Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e3138392e302f32342d3234203d3e203436323534.roa
File:                     3130342e3232362e3138392e302f32342d3234203d3e203436323534.roa (raw, json)
Hash identifier:          aToBYljCettXt64aRUsXVOpYSmzsEVDMsqwrq4ncqXE=
Subject key identifier:   CB:B3:54:68:9E:B0:BF:B6:11:3C:54:65:17:5A:82:B4:6C:AA:EF:71
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       083B5E4DEF059435F0577E6B10744E0089F9DFBD
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e3138392e302f32342d3234203d3e203436323534.roa
Signing time:             Thu 01 May 2025 19:07:26 +0000
ROA not before:           Thu 01 May 2025 19:02:26 +0000
ROA not after:            Thu 30 Apr 2026 19:07:26 +0000
asID:                     46254
IP address blocks:        104.226.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3b:5e:4d:ef:05:94:35:f0:57:7e:6b:10:74:4e:00:89:f9:df:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: May  1 19:02:26 2025 GMT
            Not After : Apr 30 19:07:26 2026 GMT
        Subject: CN=CBB354689EB0BFB6113C5465175A82B46CAAEF71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:a0:74:cb:e1:12:21:90:5a:43:5d:b1:9d:
                    9c:a8:ec:af:94:ed:2a:72:f4:c2:6c:ef:7c:b2:41:
                    17:a6:85:28:21:0a:83:fc:82:9c:79:ed:3b:46:67:
                    bf:be:f3:8f:ce:bf:71:fc:89:ec:12:cb:5f:db:d4:
                    a1:2c:0a:e2:23:9d:19:ff:49:e9:83:62:55:62:28:
                    99:83:94:31:61:82:41:fa:f3:3b:75:e1:2f:3a:12:
                    2b:ce:f2:82:e5:d5:5b:64:ca:f9:0a:91:c6:09:41:
                    f0:82:03:fd:13:29:9e:5d:6c:77:c8:56:f0:33:61:
                    ec:39:00:ec:e8:e6:3b:3c:72:4d:99:bf:11:4b:c9:
                    45:ee:86:72:38:4d:85:cb:b7:41:1e:20:fc:04:8a:
                    82:38:c9:b6:1e:72:a0:18:f9:81:9f:f1:d0:7f:1e:
                    d4:95:fd:61:eb:a7:ef:93:95:56:ea:be:00:17:24:
                    25:3f:14:65:0f:a1:a0:c0:55:96:f6:9a:d2:a4:31:
                    39:63:6b:e8:d1:26:2b:aa:ab:b1:dd:f2:e7:12:36:
                    44:ec:62:4e:60:25:36:2d:01:61:ff:53:33:1e:34:
                    f8:a8:cf:c1:0d:f5:97:b7:47:9f:80:e9:95:2d:ae:
                    fe:4f:95:29:0b:09:7d:f5:81:2a:60:96:7b:22:1e:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B3:54:68:9E:B0:BF:B6:11:3C:54:65:17:5A:82:B4:6C:AA:EF:71
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130342e3232362e3138392e302f32342d3234203d3e203436323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.226.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:b7:79:cd:3d:7a:5b:86:12:94:44:5a:b7:d7:21:41:a5:5b:
         86:1d:74:6d:49:d1:ab:c1:cb:40:bc:68:af:3c:82:36:3b:68:
         c6:50:c9:68:20:41:dc:24:07:cd:2a:4c:a9:c5:dd:4e:f6:9e:
         e5:4b:16:68:30:8e:12:a1:ef:98:00:35:48:be:51:06:1f:59:
         2b:69:c1:0c:db:87:c0:a1:92:19:67:03:57:eb:a2:68:29:ee:
         8d:6a:b5:3a:e0:dd:0c:f7:bb:1a:87:42:ca:59:5a:b7:ff:dd:
         92:d9:41:1b:87:37:f7:76:1b:56:bc:dd:7a:bb:b2:e2:ba:23:
         24:42:bc:b2:a1:75:6b:e2:2c:ad:ec:58:8d:81:51:68:1c:3f:
         d9:9b:59:9d:af:2d:3c:8e:e1:c4:08:3d:d5:5e:ff:d3:ad:f2:
         76:f7:7e:40:93:03:48:c5:ad:88:97:87:f9:2c:32:d1:84:57:
         1b:0e:4a:ca:b6:11:d4:9b:8b:27:8c:81:47:d9:4b:c1:14:08:
         8f:47:fb:46:ce:7b:0a:6a:39:d4:1a:62:a0:66:ef:f6:82:06:
         ee:68:1d:3d:29:9e:a9:12:c5:0c:b0:f3:f3:8b:66:69:d2:8e:
         c7:0f:63:fc:40:ae:ee:43:f2:4d:a0:87:b2:ab:6d:5f:01:96:
         0c:c5:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:00:59 2025 by rpki-client