Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203134363138.roa
File:                     34302e3138332e38302e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          z6+n43PZ7FDlQnyaQZDr+qthviJpzdCDohGhW0jeIZU=
Subject key identifier:   E6:7C:61:9A:D9:A7:B2:9B:27:FB:DE:0C:BA:A3:14:6A:62:33:1C:0C
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3AFE536693A276B55539B4AC049BB55916A57887
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203134363138.roa
Signing time:             Wed 16 Apr 2025 23:33:25 +0000
ROA not before:           Wed 16 Apr 2025 23:28:25 +0000
ROA not after:            Wed 15 Apr 2026 23:33:25 +0000
asID:                     14618
IP address blocks:        40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:fe:53:66:93:a2:76:b5:55:39:b4:ac:04:9b:b5:59:16:a5:78:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 23:28:25 2025 GMT
            Not After : Apr 15 23:33:25 2026 GMT
        Subject: CN=E67C619AD9A7B29B27FBDE0CBAA3146A62331C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:71:d9:f9:3c:8f:1c:e5:95:8b:e3:66:68:
                    62:75:e0:d3:2f:55:98:8a:7b:36:f8:79:1d:01:f7:
                    5f:8f:39:a2:d0:e8:91:b4:86:aa:99:8b:33:d8:db:
                    f3:ef:7b:dc:a7:40:11:74:3a:c2:c6:cc:25:b6:5a:
                    5d:5f:f9:db:ee:f3:b2:36:bc:f4:12:a8:dc:fa:4e:
                    cc:82:d3:07:c2:99:37:84:aa:aa:ca:7d:9e:17:f7:
                    27:8a:a0:4f:80:32:fb:0e:20:11:26:a8:e3:44:c0:
                    50:bb:3f:29:36:06:9a:a7:e9:22:6d:de:d3:3d:03:
                    a0:e8:36:57:49:88:27:85:88:6b:a7:b8:b3:b3:54:
                    f3:1e:18:9e:2e:a9:ce:3e:72:8f:99:51:85:27:5c:
                    35:33:2c:23:fa:80:68:a3:c4:9b:4d:36:9b:b7:67:
                    d6:a2:12:c8:8c:e9:a1:91:52:0f:e6:99:ca:54:ac:
                    22:66:40:38:a0:72:c2:2b:52:96:9a:6d:f5:3d:49:
                    09:21:6c:51:36:ef:8e:27:a9:60:d1:2a:de:f8:e1:
                    dd:c8:ed:40:77:06:77:d0:7e:cc:85:7e:2e:a9:87:
                    11:ee:e6:1d:e6:5f:e8:b1:e0:37:55:6c:71:0e:37:
                    c7:28:15:95:d6:65:bc:67:ef:b9:5c:dd:7a:8d:6e:
                    04:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7C:61:9A:D9:A7:B2:9B:27:FB:DE:0C:BA:A3:14:6A:62:33:1C:0C
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:fe:41:4e:ac:dc:c7:0e:4a:5e:8d:bb:77:9a:7e:12:ba:d0:
         58:68:be:33:37:4c:73:81:13:0d:2e:0c:96:57:48:f2:ea:dc:
         9a:58:85:59:38:b3:93:50:7a:52:f3:2f:b9:bb:4c:44:22:24:
         11:6f:da:45:22:a1:76:d3:30:09:89:47:ad:b1:83:0c:71:56:
         d1:ce:99:92:62:51:f0:0b:9f:de:c1:cb:4c:dc:86:c2:28:b0:
         f8:a1:1c:ab:db:54:90:92:65:18:50:3e:9e:bb:b4:2a:2a:90:
         9d:a1:da:bb:f8:69:a7:23:ea:0c:9a:5d:a6:82:ed:7f:00:33:
         a5:89:62:30:46:80:12:59:58:28:21:1c:61:60:fc:c2:59:9d:
         7b:95:1a:be:5a:be:5e:da:03:86:f2:e5:95:9d:57:f0:04:39:
         af:e9:84:be:93:f7:32:98:32:6b:4a:0a:9f:63:d6:ce:84:21:
         77:65:1a:8e:9a:d2:21:3a:58:f8:30:f9:f1:3b:0e:e3:6d:73:
         a3:74:c0:bd:0e:4c:cf:86:ac:21:ff:4e:d1:9f:95:cd:7a:7e:
         16:0a:57:33:8f:d7:7f:a7:d4:ee:91:b2:c7:e5:8c:12:b9:30:
         2d:2c:90:96:b5:b8:e0:9a:86:88:e7:05:6c:83:9e:34:8d:80:
         4b:58:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:34:01 2025 by rpki-client