Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231312e302f32342d3234203d3e2039333034.roa
File:                     3130342e3134352e3231312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          Gc4NTsiGWfpzMBSOLPMADswPgMy4c6LA5wJzJJCqn0w=
Subject key identifier:   D5:E1:5D:0F:74:C5:AD:5E:4A:E8:11:F2:18:C9:DD:C5:B9:95:61:4D
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       65173DEDAE6F2133BE49BCFC603FFF432B316FC4
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231312e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 15 Aug 2025 07:52:33 +0000
ROA not before:           Fri 15 Aug 2025 07:47:33 +0000
ROA not after:            Fri 14 Aug 2026 07:52:33 +0000
asID:                     9304
IP address blocks:        104.145.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:17:3d:ed:ae:6f:21:33:be:49:bc:fc:60:3f:ff:43:2b:31:6f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Aug 15 07:47:33 2025 GMT
            Not After : Aug 14 07:52:33 2026 GMT
        Subject: CN=D5E15D0F74C5AD5E4AE811F218C9DDC5B995614D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:35:3d:67:82:db:88:df:68:0c:9b:c3:2a:06:
                    20:4c:c6:79:09:98:02:06:9b:35:16:d5:4a:9d:27:
                    85:5c:b7:2f:52:48:62:ec:45:68:1c:af:26:4d:16:
                    8d:dc:24:35:84:be:f6:07:2d:4a:ef:43:35:71:a2:
                    9f:81:0f:f9:19:a9:4f:95:f6:7e:cc:ef:8f:5d:77:
                    be:31:e8:21:8a:61:8b:a4:a5:21:8f:79:72:a9:60:
                    a2:cc:b1:c2:16:2c:7c:c8:da:b1:db:e4:8d:fd:a4:
                    e7:49:94:3e:21:42:5e:34:fb:83:28:af:d8:df:2f:
                    fb:80:6c:18:aa:2b:5f:e2:04:54:2a:47:ad:3e:91:
                    c1:7d:db:1d:6d:c4:84:58:cf:90:00:95:71:cd:93:
                    44:82:e7:9a:74:66:eb:c2:21:91:6d:8c:71:bb:33:
                    df:fb:1c:2c:63:d6:e7:56:e9:8b:fc:bc:83:7c:8d:
                    c2:84:87:8d:8d:24:c6:88:6e:3f:d6:47:2a:ec:bf:
                    08:f1:7a:07:de:96:8e:1f:41:a0:01:7b:21:ec:70:
                    f6:48:18:04:54:f1:e8:4b:b2:a2:a6:39:29:46:be:
                    31:5e:81:4d:e5:64:d9:84:59:27:c2:e4:63:e2:b3:
                    9b:11:f3:95:6e:09:91:3f:dd:5b:01:5d:73:ce:cb:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E1:5D:0F:74:C5:AD:5E:4A:E8:11:F2:18:C9:DD:C5:B9:95:61:4D
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231312e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:0e:a4:2e:56:0a:ab:1b:d4:aa:e1:d2:80:31:a9:bf:aa:
         40:d7:82:6d:c0:54:cc:fc:01:fa:35:6d:f3:55:16:14:57:39:
         11:00:34:ee:66:31:f3:c5:4b:08:99:b2:a1:a7:3f:ea:ca:0b:
         43:2a:c0:52:d3:ef:9c:49:f2:13:b7:f9:ad:91:a2:6c:4c:8b:
         17:e8:36:ab:7c:83:cd:ad:bf:a9:99:a3:06:7c:73:2a:44:57:
         8b:a8:8c:df:52:4f:4a:31:73:52:e8:a3:a7:31:bf:bd:c4:06:
         d8:ed:1d:ed:c3:ad:63:94:a2:3a:b1:d4:d1:75:b9:bc:11:39:
         fa:73:75:45:95:09:68:65:11:a1:66:1e:23:82:40:d1:94:53:
         cc:2f:74:e8:29:85:5f:8d:1d:38:fd:c1:f1:c9:08:c4:28:6a:
         4d:e9:f9:f1:0e:6c:a9:46:a8:42:c9:aa:02:07:9e:fd:4a:77:
         96:31:41:a4:b1:86:ea:d3:65:b3:87:cb:d3:6f:1b:21:cc:4e:
         35:6b:8a:dd:0a:f2:23:e5:ee:f9:4f:29:9d:6a:e2:53:4e:e1:
         ea:57:de:88:a0:7d:a9:62:22:fd:3f:48:15:b6:5d:ad:79:71:
         2e:4a:eb:f1:32:56:bd:b9:c9:b1:bd:7f:b5:58:46:5a:94:5e:
         40:10:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:03 2025 by rpki-client