Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2039333034.roa
File:                     34302e3232332e3234352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          V/Si/lfJuWdAI8xZEz6Ph3CsCCse9M9EaBSELMy6p6c=
Subject key identifier:   42:A7:8E:A5:B5:A7:AD:F0:5D:3F:22:7D:C1:6F:54:02:D6:F6:5A:BA
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2C476A8CB0CAC1C5987333547EBB3B279B567AC5
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2039333034.roa
Signing time:             Thu 12 Jun 2025 07:44:23 +0000
ROA not before:           Thu 12 Jun 2025 07:39:23 +0000
ROA not after:            Thu 11 Jun 2026 07:44:23 +0000
asID:                     9304
IP address blocks:        40.223.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:47:6a:8c:b0:ca:c1:c5:98:73:33:54:7e:bb:3b:27:9b:56:7a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 12 07:39:23 2025 GMT
            Not After : Jun 11 07:44:23 2026 GMT
        Subject: CN=42A78EA5B5A7ADF05D3F227DC16F5402D6F65ABA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:58:1c:2c:62:31:56:59:a1:04:45:0a:5f:79:
                    5b:78:c5:22:aa:fd:ad:69:91:69:a6:be:09:66:85:
                    02:06:5b:ef:41:68:5a:4c:06:fc:40:d5:34:14:83:
                    a4:9c:ef:53:d2:ac:cf:97:6e:e4:e0:63:1a:67:28:
                    81:c5:50:c7:43:fd:ee:76:6f:e7:50:b3:bc:3d:b8:
                    f9:be:9c:c5:80:d4:f4:f9:ef:0a:2c:42:50:1b:dd:
                    57:bc:22:94:59:65:a6:f9:e7:00:f9:22:40:91:ce:
                    c2:0f:81:f1:4a:47:7d:16:89:7c:4b:ad:05:fe:d8:
                    f2:0e:aa:68:15:fa:a3:91:0d:15:2f:40:10:22:f6:
                    d1:37:22:42:ca:24:c8:c7:c4:31:53:70:ff:8b:f6:
                    0b:b9:e8:71:69:ab:fc:38:f9:fb:71:31:9b:7a:78:
                    a5:e1:e2:07:5e:a0:89:47:cd:da:f3:8d:c4:c7:f3:
                    dc:55:9e:19:ff:ba:12:c5:30:52:3b:ba:a4:9f:14:
                    93:69:86:14:df:9f:78:d1:83:1f:c9:32:05:77:65:
                    5a:13:7b:07:c0:18:45:3b:6f:89:66:7f:0d:0f:c1:
                    19:51:93:4b:96:05:1c:56:78:3d:21:d7:64:68:d4:
                    44:a4:79:a3:dc:e7:ca:e8:53:af:5e:fd:3a:f7:64:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A7:8E:A5:B5:A7:AD:F0:5D:3F:22:7D:C1:6F:54:02:D6:F6:5A:BA
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3232332e3234352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.223.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:8b:5a:93:2e:9e:8f:19:52:7e:b6:02:5c:fd:eb:80:46:ee:
         d0:b9:fa:7b:8c:e7:7a:a6:c5:d6:29:68:76:27:41:42:9f:fe:
         66:bf:f1:73:65:48:f3:c6:6a:06:d7:0e:9a:e7:80:61:7c:4a:
         19:5d:0a:bf:c9:5d:f9:2a:57:91:98:01:6f:44:2f:d5:45:72:
         14:24:e2:0c:d4:c8:88:c9:3d:70:8a:7e:7c:32:f3:13:6b:77:
         8c:4d:5d:db:1b:89:e9:8d:6a:70:ec:04:7c:aa:ee:e9:87:62:
         23:68:81:ab:71:47:77:19:32:67:5b:f9:28:ea:81:39:f3:6c:
         6e:3a:2f:dd:9a:05:57:15:3b:81:92:1d:93:5b:89:56:88:f6:
         58:2c:44:86:8b:de:be:eb:36:5b:c6:41:29:3f:fc:4e:59:d7:
         98:f7:29:2b:e2:52:77:85:97:fb:5d:75:d7:5b:25:2c:9e:f3:
         9a:d8:d7:15:40:86:bd:00:d4:16:54:1d:e1:74:71:f7:46:14:
         4f:c2:cb:c9:96:cf:9b:bc:49:dd:61:52:6a:94:7e:0a:1c:2a:
         3d:15:72:f4:dc:46:bd:80:fe:bf:23:30:31:dd:b6:7a:08:62:
         91:72:c9:48:52:b9:ec:0f:a0:46:22:e7:9a:de:e1:a2:05:c6:
         d3:1d:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:23:02 2025 by rpki-client