Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38382e302f32312d3234203d3e20383334.roa
File:                     34302e3138332e38382e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          0vH9Z7ne8EpAop4X2abzJdQt4G+qIA6KS8HaLQHo9xw=
Subject key identifier:   9B:A7:E5:2C:91:BE:CE:F6:61:A2:F1:84:F0:F1:6E:B5:98:E5:1B:D1
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       68F00AAAF9D4CEBBE6147B763787BE853E64F408
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38382e302f32312d3234203d3e20383334.roa
Signing time:             Wed 16 Apr 2025 23:34:31 +0000
ROA not before:           Wed 16 Apr 2025 23:29:31 +0000
ROA not after:            Wed 15 Apr 2026 23:34:31 +0000
asID:                     834
IP address blocks:        40.183.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f0:0a:aa:f9:d4:ce:bb:e6:14:7b:76:37:87:be:85:3e:64:f4:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 16 23:29:31 2025 GMT
            Not After : Apr 15 23:34:31 2026 GMT
        Subject: CN=9BA7E52C91BECEF661A2F184F0F16EB598E51BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:28:a7:ab:6c:c2:c5:21:8e:8b:2d:03:ac:
                    42:30:da:39:34:d1:8f:91:ce:78:7e:fc:8b:3e:c1:
                    34:ac:d9:75:24:b7:c5:cf:7e:e8:72:d3:a1:d6:b7:
                    c5:61:9b:37:8f:92:fd:74:35:d0:99:f8:52:21:6a:
                    58:20:d0:29:c8:42:bf:2e:a9:68:08:9a:46:93:e1:
                    00:28:1d:08:14:5c:02:75:d8:fa:23:16:fa:0a:f1:
                    17:3f:21:3a:d1:03:84:3c:20:7f:af:16:06:9e:fd:
                    94:e6:f3:9d:64:6d:f5:4d:6e:51:9b:2a:4b:85:7a:
                    49:3c:59:98:1c:8e:1e:b5:5e:aa:3c:56:01:66:5a:
                    f4:60:cd:31:43:48:3a:8c:8b:7a:41:b7:39:f0:d0:
                    26:5d:08:0d:59:42:84:9b:0c:49:cb:cf:a7:25:38:
                    c4:e0:e4:b0:0c:ea:cd:1d:94:d7:eb:c2:ee:0a:83:
                    5f:30:50:a6:db:9e:7f:21:f8:af:3f:2c:db:bd:01:
                    7a:66:fe:2c:94:ea:7e:82:c8:6b:74:20:72:06:2f:
                    18:2d:36:5d:bc:50:ec:69:02:eb:99:0f:11:26:d5:
                    ed:54:2b:97:bd:10:18:23:88:98:fa:84:b2:42:95:
                    7f:3b:91:ae:76:67:c0:b1:72:4f:28:69:c2:94:a4:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A7:E5:2C:91:BE:CE:F6:61:A2:F1:84:F0:F1:6E:B5:98:E5:1B:D1
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38382e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         70:27:29:c2:e0:9e:d4:e8:4f:6f:a1:c8:49:ed:2b:f9:d9:5c:
         af:76:51:1d:22:f1:21:5f:ac:b5:6d:af:5e:33:fc:88:96:46:
         6f:e5:22:fb:55:87:6f:63:97:98:37:e6:9e:5a:8b:fc:a6:af:
         22:63:92:79:5a:ad:23:c9:66:a6:f0:90:69:f2:83:11:64:8e:
         5d:a3:2b:dd:df:5e:ce:89:ff:39:9d:40:64:90:14:2f:6d:cd:
         64:2b:a3:67:22:20:f9:b4:e9:fd:01:8e:41:f8:26:80:ff:f0:
         3d:9b:98:94:27:01:22:bd:03:9e:64:fb:8e:b8:2e:fe:33:e4:
         2a:43:69:6c:6c:d9:73:d1:30:a6:26:3c:84:ec:c4:32:b7:3b:
         68:9d:9a:9c:d5:c9:fb:97:2c:c5:f0:94:52:1e:99:58:a9:85:
         cc:b2:99:d2:08:06:1d:6d:73:42:a0:11:0f:88:25:0e:ed:3e:
         e2:7d:80:54:e9:dc:4c:c7:0d:ca:24:7f:c9:6b:f4:a5:ef:f8:
         10:c3:12:25:41:c3:d2:ec:87:f3:ec:13:e7:ed:f1:33:fc:2d:
         b8:3d:63:ca:cd:1f:94:86:b7:1b:12:04:5e:dc:12:6f:84:09:
         fc:dd:57:a7:21:e1:d0:f0:3c:15:cc:21:25:69:c3:3f:6b:55:
         9b:30:b1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:24:21 2025 by rpki-client