Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e203136353839.roa
File:                     34302e3232332e3132322e302f32342d3234203d3e203136353839.roa (raw, json)
Hash identifier:          W/MAn0lmo+fio27A3lhqWYCkuL1oTbgmByW8GZgQ9as=
Subject key identifier:   3F:12:8B:1A:D2:26:5D:3D:0F:CB:20:4C:58:1C:1E:A6:5C:53:B0:E3
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5A70509D3FCA1FD5EBAA311D7B93DBA3F68750AB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e203136353839.roa
Signing time:             Thu 12 Jun 2025 07:45:03 +0000
ROA not before:           Thu 12 Jun 2025 07:40:03 +0000
ROA not after:            Thu 11 Jun 2026 07:45:03 +0000
asID:                     16589
IP address blocks:        40.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:70:50:9d:3f:ca:1f:d5:eb:aa:31:1d:7b:93:db:a3:f6:87:50:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:40:03 2025 GMT
            Not After : Jun 11 07:45:03 2026 GMT
        Subject: CN=3F128B1AD2265D3D0FCB204C581C1EA65C53B0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:3d:11:d1:b8:ef:a5:0b:29:32:c2:26:e1:
                    e6:7d:80:b9:31:11:21:78:e2:fe:44:82:a3:14:ad:
                    2f:98:df:59:41:42:30:41:9d:a1:94:3f:34:d3:3f:
                    35:6a:4b:c8:4c:b6:5d:a1:39:e1:4b:7c:41:e0:15:
                    24:b7:bd:cb:1c:3a:01:f8:dc:9e:d7:c2:ec:6a:76:
                    78:67:81:4b:ef:fe:7c:9d:a3:22:e3:92:00:11:24:
                    8f:e2:50:98:a8:d9:1d:d4:e7:04:70:64:76:f0:2e:
                    c4:0b:99:f7:c4:9e:7f:27:37:8b:1d:ff:72:4a:a3:
                    49:f2:94:0f:ed:87:43:32:e1:03:e8:66:a3:07:0a:
                    43:9e:b0:a7:46:bd:83:78:fa:56:8d:4b:95:95:5b:
                    da:a5:29:df:a2:e1:c1:d6:07:1e:8e:41:a3:b9:52:
                    00:b8:92:1f:85:c8:95:4d:78:a5:c8:fb:7e:58:e6:
                    c4:a4:c8:99:97:7c:a9:fb:e8:58:d2:f2:33:a5:07:
                    84:56:e7:af:a5:26:ae:7f:bf:de:b0:ab:8b:ea:3b:
                    17:60:7a:c9:f6:9e:f5:f0:18:07:29:56:64:63:29:
                    12:21:c2:81:7c:ca:ee:d2:df:3d:4b:d7:a8:52:c1:
                    4a:81:42:cb:c8:0a:73:c4:d1:ae:b4:bb:e0:94:8d:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:8B:1A:D2:26:5D:3D:0F:CB:20:4C:58:1C:1E:A6:5C:53:B0:E3
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e203136353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:42:a9:4a:db:1c:44:23:56:a5:27:43:52:a3:c5:df:07:91:
         7d:6f:c6:9e:e2:89:73:91:03:38:ae:f1:53:27:d7:00:d7:ea:
         7b:3c:5c:6e:1d:46:44:50:c5:51:f7:dc:5a:09:73:7e:42:7d:
         44:8b:82:00:c5:3d:98:cb:27:9e:c7:df:a4:85:f8:ef:40:33:
         40:ce:71:39:94:88:83:bd:e1:b9:90:78:69:da:ca:ef:b9:de:
         47:60:38:cf:c1:a5:cc:71:ab:d9:4f:cb:ca:fd:a9:78:ac:03:
         b2:be:5d:82:af:eb:76:85:1f:e6:d6:65:67:5d:f3:77:45:93:
         82:26:be:a5:94:ce:3a:bd:73:c7:10:3f:d5:4c:4b:92:c8:d6:
         f7:f6:4a:5a:65:6f:a7:10:b3:82:26:24:42:46:9f:22:cf:b9:
         fb:fe:20:6b:1f:20:e5:88:fa:95:4c:af:93:f9:10:d9:8a:59:
         ee:ef:eb:0b:e3:a3:47:9d:72:e6:c5:6a:ff:85:ba:5f:a3:59:
         29:2c:9a:e0:f7:b2:32:2c:10:04:40:2a:cc:3d:58:45:54:da:
         4c:72:36:67:6c:84:5f:49:15:c5:c8:3f:4a:5e:37:bb:84:5d:
         fc:10:0c:a0:07:21:b0:1e:c5:ba:d0:9c:d1:79:2e:56:aa:ba:
         c6:e5:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:09:03 2025 by rpki-client