Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3230392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          WkRQgk5ZxPzFFC8KYl0VXjvRvt7fWS3cp+DI12g49n4=
Subject key identifier:   A6:A0:32:82:D9:98:AA:3D:B8:90:F0:47:69:2B:AC:DC:A3:01:73:11
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       380465F0637780815F22DF896FB43A1D946DD5FE
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 20 Jun 2025 00:02:40 +0000
ROA not before:           Thu 19 Jun 2025 23:57:40 +0000
ROA not after:            Fri 19 Jun 2026 00:02:40 +0000
asID:                     834
IP address blocks:        104.254.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:04:65:f0:63:77:80:81:5f:22:df:89:6f:b4:3a:1d:94:6d:d5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Jun 19 23:57:40 2025 GMT
            Not After : Jun 19 00:02:40 2026 GMT
        Subject: CN=A6A03282D998AA3DB890F047692BACDCA3017311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:fa:8d:7b:c2:9a:84:ea:45:4d:b5:94:61:
                    33:4b:77:2f:b6:62:fc:b0:5d:9b:ef:32:7f:83:bf:
                    d3:96:71:a7:4f:c6:8a:19:47:bb:7a:f0:20:a2:5b:
                    3d:18:1e:01:76:a1:31:d9:f7:9e:7b:24:9f:3a:78:
                    08:8a:97:83:96:18:9e:91:4f:5d:b0:d9:9d:09:d5:
                    66:7c:0a:4f:e0:5d:a2:5b:73:89:fc:9b:72:a9:08:
                    33:e1:e5:cf:1b:5b:7c:f7:c5:86:c4:5a:7a:5b:76:
                    98:97:09:5f:0e:5d:33:cb:88:5b:31:c3:0c:5c:8b:
                    1e:69:4a:50:a8:b0:ec:a2:19:5b:bd:91:ab:87:b6:
                    98:d9:92:fd:0d:58:9a:05:d4:24:f7:79:d2:ca:cd:
                    8f:b4:a4:f4:9a:fc:74:b7:ec:0c:e2:f4:27:7a:99:
                    70:8b:01:a7:9c:b8:be:09:45:d9:7c:24:96:58:81:
                    65:67:e9:26:7f:50:68:1b:dd:9a:84:83:55:78:3a:
                    77:82:0e:26:0a:46:e0:60:db:3a:3d:a5:02:c2:0d:
                    26:9a:7d:a6:f3:f3:ed:5b:7f:83:89:67:a9:96:34:
                    d0:bd:1c:ac:86:41:7c:86:8e:dd:6a:3d:7a:72:95:
                    11:e3:bf:c5:f3:92:e9:bf:4e:bc:06:8e:f6:51:21:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:32:82:D9:98:AA:3D:B8:90:F0:47:69:2B:AC:DC:A3:01:73:11
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:95:55:5c:9d:24:a0:bf:db:4d:68:0c:4e:05:65:e7:9b:63:
         c2:8c:dd:0f:d3:ca:6e:6f:73:37:b6:5f:33:86:ad:0b:a3:3f:
         74:34:39:3f:11:a4:69:9f:81:e3:2e:f4:23:f4:23:bb:b5:f7:
         2b:58:18:f5:5e:fb:be:1f:1e:f9:39:f4:ce:e1:7d:64:24:9a:
         8d:35:ee:ab:bf:98:ab:e1:f2:16:0a:7b:c0:86:d1:8e:65:db:
         34:9e:cd:bc:71:5b:a5:4b:3f:87:67:ca:5a:51:b3:74:44:1d:
         83:cb:8f:36:88:09:d0:59:30:b2:d0:eb:b6:82:4c:4f:20:6e:
         69:5c:22:e5:d9:1b:ba:36:61:cd:f4:c9:cc:3d:11:d0:79:ed:
         c4:12:09:63:6a:80:48:ad:07:2d:e8:0a:49:e9:9c:30:36:2d:
         a3:a8:72:0a:9e:c0:d0:07:d7:6c:38:06:35:e9:1e:60:45:be:
         46:05:ef:01:72:41:42:55:45:03:cd:12:2d:7b:c7:d9:44:30:
         97:a2:3e:56:fc:ca:02:69:1c:17:25:5f:00:67:54:eb:cb:28:
         5b:66:3b:69:19:5f:22:c4:f3:72:13:99:f5:a0:90:60:56:8d:
         a5:75:87:d2:e2:fa:9a:cf:1f:98:1e:ca:b9:87:cf:81:89:47:
         ab:f6:3f:0a
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUOARl8GN3gIFfIt+Jb7Q6HZRt1f4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWFjZTI4MGNlZmFjOWY1ZmFmNzRmMGUxMTQ3YTRhZjUy
OTkwNjJmNzRjZTA1MjFiNjIwHhcNMjUwNjE5MjM1NzQwWhcNMjYwNjE5MDAwMjQw
WjAzMTEwLwYDVQQDEyhBNkEwMzI4MkQ5OThBQTNEQjg5MEYwNDc2OTJCQUNEQ0Ez
MDE3MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrT6jXvCmoTq
RU21lGEzS3cvtmL8sF2b7zJ/g7/TlnGnT8aKGUe7evAgols9GB4BdqEx2feeeySf
OngIipeDlhiekU9dsNmdCdVmfApP4F2iW3OJ/JtyqQgz4eXPG1t898WGxFp6W3aY
lwlfDl0zy4hbMcMMXIseaUpQqLDsohlbvZGrh7aY2ZL9DViaBdQk93nSys2PtKT0
mvx0t+wM4vQneplwiwGnnLi+CUXZfCSWWIFlZ+kmf1BoG92ahINVeDp3gg4mCkbg
YNs6PaUCwg0mmn2m8/PtW3+DiWepljTQvRyshkF8ho7daj16cpUR47/F85Lpv068
Bo72USG/AQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKagMoLZmKo9uJDwR2krrNyj
AXMRMB8GA1UdIwQYMBaAFKVf+gNccwyHmh7yY3TjYAJNbR8YMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5Njg5NzJlMjE2ZGU3LzAv
QTU1RkZBMDM1QzczMEM4NzlBMUVGMjYzNzRFMzYwMDI0RDZEMUYxOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzlhNjliOGNlLTI0ZGEtNDFiMy1hMDhlLTQ4ZDY0Yzk2NzM2MC9lYWNl
MjgwY2VmYWM5ZjVmYWY3NGYwZTExNDdhNGFmNTI5OTA2MmY3NGNlMDUyMWI2Mi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTY4
OTcyZTIxNmRlNy8wLzMxMzAzNDJlMzIzNTM0MmUzMjMwMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo/tEwDQYJKoZIhvcNAQELBQAD
ggEBAAWVVVydJKC/201oDE4FZeebY8KM3Q/Tym5vcze2XzOGrQujP3Q0OT8RpGmf
geMu9CP0I7u19ytYGPVe+74fHvk59M7hfWQkmo017qu/mKvh8hYKe8CG0Y5l2zSe
zbxxW6VLP4dnylpRs3REHYPLjzaICdBZMLLQ67aCTE8gbmlcIuXZG7o2Yc30ycw9
EdB57cQSCWNqgEitBy3oCknpnDA2LaOocgqewNAH12w4BjXpHmBFvkYF7wFyQUJV
RQPNEi17x9lEMJeiPlb8ygJpHBclXwBnVOvLKFtmO2kZXyLE83ITmfWgkGBWjaV1
h9Li+prPH5geyrmHz4GJR6v2Pwo=
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:30 2025 by rpki-client