Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203136353039.roa
File:                     34302e3138332e38302e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier:          ppbl8h21AWIfY9YdJZcFACv6bzb9F82TVIBu0tx3+v0=
Subject key identifier:   22:2A:DF:9C:34:3D:AD:5A:81:06:D3:96:F4:71:BE:9F:4D:B1:18:29
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       71509B2BF2DE1C304DE44507C1AD7DA7D700233C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203136353039.roa
Signing time:             Wed 16 Apr 2025 23:33:25 +0000
ROA not before:           Wed 16 Apr 2025 23:28:25 +0000
ROA not after:            Wed 15 Apr 2026 23:33:25 +0000
asID:                     16509
IP address blocks:        40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:9b:2b:f2:de:1c:30:4d:e4:45:07:c1:ad:7d:a7:d7:00:23:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 23:28:25 2025 GMT
            Not After : Apr 15 23:33:25 2026 GMT
        Subject: CN=222ADF9C343DAD5A8106D396F471BE9F4DB11829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:9c:81:c2:65:94:c1:fb:8f:2f:72:53:25:
                    a7:af:48:48:2b:26:50:8f:2a:82:69:59:bd:a4:e7:
                    70:a7:b9:0c:70:34:bb:e3:9c:8c:59:34:f7:f4:f7:
                    c8:ff:82:67:7b:1b:9b:cb:1c:61:15:c5:c6:7c:22:
                    dd:ed:1b:e5:5d:5f:06:ca:ad:7a:a4:d6:c7:8f:60:
                    64:a8:b7:1f:33:94:ef:c7:bc:ab:5c:13:54:49:5e:
                    c0:10:00:b1:55:26:3e:a0:c9:d8:ad:34:84:c9:f5:
                    80:1b:f8:5c:ac:4d:69:30:b8:4d:59:04:e1:46:38:
                    4e:9f:56:53:1f:85:8a:ad:f9:9e:90:47:c6:6e:62:
                    68:8d:77:19:40:f4:d8:48:23:bf:8a:dd:f7:20:97:
                    d1:2c:72:09:75:7d:83:5b:50:1e:b3:23:fd:1a:24:
                    f7:7d:b5:a3:25:c3:52:ca:e0:8d:bf:9d:83:22:75:
                    a8:5b:10:d5:15:72:2a:bb:c4:4e:5f:91:ad:14:00:
                    22:0f:21:55:63:16:58:72:a7:f4:00:4d:50:a1:d2:
                    31:87:9f:c8:1a:d0:99:93:e1:24:94:ef:84:69:bc:
                    93:f9:c8:2a:e2:84:bd:88:98:de:3f:f5:06:e2:34:
                    de:ff:9c:93:c3:14:20:05:be:d5:3d:af:e2:0f:70:
                    7f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2A:DF:9C:34:3D:AD:5A:81:06:D3:96:F4:71:BE:9F:4D:B1:18:29
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:18:55:4e:47:bb:15:38:97:51:a2:09:f6:60:05:a1:4e:
         1d:5f:5d:5e:ce:b5:ff:0c:29:2a:96:fc:95:84:8d:3e:f4:8c:
         1c:82:d4:49:14:b8:c8:6a:07:7d:88:11:66:dd:94:6b:79:72:
         0b:39:e8:15:02:fc:9b:92:7c:cf:ad:1b:92:8c:0f:39:6c:39:
         04:cf:0e:95:f0:c5:8c:23:26:55:fa:25:8c:60:03:d7:ac:8f:
         ce:6e:bf:d2:ed:5e:b5:e8:77:99:4b:a3:69:a1:b1:36:58:5a:
         ea:95:58:3b:37:2c:e5:71:f9:95:a0:41:0a:e0:b2:5b:52:e1:
         50:e0:b9:27:9e:4a:18:73:fe:5b:09:a4:94:b6:d1:6f:c7:ab:
         88:e3:5a:78:ea:3c:c9:22:bd:cd:bd:57:20:36:f1:e5:61:cd:
         e0:27:5b:e4:eb:f0:49:dc:28:25:03:fa:58:49:79:b1:1b:f1:
         d8:22:d2:d3:d3:d7:b8:7d:57:d0:03:a5:f5:0d:05:41:48:6e:
         a3:ba:8f:cb:e0:13:c2:f7:bc:86:6a:46:9f:d5:d9:19:27:e0:
         ef:c3:1f:68:0f:ac:cf:26:ed:fc:8e:aa:94:e9:ef:e3:65:9e:
         1d:04:f8:2c:5b:c1:1a:5c:b6:04:c0:af:19:21:ed:04:fd:e1:
         be:a3:ca:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:17 2025 by rpki-client