Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          1dEXyo/BDVUmSumDgkjiRdRAjK7wg1e16jwMUnZ1LfA=
Subject key identifier:   C9:32:E4:08:CA:08:C4:AA:4C:75:AC:B6:C1:73:41:1A:E3:0D:8F:57
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       7068FC1DA0502810F5C9D20D3623DB617A808771
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 04 Nov 2025 19:30:39 +0000
ROA not before:           Tue 04 Nov 2025 19:25:39 +0000
ROA not after:            Tue 03 Nov 2026 19:30:39 +0000
asID:                     14618
IP address blocks:        104.254.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:68:fc:1d:a0:50:28:10:f5:c9:d2:0d:36:23:db:61:7a:80:87:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Nov  4 19:25:39 2025 GMT
            Not After : Nov  3 19:30:39 2026 GMT
        Subject: CN=C932E408CA08C4AA4C75ACB6C173411AE30D8F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c1:5b:30:e1:e5:16:f8:35:95:53:33:81:42:
                    88:49:d2:a0:69:ed:7d:9b:13:38:f6:c4:09:00:d9:
                    2a:8d:2a:95:29:14:a7:e9:54:ac:1c:2e:5b:42:f7:
                    8b:e7:24:51:b3:51:a2:d1:19:b1:3a:40:59:fc:68:
                    29:b1:5a:d1:49:ef:67:0c:87:9f:0b:b8:1a:01:12:
                    34:74:66:45:1f:17:0b:47:8f:33:73:a0:09:aa:bf:
                    08:57:10:72:a6:7a:6a:43:a1:ae:0a:31:03:0d:7a:
                    36:80:68:52:4d:2e:3b:7c:18:62:cf:4c:4f:24:4e:
                    4f:a9:f4:47:ef:f6:8c:ab:f1:26:ca:f7:43:d8:b9:
                    9f:85:4f:8d:62:00:38:fd:12:e0:cf:84:74:48:b0:
                    ae:5f:df:a1:85:b1:bc:2c:b2:93:4d:af:42:9a:26:
                    c5:59:2f:69:fc:a9:fa:4c:56:87:a5:44:de:f3:20:
                    7e:1a:67:94:3c:51:c9:39:4d:10:77:98:ba:df:8f:
                    63:96:33:42:47:21:a9:30:74:1e:db:8b:71:58:a9:
                    33:77:a3:d6:78:7c:f3:34:9e:2d:21:84:cd:2c:89:
                    f1:cd:c3:f8:b3:c3:84:7e:47:fa:40:a4:d3:9f:5a:
                    42:f9:4a:c7:d8:54:16:66:ee:ec:1f:83:02:da:f7:
                    07:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:32:E4:08:CA:08:C4:AA:4C:75:AC:B6:C1:73:41:1A:E3:0D:8F:57
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:5d:f2:bb:78:31:34:5d:0f:f0:cb:ee:6f:98:6b:e6:d2:7b:
         6b:40:3a:8e:aa:d8:78:f3:34:40:be:ca:50:7a:ff:86:f5:0f:
         4f:29:a6:f3:2f:2f:ce:5d:40:a3:7b:ff:7e:6a:0e:31:ed:0c:
         e6:fc:98:3b:30:d9:f1:89:1e:40:6d:47:66:21:2e:89:25:ac:
         40:37:b0:56:2c:f1:24:f9:98:c2:8e:1e:8e:ce:70:52:d3:57:
         1f:58:48:9e:34:83:5c:45:be:82:21:93:96:46:4f:36:63:18:
         a9:8f:dc:1e:c6:22:e1:04:12:db:7b:fb:66:ee:8b:76:38:02:
         36:90:da:3a:10:84:f3:b3:5c:a8:df:55:a2:7d:f8:4d:e3:84:
         a8:e4:ce:32:42:09:93:3b:a1:27:2a:7f:bc:b1:76:9e:5b:3b:
         99:e7:f6:92:3f:b5:74:73:68:77:5f:c1:82:87:ea:27:5a:f9:
         6f:a2:d9:76:50:a9:4c:c5:88:ca:e7:2e:46:65:1b:94:02:e8:
         f7:1e:ff:46:13:d3:93:51:b7:1a:99:80:03:0d:63:b7:86:9a:
         e7:4b:99:c9:98:c3:8c:49:67:57:dd:1b:cd:8b:d4:7e:f4:f6:
         9a:91:51:26:c8:0f:a8:27:5b:2d:99:c8:9f:f0:61:73:85:fd:
         b6:7e:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:49:18 2025 by rpki-client