Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa
File:                     3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa (raw, json)
Hash identifier:          hx94AdY3CtzubvZNKD4picqGwHZbaIQOZo4qSYJe0xA=
Subject key identifier:   38:16:FB:EC:89:62:34:B5:F6:5E:6F:0C:F8:CB:DA:D7:D5:6E:DC:49
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       4F868908A3ED34C3CE1E41281C4E2D4F58100048
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa
Signing time:             Thu 12 Mar 2026 08:34:34 +0000
ROA not before:           Thu 12 Mar 2026 08:29:34 +0000
ROA not after:            Thu 11 Mar 2027 08:34:34 +0000
asID:                     153383
IP address blocks:        104.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:86:89:08:a3:ed:34:c3:ce:1e:41:28:1c:4e:2d:4f:58:10:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Mar 12 08:29:34 2026 GMT
            Not After : Mar 11 08:34:34 2027 GMT
        Subject: CN=3816FBEC896234B5F65E6F0CF8CBDAD7D56EDC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:0d:cf:1f:6f:d7:57:7c:3a:38:a2:b9:0b:
                    13:ab:84:94:c6:93:51:9e:b3:39:5d:cb:d2:86:5d:
                    7c:7a:bd:16:7f:bd:4d:5d:a6:96:54:28:2c:e9:1f:
                    bd:09:22:48:c1:92:05:fc:c9:6b:ef:2d:cf:80:8f:
                    5a:f1:61:73:20:1a:70:6d:74:bf:2e:6d:c0:2d:f5:
                    be:bf:85:fb:77:31:9f:bf:d2:82:47:9a:7a:92:d2:
                    98:7a:41:63:f4:6b:30:49:dd:8e:aa:59:32:33:51:
                    90:79:df:d9:a1:ea:7a:cf:fd:c5:1e:19:c8:90:36:
                    c1:f6:72:b4:79:7d:e4:ad:df:56:d2:65:e7:3c:b0:
                    5f:1a:4b:4e:90:ba:c2:fd:0d:c4:fb:b8:df:d0:e3:
                    3c:a5:15:03:b0:12:95:f8:e0:29:07:1e:c0:a0:4f:
                    c6:06:e0:09:0d:dc:b8:c8:1f:d9:dc:3a:e6:ee:c1:
                    9a:07:c5:8c:1a:b4:e5:bf:6c:55:ec:9f:32:3c:ad:
                    3c:53:5b:f4:13:8a:05:ee:c5:83:e4:19:b5:02:ea:
                    6c:08:cc:f2:90:e1:7b:e2:81:41:56:88:3c:8a:15:
                    7f:95:ed:99:a2:4c:e0:7b:3e:e4:10:a0:27:26:3b:
                    63:5a:61:f8:ec:66:06:9f:41:37:8a:c5:64:51:36:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:16:FB:EC:89:62:34:B5:F6:5E:6F:0C:F8:CB:DA:D7:D5:6E:DC:49
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231382e302f32342d3234203d3e20313533333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:58:05:af:8e:e7:da:73:5b:64:7f:66:5a:a6:90:5c:e5:37:
         5b:cb:ab:04:79:cc:43:35:ae:03:86:7d:91:43:b0:1f:35:44:
         ad:f3:22:92:af:7c:93:df:1a:98:66:b0:ec:af:47:6c:26:dc:
         03:44:4f:a2:34:c5:c0:e5:57:9a:fc:11:84:00:90:82:7f:59:
         f1:ac:5c:80:d7:a1:b2:78:cf:ee:3a:56:46:93:8f:ba:d4:8f:
         65:e6:41:34:73:51:77:34:e0:e8:e9:75:a1:62:b0:74:de:9c:
         c4:81:89:d6:e2:8a:e6:a3:4c:f9:c2:47:cf:94:17:c3:f6:ac:
         44:e0:99:7e:4c:cc:ae:c2:c5:bd:c3:b9:b7:c4:89:b0:88:d1:
         2c:f4:25:5b:f2:d5:41:74:9d:2d:70:d7:56:ba:a1:7d:5c:00:
         91:14:0c:dd:1b:c2:1f:6f:fb:8d:5c:15:dd:42:d7:63:ec:b7:
         af:a2:9e:f6:5f:30:c8:57:57:95:d0:00:8d:6f:aa:f9:05:ad:
         bd:b1:80:62:2c:2c:b9:0e:18:3c:f9:7a:fd:f3:4b:66:26:c1:
         62:14:3e:84:0a:57:ee:16:d5:92:55:f2:70:36:32:b7:d2:d0:
         70:32:c0:21:fa:81:cb:6a:ed:be:8e:6d:ad:80:40:ba:3e:37:
         d1:0c:46:2e
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUT4aJCKPtNMPOHkEoHE4tT1gQAEgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdhOGVkZDlkNDk1Y2NlNDYyN2I1Zjk0NDUyZGZiYWNl
NjU0OWI5ZjY0ZDRiY2ZjYmQwHhcNMjYwMzEyMDgyOTM0WhcNMjcwMzExMDgzNDM0
WjAzMTEwLwYDVQQDEygzODE2RkJFQzg5NjIzNEI1RjY1RTZGMENGOENCREFEN0Q1
NkVEQzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGINzx9v11d8
OjiiuQsTq4SUxpNRnrM5XcvShl18er0Wf71NXaaWVCgs6R+9CSJIwZIF/Mlr7y3P
gI9a8WFzIBpwbXS/Lm3ALfW+v4X7dzGfv9KCR5p6ktKYekFj9GswSd2OqlkyM1GQ
ed/Zoep6z/3FHhnIkDbB9nK0eX3krd9W0mXnPLBfGktOkLrC/Q3E+7jf0OM8pRUD
sBKV+OApBx7AoE/GBuAJDdy4yB/Z3Drm7sGaB8WMGrTlv2xV7J8yPK08U1v0E4oF
7sWD5Bm1AupsCMzykOF74oFBVog8ihV/le2Zokzgez7kEKAnJjtjWmH47GYGn0E3
isVkUTah2wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDgW++yJYjS19l5vDPjL2tfV
btxJMB8GA1UdIwQYMBaAFEAjs/cyIhklQMzcMWcchQZjMd2iMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzMzODMwMzQ2MTkxMjQxY2ViNjkyOWM0ZjY5MTJlZjkxLzAv
NDAyM0IzRjczMjIyMTkyNTQwQ0NEQzMxNjcxQzg1MDY2MzMxRERBMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2VkY2ZlOGQzLTZhZjktNGQ2MC04ZTk2LWY2ZGZiNDU1MzYxYy9lN2E4
ZWRkOWQ0OTVjY2U0NjI3YjVmOTQ0NTJkZmJhY2U2NTQ5YjlmNjRkNGJjZmNiZC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8zMzgzMDM0NjE5MTI0MWNlYjY5Mjlj
NGY2OTEyZWY5MS8wLzMxMzAzNDJlMzEzNDM1MmUzMjMxMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzMzMzM4MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABokdowDQYJKoZIhvcN
AQELBQADggEBABBYBa+O59pzW2R/ZlqmkFzlN1vLqwR5zEM1rgOGfZFDsB81RK3z
IpKvfJPfGphmsOyvR2wm3ANET6I0xcDlV5r8EYQAkIJ/WfGsXIDXobJ4z+46VkaT
j7rUj2XmQTRzUXc04OjpdaFisHTenMSBidbiiuajTPnCR8+UF8P2rETgmX5MzK7C
xb3DubfEibCI0Sz0JVvy1UF0nS1w11a6oX1cAJEUDN0bwh9v+41cFd1C12Pst6+i
nvZfMMhXV5XQAI1vqvkFrb2xgGIsLLkOGDz5ev3zS2YmwWIUPoQKV+4W1ZJV8nA2
MrfS0HAywCH6gctq7b6Oba2AQLo+N9EMRi4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:42:45 2026 by rpki-client