Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e20323132343737.roa
File:                     3130342e3134352e3230382e302f32342d3234203d3e20323132343737.roa (raw, json)
Hash identifier:          bORJpN2CUzhKBbMJs90aYU3hTsKjzm437FxQMRPpJCQ=
Subject key identifier:   51:8E:9C:5C:3A:8E:67:17:45:F2:ED:23:F5:02:DD:21:88:03:C3:D9
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       114E7D0D2F2440879C280712805DF2D84E26FB1C
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e20323132343737.roa
Signing time:             Sat 05 Sep 2026 20:50:23 +0000
ROA not before:           Sat 05 Sep 2026 20:45:23 +0000
ROA not after:            Sat 04 Sep 2027 20:50:23 +0000
asID:                     212477
IP address blocks:        104.145.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 03:52:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4e:7d:0d:2f:24:40:87:9c:28:07:12:80:5d:f2:d8:4e:26:fb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Sep  5 20:45:23 2026 GMT
            Not After : Sep  4 20:50:23 2027 GMT
        Subject: CN=518E9C5C3A8E671745F2ED23F502DD218803C3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:39:99:2d:25:41:1f:77:4a:54:ef:c9:b0:53:
                    77:d2:b8:2b:76:8e:73:f1:f2:71:0b:de:73:de:8f:
                    33:1f:56:a3:45:5c:d2:8e:95:1f:55:2a:ba:30:73:
                    b4:79:db:1b:94:a9:d9:8e:b8:10:78:66:e3:14:f7:
                    c3:1c:e1:9c:09:67:8f:90:57:43:78:a8:ed:59:7e:
                    c1:79:a3:03:74:19:36:c8:e4:73:df:b6:3e:9f:3e:
                    af:ce:e4:4e:af:0e:dd:37:f2:ac:62:69:bc:0b:8b:
                    1b:fb:dd:a5:e8:65:e0:e6:37:49:2b:7f:97:cb:ef:
                    ef:a4:f6:1b:b7:db:b4:68:b7:1b:c5:b4:bc:ad:fe:
                    75:2e:19:6a:fe:da:65:f5:4b:78:87:63:17:79:ec:
                    8e:be:0f:02:ae:e0:c7:f4:3d:00:c4:f4:30:a4:e4:
                    75:ea:4f:31:14:bb:54:bc:15:8e:aa:77:32:dd:86:
                    6b:7d:4e:13:70:2f:29:5b:cc:a7:b5:d0:6d:05:d3:
                    39:27:c8:3c:f0:42:20:f5:78:d3:f8:57:4f:d6:cd:
                    09:c5:d6:d8:02:c9:1e:f9:f0:f5:28:3d:32:a6:0f:
                    ae:47:de:0d:fc:75:98:56:08:64:51:63:90:57:bd:
                    25:91:dc:97:96:64:a3:e2:3c:1d:b4:b3:7f:f5:10:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8E:9C:5C:3A:8E:67:17:45:F2:ED:23:F5:02:DD:21:88:03:C3:D9
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e20323132343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:0c:4d:2f:39:52:f0:55:22:83:9a:c8:39:77:78:85:e5:
         68:71:a5:d6:34:a4:d9:0e:08:85:69:8a:42:46:5e:16:e2:21:
         74:85:c5:ed:da:40:3a:8b:88:31:c0:fa:b3:6c:3c:bb:4c:d8:
         58:3b:fa:33:df:ed:a0:d0:53:f5:56:09:0d:a1:30:61:b9:24:
         fb:03:fc:b1:25:7d:18:1e:dc:51:e4:c2:bc:f5:f2:e3:ec:b3:
         d9:94:ad:19:ed:36:82:02:c5:b1:d0:f9:49:ca:26:8c:b4:ff:
         93:c4:eb:51:f6:58:09:10:08:7f:81:66:15:23:89:a0:fa:5e:
         c2:b4:37:01:a6:ba:86:86:51:1a:f4:c7:79:95:b2:50:bb:1d:
         b9:a8:7b:c8:b3:70:7e:bf:8c:14:85:49:d9:ba:70:72:42:16:
         8e:f0:94:41:dc:e4:6a:dd:fa:10:64:40:e9:3f:80:33:70:9c:
         e9:c0:66:f2:f0:75:af:94:a3:d8:7f:c6:e5:19:42:74:9d:45:
         9e:15:a1:ef:e8:f7:3a:0d:26:44:dd:e4:de:01:0e:02:09:6f:
         88:a9:3d:62:2c:70:fc:cd:4a:93:f3:27:9b:07:3d:40:5f:16:
         85:d4:aa:17:cd:49:12:88:69:8f:67:3d:d1:4f:18:2b:fd:e5:
         d5:7d:2d:be
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUEU59DS8kQIecKAcSgF3y2E4m+xwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdhOGVkZDlkNDk1Y2NlNDYyN2I1Zjk0NDUyZGZiYWNl
NjU0OWI5ZjY0ZDRiY2ZjYmQwHhcNMjYwOTA1MjA0NTIzWhcNMjcwOTA0MjA1MDIz
WjAzMTEwLwYDVQQDEyg1MThFOUM1QzNBOEU2NzE3NDVGMkVEMjNGNTAyREQyMTg4
MDNDM0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTmZLSVBH3dK
VO/JsFN30rgrdo5z8fJxC95z3o8zH1ajRVzSjpUfVSq6MHO0edsblKnZjrgQeGbj
FPfDHOGcCWePkFdDeKjtWX7BeaMDdBk2yORz37Y+nz6vzuROrw7dN/KsYmm8C4sb
+92l6GXg5jdJK3+Xy+/vpPYbt9u0aLcbxbS8rf51Lhlq/tpl9Ut4h2MXeeyOvg8C
ruDH9D0AxPQwpOR16k8xFLtUvBWOqncy3YZrfU4TcC8pW8yntdBtBdM5J8g88EIg
9XjT+FdP1s0JxdbYAske+fD1KD0ypg+uR94N/HWYVghkUWOQV70lkdyXlmSj4jwd
tLN/9RDRgwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFFGOnFw6jmcXRfLtI/UC3SGI
A8PZMB8GA1UdIwQYMBaAFEAjs/cyIhklQMzcMWcchQZjMd2iMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzMzODMwMzQ2MTkxMjQxY2ViNjkyOWM0ZjY5MTJlZjkxLzAv
NDAyM0IzRjczMjIyMTkyNTQwQ0NEQzMxNjcxQzg1MDY2MzMxRERBMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2VkY2ZlOGQzLTZhZjktNGQ2MC04ZTk2LWY2ZGZiNDU1MzYxYy9lN2E4
ZWRkOWQ0OTVjY2U0NjI3YjVmOTQ0NTJkZmJhY2U2NTQ5YjlmNjRkNGJjZmNiZC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8zMzgzMDM0NjE5MTI0MWNlYjY5Mjlj
NGY2OTEyZWY5MS8wLzMxMzAzNDJlMzEzNDM1MmUzMjMwMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzIzNDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABokdAwDQYJKoZIhvcN
AQELBQADggEBAG/MDE0vOVLwVSKDmsg5d3iF5WhxpdY0pNkOCIVpikJGXhbiIXSF
xe3aQDqLiDHA+rNsPLtM2Fg7+jPf7aDQU/VWCQ2hMGG5JPsD/LElfRge3FHkwrz1
8uPss9mUrRntNoICxbHQ+UnKJoy0/5PE61H2WAkQCH+BZhUjiaD6XsK0NwGmuoaG
URr0x3mVslC7Hbmoe8izcH6/jBSFSdm6cHJCFo7wlEHc5Grd+hBkQOk/gDNwnOnA
ZvLwda+Uo9h/xuUZQnSdRZ4Voe/o9zoNJkTd5N4BDgIJb4ipPWIscPzNSpPzJ5sH
PUBfFoXUqhfNSRKIaY9nPdFPGCv95dV9Lb4=
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:36:23 2026 by rpki-client