Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38342e302f32322d3234203d3e20383334.roa
File:                     34302e3138332e38342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          9/YzQj5271mdihRQa+Fpjv2xBhpLfmZ5AgrACPRCk3g=
Subject key identifier:   73:DD:D3:37:C3:40:1E:94:E4:22:F9:84:05:8A:C3:CD:C6:84:31:D8
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1C93DBC3E685FCB9D4FD7BFD71326137EAC5C1F6
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38342e302f32322d3234203d3e20383334.roa
Signing time:             Wed 16 Apr 2025 23:34:31 +0000
ROA not before:           Wed 16 Apr 2025 23:29:31 +0000
ROA not after:            Wed 15 Apr 2026 23:34:31 +0000
asID:                     834
IP address blocks:        40.183.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:93:db:c3:e6:85:fc:b9:d4:fd:7b:fd:71:32:61:37:ea:c5:c1:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 23:29:31 2025 GMT
            Not After : Apr 15 23:34:31 2026 GMT
        Subject: CN=73DDD337C3401E94E422F984058AC3CDC68431D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:2e:61:6d:10:20:32:72:46:b6:e6:dd:49:
                    08:6f:a5:ff:4f:ce:b3:2f:14:89:a5:fd:48:ae:76:
                    bb:44:ea:ce:69:b9:1b:2e:c9:06:5f:dd:9d:99:8d:
                    49:38:bb:89:53:5a:21:6b:69:05:10:69:27:30:b8:
                    52:17:04:3a:43:2a:fa:81:8d:b3:09:72:01:19:84:
                    96:f5:dc:da:b4:e4:8f:c0:5c:0a:72:41:57:a6:8c:
                    b0:c7:ae:bd:e7:da:2c:ee:31:93:45:a5:b3:3e:f1:
                    18:dd:08:8e:12:c1:39:5b:f9:53:10:26:a8:24:f4:
                    b9:9b:b2:64:80:b5:5e:f3:83:92:11:be:49:d4:59:
                    53:06:e4:16:97:24:c9:b0:ba:62:94:1b:ee:88:0a:
                    e1:9c:6e:bf:f1:27:bb:69:8f:f4:f8:fa:a8:12:b2:
                    33:ae:cb:12:02:1d:6b:c6:b3:30:bf:5e:eb:4a:20:
                    32:b3:65:fb:cc:4f:95:5a:0b:6e:5a:1b:5c:cb:93:
                    73:ba:bb:e2:39:06:57:89:52:d2:07:44:95:2d:04:
                    30:03:a3:b1:73:ba:dd:00:d2:f2:72:c7:1f:ed:10:
                    38:f4:b7:78:90:19:0d:66:c5:2a:d0:cd:a1:06:93:
                    ac:ea:bd:70:3e:a9:8e:9a:66:69:42:26:fb:2d:a9:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DD:D3:37:C3:40:1E:94:E4:22:F9:84:05:8A:C3:CD:C6:84:31:D8
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:87:00:16:5c:36:93:87:c1:7c:b8:29:86:ca:0e:0f:1b:6a:
         92:ac:e9:4d:2b:3b:3c:61:31:ed:61:75:81:dd:03:43:ce:e8:
         ab:16:64:23:ba:05:97:40:91:99:e2:11:fe:d1:f6:ec:1b:8e:
         56:80:a8:22:d3:b2:c8:bb:b8:43:1d:66:56:a9:86:b1:38:f1:
         10:d0:7f:b2:08:f6:29:83:a9:1b:77:fe:fe:13:d8:ff:3a:db:
         5f:cb:77:7b:11:28:e7:2a:ca:0a:3f:68:9f:65:32:f6:27:ab:
         5c:63:a9:ab:2e:32:d7:e9:ff:e1:21:7f:39:45:c1:9d:74:cd:
         83:ad:f1:f7:8c:45:e6:e4:f9:7d:40:66:5c:46:36:b7:1d:7e:
         32:0a:00:20:a8:65:9f:6e:21:05:d1:6f:42:2f:6c:c5:95:d2:
         6d:e9:42:8d:e8:e9:7a:3e:ce:48:78:a7:b0:94:97:c0:c6:72:
         6f:52:b8:7b:97:cb:68:fa:83:e5:cd:fe:03:f3:33:52:82:ed:
         c4:88:30:b8:d2:29:21:69:ea:7b:c6:1f:94:35:c4:c9:9a:8d:
         62:25:f7:ad:5c:78:31:4b:0c:d6:cf:7e:1d:c1:1b:10:fc:f7:
         ab:5f:83:d7:61:27:a0:15:05:b4:d5:b8:94:cd:93:f1:b7:97:
         56:41:41:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:36 2025 by rpki-client