Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          zbBYWEQdCBsShzBbMx8qDLT3VILPAtLzdoMSIIvUjZ8=
Subject key identifier:   F9:F8:C9:AD:C6:D9:C5:18:E5:9C:69:6E:EE:F3:87:74:9F:17:38:C7
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       465551FED75DD5B449BF0CAD5FE810EE5A3E5099
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa
Signing time:             Sat 01 Nov 2025 00:11:30 +0000
ROA not before:           Sat 01 Nov 2025 00:06:30 +0000
ROA not after:            Sat 31 Oct 2026 00:11:30 +0000
asID:                     834
IP address blocks:        104.254.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:55:51:fe:d7:5d:d5:b4:49:bf:0c:ad:5f:e8:10:ee:5a:3e:50:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Nov  1 00:06:30 2025 GMT
            Not After : Oct 31 00:11:30 2026 GMT
        Subject: CN=F9F8C9ADC6D9C518E59C696EEEF387749F1738C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c9:e0:3a:4c:82:56:24:0a:dd:28:5c:ac:03:
                    52:6a:fb:96:d2:f9:51:f7:73:b4:56:aa:f7:89:17:
                    ec:5b:f3:5e:58:78:d3:aa:3a:0d:b6:b0:72:a4:47:
                    1f:3c:0a:eb:85:ab:97:e2:a8:18:9a:f9:5a:14:30:
                    de:c8:98:4f:7b:d7:d0:02:72:ee:86:25:29:6e:32:
                    c6:b0:d0:de:51:6a:f1:58:c5:ff:23:4f:e3:94:ca:
                    4a:a9:0d:9b:81:d1:95:ec:60:de:3c:79:f6:12:29:
                    4e:a2:a8:94:e5:e1:31:b1:17:7b:a4:e1:1e:4b:13:
                    77:d3:19:be:5f:50:d8:90:c3:8a:79:c6:73:6c:80:
                    75:ea:e5:bd:a5:a3:5e:46:c5:1d:6e:83:03:e4:40:
                    36:e2:42:5d:cd:0c:c6:88:e8:2f:ec:b0:0f:b3:81:
                    a3:8f:22:ed:aa:29:88:e6:a8:68:f3:f3:69:b9:bb:
                    5a:a0:d0:93:29:4a:47:9b:03:d0:51:55:e3:12:c9:
                    87:22:f0:de:a4:c3:1e:58:48:8d:54:03:47:51:aa:
                    40:3c:f7:f2:82:2e:14:85:36:c7:73:27:50:86:09:
                    5d:9a:4c:0d:71:5a:dd:e9:62:34:bc:12:e1:cf:02:
                    f5:2d:a0:b9:d1:04:bd:48:39:c6:61:18:1f:00:ec:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:C9:AD:C6:D9:C5:18:E5:9C:69:6E:EE:F3:87:74:9F:17:38:C7
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c7:79:53:41:2d:70:69:f8:0b:52:be:39:ce:8a:47:8e:d9:
         dd:9c:ef:de:51:d5:a1:99:36:95:a7:81:38:64:ce:76:59:e2:
         1a:23:81:c2:8d:64:d6:54:29:4b:b6:dd:93:71:28:29:ee:5a:
         ea:1a:18:2d:08:7e:31:12:2e:ff:ec:db:f0:e8:82:0a:1c:da:
         04:46:90:78:64:c0:98:fe:d4:fc:13:b9:bf:79:4a:aa:73:a5:
         d5:a2:f8:6e:73:ea:cd:49:11:12:1b:e8:09:ea:cb:6f:4c:7b:
         b2:dc:c4:25:e4:0f:9f:0b:96:11:47:12:f0:04:ab:9f:a1:ca:
         71:6b:76:2e:fc:f4:12:db:80:b5:c3:26:11:2b:ed:2a:9c:fa:
         3f:98:57:42:65:6f:a3:f7:09:3c:e3:ff:d7:b8:5f:fa:e4:a9:
         2c:8f:b5:0e:c9:60:19:a2:1f:c7:11:bb:27:34:65:ef:14:40:
         b7:c8:1d:9d:94:64:87:95:9c:ff:25:88:7f:37:29:db:93:a5:
         fa:f7:1c:f0:75:79:03:2c:95:2c:f1:31:0c:7b:62:30:56:9f:
         2d:82:91:c6:08:65:3d:c5:66:74:d9:cb:ca:c5:3d:1e:a8:c8:
         21:d6:26:44:a2:00:09:fe:14:87:b2:f6:b3:5d:26:53:8a:43:
         e1:37:94:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:43:44 2025 by rpki-client