Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3234203d3e20323132343737.roa
File:                     3230342e31302e31382e302f32332d3234203d3e20323132343737.roa (raw, json)
Hash identifier:          D2EzBZrfFX2//R9khN64HW8+nAfRjwT1aNOIZ3LIEmw=
Subject key identifier:   DF:2A:AC:E3:A6:9C:E2:8E:2F:82:F3:96:D1:16:C8:A4:9D:E7:9C:30
Certificate issuer:       /CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
Certificate serial:       729498E4B4EEC9A46C352AF60F93D8E405DCA43E
Authority key identifier: 3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3234203d3e20323132343737.roa
Signing time:             Thu 10 Jul 2025 16:29:44 +0000
ROA not before:           Thu 10 Jul 2025 16:24:44 +0000
ROA not after:            Thu 09 Jul 2026 16:29:44 +0000
asID:                     212477
IP address blocks:        204.10.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/d2ff74f3-d413-4ff6-822f-f26b277589fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 20:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:94:98:e4:b4:ee:c9:a4:6c:35:2a:f6:0f:93:d8:e4:05:dc:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8
        Validity
            Not Before: Jul 10 16:24:44 2025 GMT
            Not After : Jul  9 16:29:44 2026 GMT
        Subject: CN=DF2AACE3A69CE28E2F82F396D116C8A49DE79C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:13:2f:d3:52:ab:73:c4:10:df:3b:1f:03:
                    06:63:36:44:df:ef:f7:b2:76:5e:8c:d3:69:01:c8:
                    be:ac:14:03:21:ee:e0:f9:74:06:d9:a3:5f:8b:d9:
                    2c:98:41:23:38:78:a5:60:3b:e2:5b:a7:ab:b0:c6:
                    a4:c9:6f:59:17:72:6c:62:18:92:30:cc:20:e8:19:
                    b2:0c:1c:8f:58:92:24:53:26:36:52:00:bc:48:ef:
                    7e:08:6a:65:0e:f5:b0:16:08:3a:96:69:8d:49:7e:
                    62:66:d9:c3:90:10:dc:b3:7f:3e:b7:b1:ee:c5:b0:
                    95:83:29:3a:d2:56:d6:dc:53:fc:64:92:3c:64:b9:
                    de:56:20:f7:cb:91:7a:cf:a0:b1:d7:ca:55:6a:c0:
                    7c:33:47:69:d4:6d:21:ca:33:e7:96:5e:54:2e:52:
                    b1:e1:db:a2:37:db:c4:06:69:40:fa:10:dc:c5:58:
                    aa:f4:1f:03:df:7f:a1:68:2e:ec:2c:ce:2a:83:03:
                    f4:db:6a:b7:8b:97:64:69:49:2e:a8:d1:58:8a:40:
                    14:22:b2:1a:41:1b:20:27:34:cc:f4:34:3d:69:b9:
                    f3:a0:8e:a2:ed:77:a1:73:6f:87:26:35:d6:f2:71:
                    2f:a4:e4:06:7b:ab:54:f7:c0:ed:b9:49:e0:fa:d2:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:2A:AC:E3:A6:9C:E2:8E:2F:82:F3:96:D1:16:C8:A4:9D:E7:9C:30
            X509v3 Authority Key Identifier:
                keyid:3A:50:8A:E4:C1:CB:8D:35:E5:67:A6:26:66:69:7F:B6:9A:BC:77:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3A508AE4C1CB8D35E567A62666697FB69ABC779C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d2ff74f3-d413-4ff6-822f-f26b277589fd/c551ec8abc7ab1fd6a4b57d65f377e645c0ed04212769cf2e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa0189058fde531d9b/0/3230342e31302e31382e302f32332d3234203d3e20323132343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:b6:82:c4:a2:44:a9:24:c3:1a:75:fc:f7:82:95:62:9f:
         a0:8a:b5:7b:cb:90:f1:f9:55:be:a7:60:49:a3:a5:e6:13:61:
         93:15:d7:c7:2a:0d:5b:88:cb:e1:a9:84:79:56:5b:59:c4:f8:
         17:b2:ce:14:a3:da:cd:f8:b9:b2:11:40:5c:42:d8:0e:d8:d6:
         41:74:e7:ee:b5:07:45:90:21:c7:bf:20:b5:17:95:62:af:47:
         39:5a:b1:fc:4e:dd:19:28:67:82:4e:16:d1:dc:f3:9c:b8:6b:
         32:9a:f8:94:1e:aa:dd:7a:25:6c:b9:8a:96:63:73:9b:6b:e8:
         da:81:58:8d:13:f8:d7:95:5e:db:fb:a6:90:d0:94:87:9e:ad:
         4d:e5:c5:a0:90:61:b4:82:aa:6a:de:10:57:06:b0:38:44:f7:
         ca:6a:b3:9c:c2:a2:80:cf:d5:97:c5:25:e9:cd:f4:73:83:0e:
         66:75:88:73:ca:aa:96:8d:53:81:d4:c0:81:c6:60:40:1f:42:
         16:0d:54:df:6d:83:6f:31:e2:5f:86:90:c8:73:0b:b0:ea:a6:
         11:e1:78:b8:4d:44:ef:0e:a6:f6:ec:70:3f:a4:f4:77:a9:c0:
         29:8c:8b:3b:1d:2f:00:52:7e:29:a8:b4:3e:0c:f4:20:7b:64:
         fe:49:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:18 2025 by rpki-client