Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3134342e302f32302d3234203d3e20383334.roa
File:                     34302e3138332e3134342e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          V79nF1Y67s5kHUTOskWu2IF3pDaSs3ME9d6B2r+SFJ0=
Subject key identifier:   78:03:7F:C9:51:16:FB:98:DF:2D:FC:FD:F6:46:9F:2C:F2:58:41:CD
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2F6182E79654A720B3803156F1561C44D1B5620D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3134342e302f32302d3234203d3e20383334.roa
Signing time:             Fri 18 Apr 2025 06:30:56 +0000
ROA not before:           Fri 18 Apr 2025 06:25:56 +0000
ROA not after:            Fri 17 Apr 2026 06:30:56 +0000
asID:                     834
IP address blocks:        40.183.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:61:82:e7:96:54:a7:20:b3:80:31:56:f1:56:1c:44:d1:b5:62:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 18 06:25:56 2025 GMT
            Not After : Apr 17 06:30:56 2026 GMT
        Subject: CN=78037FC95116FB98DF2DFCFDF6469F2CF25841CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:04:e8:10:14:c0:5b:22:12:64:72:95:bf:bd:
                    2d:86:37:d6:1e:63:9d:c7:7b:c1:9f:a2:f5:c4:9f:
                    0f:a2:7e:b5:c9:84:56:fb:3b:48:d2:9f:b2:fe:bd:
                    1f:69:5e:6b:af:e2:27:69:9b:14:bf:fe:a3:c2:0e:
                    72:d7:a9:7b:68:2d:c4:43:1d:6e:36:99:d9:69:32:
                    cb:1c:91:08:50:20:0a:a8:f9:70:14:93:90:bc:cc:
                    16:65:cc:ad:7f:d7:52:a3:60:2c:59:14:cf:d1:da:
                    ef:82:20:9f:b1:00:8b:c3:62:48:53:32:31:58:01:
                    08:7d:af:ae:81:f1:45:1b:8a:e7:94:83:88:99:b1:
                    9f:1e:a3:94:13:6f:1b:d0:d3:a8:59:e2:f9:d9:85:
                    89:81:30:34:02:87:cd:be:cb:3c:c1:19:03:fb:e3:
                    b9:5c:a9:5c:d2:5e:bf:09:7e:c6:3e:20:6f:1d:0b:
                    64:a1:34:22:7e:87:1a:5e:5e:90:7c:5c:70:f7:9c:
                    f9:e9:44:08:74:e0:ff:3e:58:d4:4c:db:9a:6e:5f:
                    b6:94:51:89:b0:dd:a6:10:51:4d:d7:b5:d1:86:5e:
                    c4:96:a5:85:50:7a:03:7c:00:28:07:35:b5:c1:76:
                    16:f0:b0:2c:aa:0e:6f:9b:59:81:11:7d:e6:3f:29:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:7F:C9:51:16:FB:98:DF:2D:FC:FD:F6:46:9F:2C:F2:58:41:CD
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3134342e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:70:80:c2:30:0c:52:dc:6e:7b:2e:e0:02:73:3c:2f:ae:1a:
         80:9d:51:ee:d6:0a:a6:46:af:86:7b:ef:4e:69:74:68:fd:37:
         d2:3d:1b:f2:f0:95:2e:d2:ee:f8:c5:37:1c:d1:07:ea:f6:80:
         4d:82:d7:73:ff:0e:eb:61:74:86:e8:36:32:fd:bc:ed:31:8a:
         74:fd:c4:fe:2c:ca:38:5f:11:e4:a6:27:a3:45:be:6c:1c:fa:
         b0:4b:f7:21:41:b3:d9:b9:1f:6c:44:64:86:b7:c2:93:a2:ee:
         ad:fb:a8:5f:2b:f9:46:07:f6:f7:88:58:3c:c7:2a:31:76:82:
         14:11:83:75:6b:70:6a:9c:f1:bb:a3:d6:a6:ff:dd:61:63:58:
         2c:cd:b6:34:2a:61:cb:ba:f9:15:7b:4e:d3:b8:bd:f9:51:21:
         04:33:52:42:4f:8c:5a:79:e9:c1:f0:4c:d8:40:67:60:32:a5:
         1c:de:54:5e:a8:51:c9:1e:11:5d:b4:e6:2e:1e:02:4b:85:22:
         82:19:3d:06:15:00:9a:52:1c:06:b3:49:f4:f9:b0:26:01:1a:
         cd:53:f8:d8:39:38:91:9f:67:2a:39:af:7d:8a:f7:a0:96:89:
         8c:c0:86:85:03:c0:07:cb:55:b0:13:4d:a4:c7:b4:e1:ea:c7:
         df:70:0b:f4
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUL2GC55ZUpyCzgDFW8VYcRNG1Yg0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNDE4MDYyNTU2WhcNMjYwNDE3MDYzMDU2
WjAzMTEwLwYDVQQDEyg3ODAzN0ZDOTUxMTZGQjk4REYyREZDRkRGNjQ2OUYyQ0Yy
NTg0MUNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgToEBTAWyIS
ZHKVv70thjfWHmOdx3vBn6L1xJ8Pon61yYRW+ztI0p+y/r0faV5rr+InaZsUv/6j
wg5y16l7aC3EQx1uNpnZaTLLHJEIUCAKqPlwFJOQvMwWZcytf9dSo2AsWRTP0drv
giCfsQCLw2JIUzIxWAEIfa+ugfFFG4rnlIOImbGfHqOUE28b0NOoWeL52YWJgTA0
AofNvss8wRkD++O5XKlc0l6/CX7GPiBvHQtkoTQifocaXl6QfFxw95z56UQIdOD/
PljUTNuabl+2lFGJsN2mEFFN17XRhl7ElqWFUHoDfAAoBzW1wXYW8LAsqg5vm1mB
EX3mPyk3nQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHgDf8lRFvuY3y38/fZGnyzy
WEHNMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1
M2RjNjQxMTlkLzUvMzQzMDJlMzEzODMzMmUzMTM0MzQyZTMwMmYzMjMwMmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQot5AwDQYJKoZIhvcNAQELBQADggEB
AKpwgMIwDFLcbnsu4AJzPC+uGoCdUe7WCqZGr4Z7705pdGj9N9I9G/LwlS7S7vjF
NxzRB+r2gE2C13P/DuthdIboNjL9vO0xinT9xP4syjhfEeSmJ6NFvmwc+rBL9yFB
s9m5H2xEZIa3wpOi7q37qF8r+UYH9veIWDzHKjF2ghQRg3VrcGqc8buj1qb/3WFj
WCzNtjQqYcu6+RV7TtO4vflRIQQzUkJPjFp56cHwTNhAZ2AypRzeVF6oUckeEV20
5i4eAkuFIoIZPQYVAJpSHAazSfT5sCYBGs1T+Ng5OJGfZyo5r32K96CWiYzAhoUD
wAfLVbATTaTHtOHqx99wC/Q=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:37 2025 by rpki-client