Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
File:                     3230342e31342e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iCQdcwgMDtxWaZlAkuPyVcEElCp81h6kfw6+zYpFp/s=
Subject key identifier:   5C:7F:8A:5E:88:FA:17:F0:A2:C5:B8:D6:5A:75:13:6B:E4:2D:52:AA
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       0EB73D087EAD390475904EE20FBE6B0D1617A0AD
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 30 Jul 2026 00:48:35 +0000
ROA not before:           Thu 30 Jul 2026 00:43:35 +0000
ROA not after:            Thu 29 Jul 2027 00:48:35 +0000
asID:                     834
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 11:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b7:3d:08:7e:ad:39:04:75:90:4e:e2:0f:be:6b:0d:16:17:a0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Jul 30 00:43:35 2026 GMT
            Not After : Jul 29 00:48:35 2027 GMT
        Subject: CN=5C7F8A5E88FA17F0A2C5B8D65A75136BE42D52AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f8:47:ac:2f:2b:30:3f:1c:68:57:a0:40:c7:
                    99:8e:bc:64:6f:d1:cf:88:e6:c5:17:c0:be:19:02:
                    eb:61:d9:f3:ea:c4:48:3b:f0:c4:0c:1b:24:28:7c:
                    33:1a:1b:fc:0c:21:a4:e0:d1:71:34:f1:3c:e0:e8:
                    9a:b6:79:8a:13:48:f2:1d:f3:1b:85:63:ce:c8:ef:
                    12:cc:be:ba:96:09:1f:0d:34:47:ad:ec:1a:87:d0:
                    a6:71:ce:c9:24:cd:6f:52:e5:ab:4c:11:01:db:18:
                    de:29:be:3b:d9:9b:a2:55:b8:d3:2a:ee:a2:da:1c:
                    fd:fe:27:46:da:7c:55:10:85:0a:9c:99:0e:1f:41:
                    28:9f:ce:ce:7f:47:38:28:fe:7b:ce:ad:d6:32:ff:
                    80:ca:46:03:74:13:5c:68:24:9f:bc:68:bd:ba:aa:
                    95:bc:81:b1:ab:ba:f5:89:c3:2b:56:2a:25:d4:46:
                    aa:43:5c:73:ed:c3:b8:34:e8:28:8a:c4:7d:98:e4:
                    17:7c:2a:67:37:13:9a:2b:01:6e:fc:af:0c:bb:61:
                    3c:0d:25:70:58:05:27:34:98:5f:f8:03:b8:8f:fc:
                    37:82:05:91:1d:a3:f8:ee:59:1e:0c:db:64:01:aa:
                    54:7f:cd:48:e8:ea:23:ba:cd:b8:9d:cd:c2:0e:dc:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7F:8A:5E:88:FA:17:F0:A2:C5:B8:D6:5A:75:13:6B:E4:2D:52:AA
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:a4:03:7d:41:63:e2:f9:c3:a6:91:55:c4:a3:c3:e7:04:
         96:21:14:50:df:25:cf:c3:ea:41:cc:48:76:6b:57:0e:f0:41:
         0f:fb:16:95:59:5c:24:25:0e:a8:fa:ff:c5:65:67:52:29:da:
         a1:23:c3:67:8f:29:f8:57:bb:45:55:4d:cb:a6:4c:d2:4e:f5:
         96:eb:f6:f1:36:87:3e:01:69:92:52:83:08:07:3d:ed:90:bf:
         ff:6f:bc:70:7c:d8:9c:83:e3:02:5b:43:df:02:d0:3f:10:d8:
         1e:62:7d:c0:da:a8:6f:bc:31:40:35:d6:86:77:89:84:b1:b9:
         45:ef:ee:05:35:4b:f2:0f:47:f9:0c:6d:c9:84:cc:a8:78:6a:
         6f:26:e4:ce:59:1f:cd:ee:90:d6:6f:db:2c:1a:e2:69:6d:d9:
         be:e2:6b:bc:41:b3:b8:5b:b9:c3:4b:ac:a3:69:7f:1b:81:4f:
         ae:bd:0d:04:9d:65:77:aa:be:a4:a4:ca:61:40:c8:88:f4:f9:
         09:e9:d2:db:f5:fd:f4:84:bb:05:a0:82:ae:7a:5d:6e:a6:ed:
         df:6c:96:f1:a2:c1:35:88:83:4b:08:1b:1d:ed:39:a9:38:ae:
         83:3e:94:59:a0:57:8f:12:82:e2:57:a8:58:95:84:20:70:af:
         23:73:4b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 00:31:57 2026 by rpki-client