Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2037383433.roa
File:                     34302e3232332e3234352e302f32342d3234203d3e2037383433.roa (raw, json)
Hash identifier:          XDhepJjmo7oKA9rfRf6S9XGFzF2x2yjASIjMJWemHl8=
Subject key identifier:   92:E3:C8:EA:3A:45:C3:F3:C1:70:56:61:75:7F:87:36:C4:93:CE:E9
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       38FBA9424437E8214B599E7354DA9081F10B1676
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2037383433.roa
Signing time:             Thu 12 Jun 2025 07:43:58 +0000
ROA not before:           Thu 12 Jun 2025 07:38:58 +0000
ROA not after:            Thu 11 Jun 2026 07:43:58 +0000
asID:                     7843
IP address blocks:        40.223.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 11:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fb:a9:42:44:37:e8:21:4b:59:9e:73:54:da:90:81:f1:0b:16:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:38:58 2025 GMT
            Not After : Jun 11 07:43:58 2026 GMT
        Subject: CN=92E3C8EA3A45C3F3C1705661757F8736C493CEE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:bd:91:ae:ef:fa:b7:78:91:9e:e3:2a:9d:
                    58:7c:0c:be:b9:80:f3:27:29:95:14:8a:dd:4b:64:
                    d9:5e:a5:0f:0c:bc:0d:7b:15:67:4c:c9:39:cb:1c:
                    82:b9:25:c7:df:95:99:63:00:57:b6:fd:e0:a1:23:
                    1e:82:99:78:bb:13:a3:ae:4d:54:12:f9:e5:55:de:
                    3b:0f:41:f1:01:d2:0e:75:97:a2:a2:de:39:32:46:
                    ae:38:bc:f9:b8:32:9e:45:b4:33:9d:1f:8d:0a:45:
                    16:7b:95:2e:33:06:43:ae:b9:0d:3e:cb:c1:40:4d:
                    89:d7:5e:5d:e3:6c:50:cf:a9:ee:3c:ab:8a:ff:e1:
                    06:ef:8d:a3:18:7a:8e:61:6f:68:53:c8:5d:6c:1f:
                    aa:36:1c:26:34:0d:eb:d0:f8:df:fc:cd:76:d4:dc:
                    74:81:22:fa:9d:ee:d1:83:0b:2f:23:91:cd:8a:7c:
                    13:58:0b:88:e5:1b:b2:2d:f6:a4:b1:d0:6c:1c:a0:
                    03:c6:d0:e5:29:11:30:08:0a:1b:d8:71:41:e7:61:
                    5a:3e:95:ba:d6:61:c8:11:59:27:48:1c:6e:db:f2:
                    f3:42:e6:4c:4b:0a:a7:f4:de:84:af:83:0b:72:51:
                    98:9e:33:f0:db:c0:2e:25:6b:1f:e6:5f:b9:88:a7:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E3:C8:EA:3A:45:C3:F3:C1:70:56:61:75:7F:87:36:C4:93:CE:E9
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2037383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:b5:51:45:f4:e3:c5:48:36:1b:9e:46:fa:85:25:67:41:
         4d:4e:ea:c8:5c:cb:a7:02:a4:59:eb:d4:1a:17:d2:e6:2b:70:
         3e:d4:10:ad:86:ca:41:27:7f:bc:15:36:37:c9:03:ec:ec:db:
         fc:df:77:bc:71:1b:d1:2f:08:09:58:df:46:90:c3:78:a0:68:
         60:ee:59:a0:f2:ab:34:55:4b:3f:5d:02:75:46:53:6b:44:b4:
         5f:ed:45:75:6b:09:67:9b:ce:39:d6:15:77:07:00:c5:83:27:
         f7:ed:97:16:90:51:54:0e:40:73:11:41:eb:29:ff:d3:e6:fc:
         09:2a:00:7b:f5:f3:68:8f:ae:34:49:cf:2e:97:43:83:0f:ab:
         18:74:3e:c5:9b:0c:2e:46:3a:4d:92:dd:a5:53:69:38:3d:68:
         91:2e:06:f6:0f:97:df:71:11:81:8f:63:b5:e1:17:a9:54:55:
         7f:2f:63:b1:b2:3f:11:22:0e:15:83:3e:f1:bf:e5:aa:71:cb:
         ac:b3:e3:a9:7d:b1:15:c9:57:69:2d:93:ee:c0:06:be:7a:0f:
         55:85:f3:df:56:2f:02:97:d1:46:34:01:0e:6c:89:ba:7d:9b:
         ea:2a:86:8a:6c:d3:bf:ef:d9:53:eb:4a:69:c2:38:9f:c7:6e:
         d3:94:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:56:07 2025 by rpki-client