Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e20383132.roa
File:                     34302e3232332e3234352e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          6H7gLfyj2+X93s+e7eXcyI2CYbIO91C/ozfX8RgRejQ=
Subject key identifier:   69:BD:91:57:98:A0:2A:D2:37:F4:66:94:6F:98:08:5F:9D:62:C0:35
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       3145463B95814307B7A0C8361AB3EEC3AE2C36AD
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e20383132.roa
Signing time:             Thu 12 Jun 2025 07:44:10 +0000
ROA not before:           Thu 12 Jun 2025 07:39:10 +0000
ROA not after:            Thu 11 Jun 2026 07:44:10 +0000
asID:                     812
IP address blocks:        40.223.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:45:46:3b:95:81:43:07:b7:a0:c8:36:1a:b3:ee:c3:ae:2c:36:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:39:10 2025 GMT
            Not After : Jun 11 07:44:10 2026 GMT
        Subject: CN=69BD915798A02AD237F466946F98085F9D62C035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:73:ee:a0:b6:54:a9:86:d2:df:3b:a9:4d:
                    52:33:4f:d7:2d:97:b8:24:1b:c2:dc:08:59:47:64:
                    a6:1b:fe:b0:c4:08:22:97:e1:5b:8b:7c:e5:ed:e9:
                    71:97:61:81:2e:18:58:75:7c:6d:5f:a3:8f:2a:db:
                    80:6c:ce:07:50:de:a5:95:fd:dc:2a:c6:75:31:ff:
                    96:c8:5a:9c:60:a3:d0:ac:49:24:3c:23:de:2e:e6:
                    95:28:44:a3:ba:fd:69:a5:67:7d:71:b0:21:79:78:
                    7a:22:d7:34:51:cf:93:a7:21:dc:74:23:7e:57:0f:
                    b4:8e:ee:31:b8:85:68:ef:42:5a:b2:b1:bf:a8:cf:
                    07:2c:28:5d:47:36:a1:a7:e6:bc:38:5a:02:b2:6d:
                    4b:18:11:3d:34:2d:64:36:0d:74:a7:c2:f4:b3:ad:
                    ff:7b:70:86:da:9e:3e:61:64:ec:06:ff:0b:74:44:
                    4f:64:a7:94:40:ea:a6:a9:9c:c2:ef:91:9c:f4:45:
                    42:12:ba:4d:ff:e3:cf:22:12:68:22:b0:25:da:6d:
                    91:f2:2e:3c:3c:22:50:18:93:6d:6d:a6:64:32:49:
                    ee:2f:23:91:22:7a:97:15:a9:3e:3e:7c:99:73:9a:
                    52:9b:0e:a0:fc:ba:53:9f:8a:32:f6:c9:98:63:67:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:91:57:98:A0:2A:D2:37:F4:66:94:6F:98:08:5F:9D:62:C0:35
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:3e:b2:75:30:f5:7f:26:3c:7d:2a:26:69:36:f7:55:e3:84:
         55:92:18:ba:f5:67:22:40:79:1d:2c:55:71:8b:68:60:01:4d:
         62:4c:f7:9f:35:0a:96:3d:5d:73:56:cd:69:f8:56:38:4d:30:
         cf:1d:55:39:4b:a0:be:89:07:51:6f:aa:68:5e:1a:a2:ff:1c:
         b9:05:f3:7c:a3:ba:fd:62:9b:c3:7c:11:3b:38:89:bf:55:e2:
         82:8e:7f:8f:0d:06:4b:23:1c:69:70:1e:90:f8:bd:22:d9:e4:
         3e:9a:14:ec:42:e4:e7:dd:66:7f:fd:88:a1:b4:6f:0d:9b:20:
         24:e6:aa:40:6b:e3:cd:02:8e:b9:bb:9c:53:0a:c7:aa:8f:a3:
         74:63:f5:e2:7a:b8:c5:c0:81:29:20:8e:ab:dc:dd:b0:2d:f5:
         24:92:ea:35:73:59:9d:2c:f9:10:fb:3d:00:59:a5:4d:b2:66:
         1d:62:50:b7:0e:73:82:9d:b5:2b:3f:fd:0b:53:44:af:5b:3b:
         8a:10:19:b0:73:67:a2:e0:e2:74:45:22:67:3e:c0:1d:cc:ca:
         94:f4:8b:6c:8b:a1:76:91:c8:69:ca:5f:cc:18:01:29:2b:16:
         0b:71:e3:95:8b:ce:42:74:bf:01:ff:65:6f:9c:2e:e0:9d:d9:
         67:21:6c:69
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUMUVGO5WBQwe3oMg2GrPuw64sNq0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjEyMDczOTEwWhcNMjYwNjExMDc0NDEw
WjAzMTEwLwYDVQQDEyg2OUJEOTE1Nzk4QTAyQUQyMzdGNDY2OTQ2Rjk4MDg1RjlE
NjJDMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRz7qC2VKmG
0t87qU1SM0/XLZe4JBvC3AhZR2SmG/6wxAgil+Fbi3zl7elxl2GBLhhYdXxtX6OP
KtuAbM4HUN6llf3cKsZ1Mf+WyFqcYKPQrEkkPCPeLuaVKESjuv1ppWd9cbAheXh6
Itc0Uc+TpyHcdCN+Vw+0ju4xuIVo70JasrG/qM8HLChdRzahp+a8OFoCsm1LGBE9
NC1kNg10p8L0s63/e3CG2p4+YWTsBv8LdERPZKeUQOqmqZzC75Gc9EVCErpN/+PP
IhJoIrAl2m2R8i48PCJQGJNtbaZkMknuLyORInqXFak+PnyZc5pSmw6g/LpTn4oy
9smYY2cwbQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGm9kVeYoCrSN/RmlG+YCF+d
YsA1MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1
M2RjNjQxMTlkLzUvMzQzMDJlMzIzMjMzMmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAo3/UwDQYJKoZIhvcNAQELBQADggEB
AL0+snUw9X8mPH0qJmk291XjhFWSGLr1ZyJAeR0sVXGLaGABTWJM9581CpY9XXNW
zWn4VjhNMM8dVTlLoL6JB1FvqmheGqL/HLkF83yjuv1im8N8ETs4ib9V4oKOf48N
BksjHGlwHpD4vSLZ5D6aFOxC5OfdZn/9iKG0bw2bICTmqkBr480Cjrm7nFMKx6qP
o3Rj9eJ6uMXAgSkgjqvc3bAt9SSS6jVzWZ0s+RD7PQBZpU2yZh1iULcOc4KdtSs/
/QtTRK9bO4oQGbBzZ6Lg4nRFImc+wB3MypT0i2yLoXaRyGnKX8wYASkrFgtx45WL
zkJ0vwH/ZW+cLuCd2WchbGk=
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:36:25 2025 by rpki-client