:11:ab:d1:
         7b:ef:6b:83:66:df:c8:7a:af:a9:51:21:d0:ad:ba:48:28:a3:
         39:db:35:29:0d:af:d1:54:0b:7e:8f:d4:ad:0d:00:38:a8:8b:
         ea:01:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:20:19 2026 by rpki-client