Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e203230313135.roa
File:                     34302e3232332e3132322e302f32342d3234203d3e203230313135.roa (raw, json)
Hash identifier:          dETX1Wm6YmqkXp4xGe4F7S/cyR2rLXPxbMHKOzPWxto=
Subject key identifier:   E4:D7:FA:46:7E:A2:08:7F:DF:79:B9:93:72:65:14:4F:1A:97:E0:81
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       6A3F37E769F95B294E5D999F0B812569F8EAF92E
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e203230313135.roa
Signing time:             Thu 12 Jun 2025 07:45:34 +0000
ROA not before:           Thu 12 Jun 2025 07:40:34 +0000
ROA not after:            Thu 11 Jun 2026 07:45:34 +0000
asID:                     20115
IP address blocks:        40.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3f:37:e7:69:f9:5b:29:4e:5d:99:9f:0b:81:25:69:f8:ea:f9:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:40:34 2025 GMT
            Not After : Jun 11 07:45:34 2026 GMT
        Subject: CN=E4D7FA467EA2087FDF79B9937265144F1A97E081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:5e:95:b5:89:fb:f0:8e:4f:be:88:c3:f3:
                    02:64:a5:fa:f5:51:6a:26:4d:58:39:9b:da:5e:8a:
                    1a:44:ea:27:f9:c2:1c:50:de:03:4d:b0:ee:37:18:
                    b2:e8:dc:0b:61:ab:0b:be:d0:85:d8:1d:e0:d0:e4:
                    1d:97:e2:88:35:92:59:a9:7c:e7:05:9c:45:f6:18:
                    b9:c8:fe:60:65:2c:75:db:59:c5:ae:2b:5c:86:8b:
                    8e:49:48:f1:29:79:c0:78:25:d6:32:e8:5a:07:9e:
                    8c:16:05:34:14:71:a1:39:d5:2f:49:3a:6c:9d:f8:
                    ae:bb:be:90:34:14:59:64:b2:c4:9d:aa:47:03:a2:
                    2a:44:c9:0e:41:47:43:8b:35:46:ec:9d:9f:41:cd:
                    ad:6d:3a:6e:c4:66:a6:43:da:8f:42:0a:70:50:60:
                    40:a9:a0:37:bc:e0:7e:24:fd:d7:fa:28:b2:cb:01:
                    41:b7:f3:8c:12:09:a3:b6:6b:9d:71:52:84:12:bd:
                    0c:ae:b5:c3:16:74:42:4c:fd:ff:5f:a5:a5:90:18:
                    7d:19:31:6d:65:6b:75:0c:31:4e:8c:73:30:d3:db:
                    a9:28:97:11:56:96:cb:36:11:ab:d8:46:3f:60:40:
                    5b:fd:19:83:30:ef:cf:1d:11:c3:26:e9:1a:d4:16:
                    81:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:FA:46:7E:A2:08:7F:DF:79:B9:93:72:65:14:4F:1A:97:E0:81
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e203230313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:47:be:53:1b:1a:38:4e:12:8f:50:60:d6:39:d0:0c:69:
         c2:2d:37:3a:b4:bc:81:87:c8:ce:72:bf:3f:32:fd:ca:5d:6e:
         ee:dd:a3:56:10:5b:f9:eb:ae:c2:54:47:10:42:69:ed:6e:bb:
         e3:93:3f:b9:2c:c9:8d:5d:58:c3:62:92:64:f6:53:69:8d:2c:
         34:0e:40:c1:60:5e:e3:78:fd:fb:60:bd:45:81:1f:47:98:3a:
         75:89:16:c8:f5:ee:29:71:ff:c9:22:da:0c:4f:a2:63:7b:d7:
         73:29:9e:28:63:38:94:4c:cc:0b:f9:66:31:de:6b:68:56:45:
         76:d5:b6:65:d2:b7:80:06:1b:7b:2a:3f:1d:a9:4b:e6:00:a6:
         29:5f:0d:35:26:3b:c3:bc:d0:ab:dc:90:ea:cb:be:bc:b6:7c:
         b2:5b:bb:59:79:8e:8c:de:48:56:0f:47:18:e9:c5:f5:3f:43:
         4b:ed:70:f5:db:86:be:f5:b4:5a:32:36:db:27:87:e7:d3:32:
         43:fc:35:98:ce:6d:bc:26:1e:5b:77:b5:da:41:f5:3e:d4:e2:
         ef:97:97:8e:98:f8:47:d8:27:91:47:9c:b4:34:1e:57:d8:02:
         a3:c5:ac:d2:f4:3d:3a:c9:02:d1:83:da:ed:68:83:06:d7:a6:
         d8:2b:bc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:55:51 2025 by rpki-client