Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          +2OaCBfp76mZLzOQYQ62Sx1l5dBU3HJgppE51v56yq4=
Subject key identifier:   7F:DA:81:B0:9A:95:EC:0D:50:36:25:5C:0B:D3:65:49:92:81:8E:91
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       0D9F3CC71A8120933187DD26CB4D41BE5E4D75F9
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 04 Nov 2025 19:30:39 +0000
ROA not before:           Tue 04 Nov 2025 19:25:39 +0000
ROA not after:            Tue 03 Nov 2026 19:30:39 +0000
asID:                     16509
IP address blocks:        104.254.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 20:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:3c:c7:1a:81:20:93:31:87:dd:26:cb:4d:41:be:5e:4d:75:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Nov  4 19:25:39 2025 GMT
            Not After : Nov  3 19:30:39 2026 GMT
        Subject: CN=7FDA81B09A95EC0D5036255C0BD3654992818E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ba:f5:e0:df:7a:b0:61:66:bc:3e:c8:17:68:
                    e4:32:65:7c:ae:c2:28:1b:35:5f:c9:ff:e3:89:1a:
                    62:41:d8:5c:94:1b:01:6d:51:6c:f6:bf:91:13:11:
                    d9:51:6e:68:39:66:45:e4:93:65:0b:cd:89:83:f0:
                    e3:dd:33:9d:70:e5:3a:95:11:69:ac:20:40:6d:1b:
                    45:c3:f9:59:12:0a:0e:5c:00:9f:2d:8d:4c:53:fb:
                    19:74:4a:f2:18:22:27:bb:5f:41:61:39:40:5d:34:
                    72:84:a4:a0:e6:28:ae:de:1f:93:3b:05:4b:c3:68:
                    7b:d7:71:6a:bd:3f:37:d4:42:66:50:a7:38:2d:a7:
                    dc:c6:0f:6b:d5:cb:ea:53:46:d8:17:78:d1:8f:72:
                    4e:0d:23:4b:ca:f4:ae:a5:87:21:42:c6:d9:fb:24:
                    63:e6:15:2b:97:71:13:08:17:bf:f5:83:3a:77:54:
                    0c:26:b2:c4:47:22:ea:bb:71:e4:03:77:34:16:aa:
                    3f:fd:7f:f4:31:51:bf:dd:36:8d:5f:a0:8d:06:39:
                    01:17:fe:2e:01:2c:f2:0c:88:6d:5a:72:68:36:8f:
                    b3:e0:cd:6f:3f:8a:e1:df:15:95:73:e2:00:60:6e:
                    d9:fa:a6:54:74:a2:61:48:8f:86:fe:f1:8a:b2:98:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:81:B0:9A:95:EC:0D:50:36:25:5C:0B:D3:65:49:92:81:8E:91
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:43:32:49:be:6e:1d:0e:26:1f:5c:ad:a4:64:ec:f7:d9:c8:
         77:a2:6c:b2:a2:f4:c1:50:b3:50:84:63:71:35:82:da:1d:4c:
         d8:ed:46:a3:0e:94:e7:87:e1:34:ed:ee:3c:67:21:49:ab:e7:
         79:9f:88:25:13:25:f2:84:fc:96:9e:7c:43:a4:5f:b0:e3:9d:
         da:bf:ce:d7:ed:63:24:dc:4e:e7:08:cb:56:54:15:ce:de:69:
         28:ba:8b:2c:8e:ff:23:83:00:0d:cb:37:63:77:0c:7d:fb:3a:
         d6:9a:3f:64:fb:f5:8f:8d:cf:c2:c8:0c:84:1a:53:d6:08:83:
         14:8c:e7:79:55:23:fa:ef:90:b8:5a:82:e5:35:a6:69:a2:9e:
         c3:a5:68:4c:9f:79:23:8b:2d:e1:34:76:91:4e:af:2d:d0:dd:
         4e:6d:44:c6:37:c5:9c:a4:80:39:36:bb:8c:28:c4:b3:ae:d1:
         72:a8:bf:0a:41:05:17:87:9c:84:93:0f:99:c5:b2:77:37:99:
         cf:54:a7:8e:2c:d1:f8:dd:68:3e:02:ab:0d:da:f1:65:9b:45:
         e4:d3:80:95:2e:fe:e1:f3:50:cf:a0:7d:63:4c:e0:cd:5f:37:
         2d:95:5c:df:70:b1:ef:a4:b8:06:47:27:96:ea:ba:5b:2a:b2:
         3d:9f:89:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:33 2025 by rpki-client