Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2037303239.roa
File:                     34302e3232332e3234352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          TCKBmnoOeMOWTuSRFTbVoqC+3FbA6XIfidE2ybKoWDY=
Subject key identifier:   56:D7:AF:0E:14:2A:6D:5D:1C:DA:55:81:74:84:B8:5D:B4:7A:C6:72
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       47D30967FE98E8EEC76DC42B101CA92529B54184
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 12 Jun 2025 07:43:22 +0000
ROA not before:           Thu 12 Jun 2025 07:38:22 +0000
ROA not after:            Thu 11 Jun 2026 07:43:22 +0000
asID:                     7029
IP address blocks:        40.223.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 22:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d3:09:67:fe:98:e8:ee:c7:6d:c4:2b:10:1c:a9:25:29:b5:41:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:38:22 2025 GMT
            Not After : Jun 11 07:43:22 2026 GMT
        Subject: CN=56D7AF0E142A6D5D1CDA55817484B85DB47AC672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:0a:e9:e7:5c:cd:4b:f1:d8:a5:c9:06:56:
                    f7:42:2c:6a:89:cb:5e:97:6a:57:87:f0:20:20:c4:
                    f7:c3:6d:84:20:38:4f:7d:b9:b7:5b:af:c3:2f:54:
                    df:c3:c2:16:b5:54:a2:b0:b8:d9:e1:21:58:92:6d:
                    13:e9:e8:33:ec:0c:4f:c7:16:cc:98:ed:da:c8:53:
                    34:a5:3e:c3:f8:7d:98:12:a0:3d:2c:ed:43:95:4d:
                    6c:1a:09:40:35:35:89:15:5a:be:a9:6e:a8:1e:d7:
                    5b:05:49:79:04:fb:fb:4d:df:53:e7:90:6d:c4:0d:
                    30:72:14:af:29:bb:6c:41:e2:81:99:02:83:21:c5:
                    95:01:76:6b:8f:34:6a:1c:65:b6:d0:d9:17:50:3b:
                    56:af:2e:82:90:e4:63:70:25:f6:19:a5:26:8a:ae:
                    f9:af:1e:65:66:58:0f:78:2c:d3:3c:74:3f:3b:84:
                    9f:c9:87:09:38:1d:30:fc:f0:6f:f9:5e:ef:4c:b8:
                    df:04:64:b9:7c:60:41:23:a0:83:33:72:50:be:8a:
                    4b:05:36:f4:7d:c8:2c:4f:99:b7:e5:1f:10:12:0b:
                    11:d1:91:2c:25:73:12:3a:96:09:e7:2b:d0:e3:ca:
                    cb:ff:9c:47:2a:11:58:ed:d3:88:2d:4e:46:b9:1b:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:AF:0E:14:2A:6D:5D:1C:DA:55:81:74:84:B8:5D:B4:7A:C6:72
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:ee:6f:de:66:1a:87:be:c5:74:da:18:55:52:92:fa:02:
         5a:04:85:3b:93:f1:27:63:df:12:21:a2:cd:93:be:86:55:c9:
         61:2f:06:75:aa:7f:26:df:0a:09:4f:3d:37:3d:6a:30:ce:9e:
         c3:17:03:6b:1c:85:f5:87:9c:13:f3:03:cf:e2:34:ad:90:ef:
         45:8c:f0:96:b4:b1:87:66:a8:97:9f:17:c0:82:6d:97:ea:ee:
         0a:d8:30:bf:64:8e:f1:b8:29:cb:5c:27:2f:e9:ea:a1:ae:3c:
         fd:b5:4c:b1:30:81:1a:61:da:4d:2b:2f:d4:16:f6:93:64:61:
         a9:f9:0d:12:03:54:2a:ce:f9:74:48:9f:7d:7e:ea:91:15:88:
         92:6a:47:f1:39:2b:8b:15:97:6e:c0:6b:65:28:4d:dd:7d:06:
         e9:0e:10:1a:2a:54:fb:a7:f3:44:c3:fb:17:91:20:23:1b:48:
         a4:ef:15:ba:12:4a:f1:48:d0:b1:37:53:32:e0:4a:3c:ec:73:
         30:ac:0f:65:0c:a4:17:17:31:ac:0f:f9:b5:7d:1c:01:95:84:
         2c:fc:fa:65:b6:bd:22:b6:70:16:7b:a3:9c:ee:a0:ba:44:d6:
         a6:d2:e7:45:e2:65:78:6c:3d:0d:6d:20:fa:fd:79:41:74:30:
         46:ad:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:50:57 2025 by rpki-client