Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203232333438.roa
File:                     34302e3138332e38302e302f32322d3234203d3e203232333438.roa (raw, json)
Hash identifier:          JLAeTOujjqjDQgHXEQfeWd8MDX5jSc4ZqwijCHhKXI4=
Subject key identifier:   81:FC:2A:53:8B:4A:B2:C1:F8:C1:C3:74:DD:D0:D6:A1:FB:C9:D6:DD
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       38F5381FBC27385E13D1B99FE150EF162ABBD888
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203232333438.roa
Signing time:             Wed 16 Apr 2025 23:32:22 +0000
ROA not before:           Wed 16 Apr 2025 23:27:22 +0000
ROA not after:            Wed 15 Apr 2026 23:32:22 +0000
asID:                     22348
IP address blocks:        40.183.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f5:38:1f:bc:27:38:5e:13:d1:b9:9f:e1:50:ef:16:2a:bb:d8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 23:27:22 2025 GMT
            Not After : Apr 15 23:32:22 2026 GMT
        Subject: CN=81FC2A538B4AB2C1F8C1C374DDD0D6A1FBC9D6DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:1b:11:6e:46:cf:a2:48:ea:28:92:b7:0e:
                    92:45:02:4b:84:58:35:9d:3e:04:f0:24:cb:8a:7e:
                    19:5d:92:d9:55:6a:45:ba:58:f9:22:d5:aa:cb:94:
                    39:68:50:1d:ec:9a:75:de:b8:6c:62:12:da:bb:94:
                    89:68:e5:23:fe:f7:d4:a8:3d:2c:01:af:43:73:3d:
                    96:96:d1:c2:88:a1:ba:2f:c3:df:f3:5a:68:5e:cf:
                    c7:37:ed:f5:f7:c8:15:99:ab:66:ef:ae:df:f0:2c:
                    41:dc:57:0c:3a:a1:a1:d2:ce:f6:c4:45:02:cf:cb:
                    55:c4:9e:41:96:49:b4:6e:0b:4b:ed:7d:01:cb:ad:
                    bd:6e:3e:bd:11:89:a5:98:22:bd:65:bf:3b:c6:30:
                    2a:5b:38:58:30:6a:e8:5c:da:7c:7a:a3:94:68:52:
                    c9:3f:dd:8a:8c:87:57:ed:08:93:d1:19:96:8b:e0:
                    47:9b:33:6c:d4:24:5d:94:fe:be:c9:5e:b9:7b:0b:
                    a7:7f:7e:b0:1f:ec:17:4f:5e:d7:e8:fe:fb:d2:02:
                    64:e2:8a:89:f3:77:d5:44:b0:6c:f6:b1:d6:db:ff:
                    40:9b:f6:ea:c9:d4:18:ec:6e:ca:3b:9f:eb:67:9d:
                    80:99:db:db:ad:5e:91:7b:55:db:b1:7f:c7:90:35:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FC:2A:53:8B:4A:B2:C1:F8:C1:C3:74:DD:D0:D6:A1:FB:C9:D6:DD
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203232333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:91:33:ee:c5:60:5c:d7:3b:62:3e:8a:ee:32:bf:63:20:
         1a:d2:20:c9:e8:59:5c:bf:6e:a4:61:14:af:54:cc:20:50:a2:
         c9:32:de:ee:a3:92:be:fb:66:17:1a:f8:e7:98:a8:4b:4b:ac:
         f8:2a:fd:5a:af:aa:34:cf:64:70:95:10:45:9a:16:05:75:0a:
         55:23:24:73:01:48:af:25:d6:0f:af:27:17:d4:db:30:b9:7d:
         b9:df:58:32:b0:8f:70:34:2d:ca:08:ab:43:77:be:1a:aa:13:
         d2:de:44:fe:a5:ea:35:1c:db:b5:84:e1:96:1c:c0:62:14:7f:
         f3:cf:ab:60:b9:38:94:5b:8a:5b:92:18:dc:dc:9f:87:78:c9:
         32:df:8b:e5:7b:c3:db:ca:85:6e:82:b8:ae:e6:a4:4e:bd:90:
         d8:ce:e8:67:bf:50:d6:3f:4b:8f:55:1e:28:3b:de:56:e0:1e:
         3f:bd:f8:0d:2a:62:15:ab:1f:59:8d:68:8d:96:6d:32:48:3a:
         21:82:c7:33:59:1a:52:c1:ad:54:5b:61:cc:19:44:d4:9f:73:
         b0:ed:46:3f:5f:a7:7d:c9:86:65:db:40:03:54:e2:27:ef:82:
         66:e2:bf:40:0c:c5:db:1b:a2:b3:5d:c4:94:53:eb:ec:d3:34:
         72:b5:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:17:18 2025 by rpki-client