Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231332e302f32342d3234203d3e20383334.roa
File:                     3130342e3134352e3231332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ZJA3elww0e7VZ4n3TrGwQ9/Y9pkQjIM6+X6XR566RkQ=
Subject key identifier:   81:16:F6:71:17:97:38:E9:FA:DE:DC:C9:7A:23:2F:D7:28:9C:D1:74
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       65CB267B4F1190C91EC9226B5596438851E5326A
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 02 Jun 2025 16:12:51 +0000
ROA not before:           Mon 02 Jun 2025 16:07:51 +0000
ROA not after:            Mon 01 Jun 2026 16:12:51 +0000
asID:                     834
IP address blocks:        104.145.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cb:26:7b:4f:11:90:c9:1e:c9:22:6b:55:96:43:88:51:e5:32:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun  2 16:07:51 2025 GMT
            Not After : Jun  1 16:12:51 2026 GMT
        Subject: CN=8116F671179738E9FADEDCC97A232FD7289CD174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:32:6f:46:a1:7e:42:4e:08:db:d1:e0:7c:
                    ed:dc:1d:37:75:2a:d0:b2:97:a6:f4:f5:cb:06:b9:
                    13:d8:01:31:86:71:a6:37:b2:6a:23:0d:15:53:de:
                    47:eb:e0:ff:0d:be:c8:12:82:96:a3:1a:b0:7b:d8:
                    32:51:fe:52:0c:28:67:47:30:6a:93:28:cc:0a:f9:
                    75:19:fc:a6:42:32:1a:6e:d8:26:ea:50:80:a0:c7:
                    e5:86:97:a3:62:15:e3:0b:da:f4:6a:3e:39:0e:5b:
                    7d:18:ad:e7:1d:ab:ca:db:d8:a8:16:28:68:e5:19:
                    8a:55:47:91:69:e2:b0:bb:7f:a2:7a:d9:94:a5:82:
                    1f:10:a3:d6:44:e2:3c:b8:75:25:9e:f8:8b:f0:9e:
                    e2:9e:49:47:fb:11:e7:64:a0:e4:fb:a3:91:aa:58:
                    33:a0:af:f6:b2:11:d4:1d:ff:8d:7e:7b:82:84:51:
                    6b:3f:40:02:be:93:19:2b:c4:c6:ef:c4:4b:55:ed:
                    e4:c1:f1:70:26:8d:8e:0b:58:f7:8d:00:67:df:91:
                    08:ba:15:ba:5d:f0:77:3e:28:e9:8e:2e:8d:72:19:
                    89:00:4f:74:2f:92:7c:2b:1d:37:11:9f:36:5e:32:
                    42:92:fb:16:64:f7:c1:0a:54:b1:9a:e0:f9:d5:70:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:16:F6:71:17:97:38:E9:FA:DE:DC:C9:7A:23:2F:D7:28:9C:D1:74
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:73:70:12:7c:71:71:5a:53:20:40:59:60:00:82:74:69:0f:
         ec:c2:22:05:23:92:d4:5c:be:38:ac:3e:99:23:92:c3:58:cf:
         32:ac:84:1d:62:5b:39:3f:d7:42:ee:0b:66:d4:73:67:9e:70:
         fb:72:70:de:e5:53:44:29:ef:a5:36:e8:eb:df:96:b5:67:e4:
         e6:69:4e:ca:9a:12:cd:e7:f6:62:65:db:20:f9:0d:61:4d:0b:
         89:48:78:c8:c8:24:d7:14:39:02:de:7d:68:62:a2:7c:ad:61:
         e2:96:6f:eb:79:a5:95:3a:b2:50:ae:40:59:cb:b1:52:4a:2a:
         a5:f8:08:22:37:c9:f7:8f:bb:94:9c:b1:4c:71:ca:43:49:2d:
         66:6d:75:61:a2:a2:0c:1b:b6:ab:83:b5:50:24:00:51:95:e8:
         a0:ac:94:0d:52:8c:32:88:71:46:b1:eb:4f:2f:13:65:76:4e:
         9b:19:47:b2:bb:27:0d:bd:50:2f:0c:51:48:0c:46:4e:f9:59:
         73:fb:60:f9:16:c1:d8:31:24:52:ed:db:75:a0:32:c3:e2:03:
         bc:7f:3f:c2:16:f4:02:5c:46:02:c1:84:80:e9:dc:56:c2:5b:
         be:59:53:2e:2b:38:73:4b:60:62:ed:32:c3:75:cb:31:6c:e9:
         19:25:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:53:03 2025 by rpki-client