Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e20383334.roa
File:                     3130342e3134352e3230382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Whw0hb41xDiJr1xgF1dP6Z9FcHOcNhbOmZJ1+B5CHmE=
Subject key identifier:   F1:B1:95:98:42:3E:98:5B:05:08:16:CC:82:FC:5A:3F:F3:50:EF:F6
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       4E0DBF32E6374723848C62EECEC6B3B48FC8AA86
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e20383334.roa
Signing time:             Sat 13 Jun 2026 04:28:03 +0000
ROA not before:           Sat 13 Jun 2026 04:23:03 +0000
ROA not after:            Sat 12 Jun 2027 04:28:03 +0000
asID:                     834
IP address blocks:        104.145.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0d:bf:32:e6:37:47:23:84:8c:62:ee:ce:c6:b3:b4:8f:c8:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 13 04:23:03 2026 GMT
            Not After : Jun 12 04:28:03 2027 GMT
        Subject: CN=F1B19598423E985B050816CC82FC5A3FF350EFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0f:5c:bb:9b:e7:1e:59:0c:60:8b:78:45:f5:
                    98:0d:e1:24:0f:d4:7c:66:68:e2:1d:0b:0a:1a:23:
                    da:7c:f1:bd:3c:09:22:72:38:17:8c:68:8f:08:8d:
                    ee:8b:21:15:f9:40:23:43:81:bc:15:ad:97:b3:18:
                    c4:5b:33:01:fd:6e:06:e0:a3:3e:e5:b9:0f:01:f1:
                    70:5d:5b:58:5e:2f:f6:3a:73:8b:fc:b4:3f:23:34:
                    d1:f4:51:28:68:b9:56:53:4e:a3:6a:b6:b8:cc:f6:
                    dd:f4:cf:4e:87:20:fc:46:c2:26:35:3b:a9:f6:85:
                    75:32:44:8f:c4:df:b1:c4:68:c0:b3:84:89:92:a4:
                    e8:5a:68:22:44:c2:1d:61:01:fc:77:b1:3c:2c:5c:
                    5e:d9:c5:2b:2d:bf:b6:32:52:5a:43:50:8f:36:43:
                    3b:2e:f4:ba:8b:0f:f2:96:83:13:d6:e4:f6:8d:8a:
                    c4:aa:4b:0c:34:d1:13:99:26:0b:11:20:fe:d4:9e:
                    3b:6c:a5:cb:ab:90:15:8d:a9:06:f2:ff:41:65:82:
                    2d:54:a9:39:f7:b5:1f:10:4b:49:5f:10:19:aa:7b:
                    96:9c:d3:1e:aa:3c:54:e2:ea:2b:ca:77:ba:5c:e8:
                    32:8e:9a:98:0f:3b:59:b3:cf:c1:98:5f:e3:bd:d6:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:95:98:42:3E:98:5B:05:08:16:CC:82:FC:5A:3F:F3:50:EF:F6
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:39:9f:ff:81:99:dc:92:a2:e4:c7:2b:c9:8a:d1:f9:80:26:
         35:d4:81:21:a0:da:25:e7:31:bb:8c:8c:33:95:da:a6:11:40:
         3e:c6:c5:0b:a7:bc:79:b0:5a:b2:1f:3b:10:41:4d:81:57:02:
         46:fe:c9:52:fb:01:78:e9:01:3e:8d:62:14:9d:99:41:d5:43:
         86:f8:08:22:57:69:b4:3f:e5:ba:6d:cb:49:99:52:ae:2d:ab:
         90:d1:f2:fb:39:85:b7:26:d9:6e:1c:03:10:20:73:63:34:6f:
         99:72:52:2b:9a:63:d0:9c:5b:8a:00:5b:fc:f7:29:5b:7d:52:
         87:da:95:f2:c1:4d:4c:9e:97:6f:91:24:c3:32:4f:0d:78:cd:
         6e:ae:0f:9d:23:4b:8f:28:a6:68:30:7f:24:8c:6d:fb:70:40:
         c1:a4:9a:de:5d:b6:1a:c8:7a:e3:29:11:d3:c3:74:e5:f9:e5:
         8b:24:5b:28:c6:d2:5b:e9:4b:80:7a:98:f8:d0:8a:31:77:7a:
         80:2b:01:04:ec:49:85:e9:1d:bf:48:9c:66:82:c7:19:1e:77:
         8f:5e:c4:ac:41:4a:40:75:6e:9e:5d:c0:e2:f4:9a:66:a0:49:
         e3:43:0e:ed:7a:b1:9b:9f:09:3b:70:f6:60:27:8a:86:86:ef:
         cb:e6:97:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:54 2026 by rpki-client