Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e2037303239.roa
File:                     34302e3232332e3132322e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          6cOZ91iZvj9MFJ0C+FXWCUky6s8pn3A8fe0hY7rnapw=
Subject key identifier:   98:8B:3A:90:BE:3E:37:ED:F4:71:E1:20:3B:75:E8:7C:AF:79:FB:AD
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2AEAA17EA9BC2686A1B91DF8D633285240C85E7A
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 12 Jun 2025 07:45:14 +0000
ROA not before:           Thu 12 Jun 2025 07:40:14 +0000
ROA not after:            Thu 11 Jun 2026 07:45:14 +0000
asID:                     7029
IP address blocks:        40.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ea:a1:7e:a9:bc:26:86:a1:b9:1d:f8:d6:33:28:52:40:c8:5e:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:40:14 2025 GMT
            Not After : Jun 11 07:45:14 2026 GMT
        Subject: CN=988B3A90BE3E37EDF471E1203B75E87CAF79FBAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:4b:37:09:35:a6:c0:86:7d:b8:63:5b:e6:
                    db:37:fd:a3:4d:05:aa:f6:87:39:41:72:9a:a0:b2:
                    eb:ae:fa:50:45:50:40:e3:af:b6:d7:50:91:4c:de:
                    7e:2b:73:62:14:8d:bb:4d:4d:f3:f5:f3:f1:17:c4:
                    ae:c4:51:7c:22:03:51:d0:5e:75:e5:9c:25:97:f7:
                    e3:c6:7e:16:a9:ed:ef:1c:1f:86:7f:60:c2:01:4b:
                    7d:eb:22:fd:2b:89:92:5d:a9:89:98:38:b6:7e:48:
                    3b:29:ef:58:69:95:55:27:2e:13:5a:e0:d8:6d:fa:
                    c6:1f:71:c4:83:46:f7:b5:b9:49:15:cf:ef:2b:e4:
                    c4:d7:45:9b:d0:5f:10:49:52:09:76:83:d1:a4:9c:
                    89:95:26:fe:46:08:fd:ef:b8:76:2e:64:31:8f:a1:
                    0d:94:31:4a:6b:cc:62:52:06:3f:b7:8f:68:f0:2d:
                    4f:8a:52:c1:26:3f:64:e3:b5:8c:e7:6e:0d:fb:7b:
                    9e:30:83:a6:15:83:de:2b:11:bf:77:0c:06:71:72:
                    e2:e5:e7:77:40:cd:5d:be:1d:8a:00:6a:fe:85:07:
                    16:84:59:8d:56:99:c3:d2:62:86:ae:75:87:3e:14:
                    c5:08:d4:6c:94:aa:a8:3b:24:2a:ee:b9:52:20:79:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8B:3A:90:BE:3E:37:ED:F4:71:E1:20:3B:75:E8:7C:AF:79:FB:AD
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3132322e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:6a:a0:04:20:16:03:c3:9d:2d:93:0f:75:c4:e6:a9:c3:
         5c:34:98:f4:1c:9f:19:4f:3b:4a:33:4e:24:cc:aa:6e:be:bc:
         8c:86:50:fe:eb:3b:7c:c8:67:8e:11:41:b2:72:37:c3:54:3c:
         34:b7:bf:ff:8d:c4:e7:02:61:f9:58:1e:39:96:16:f7:a5:b6:
         c8:0e:1a:05:a5:a1:91:fd:ad:bb:1c:46:a8:13:17:90:39:37:
         f6:2c:c2:9d:de:ff:10:c0:48:74:d0:75:d2:59:f9:3f:e3:2a:
         d4:7c:b4:f2:db:ef:57:c2:a2:31:9d:bb:b4:56:cf:ac:7f:a8:
         e2:9e:9b:ef:cc:c7:53:a1:60:20:3d:ff:1d:46:4b:d7:65:94:
         12:43:ae:4f:55:a1:78:06:b0:a8:12:1c:fc:73:39:c1:d4:32:
         83:81:dc:03:7d:bc:13:28:d9:cd:6e:c8:b9:39:52:79:ae:09:
         91:63:4c:a4:d4:da:03:2a:e6:ba:82:0d:ae:6d:01:c7:be:9f:
         24:10:20:92:6d:c9:ed:1d:49:97:a4:13:e3:89:a5:b0:3c:34:
         9a:8d:85:32:02:c7:48:7d:b5:08:04:44:ec:53:53:2c:da:22:
         cc:55:ec:22:d9:52:f0:7e:98:4e:53:c0:1d:5f:3a:0a:56:02:
         9a:85:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:06:19 2025 by rpki-client