Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa
File:                     3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa (raw, json)
Hash identifier:          ltSFtY0b8oPmTLtRqAj64dbqXO0NIaVgjrqvkDb8lmo=
Subject key identifier:   DA:BB:29:DD:92:91:4B:F7:C0:4F:36:31:9D:AC:79:FB:83:45:F0:4C
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       27C97D2A81238E48B8EDBDE2930F4FEFA6219C1F
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa
Signing time:             Fri 17 Oct 2025 18:30:38 +0000
ROA not before:           Fri 17 Oct 2025 18:25:38 +0000
ROA not after:            Fri 16 Oct 2026 18:30:38 +0000
asID:                     21743
IP address blocks:        104.254.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c9:7d:2a:81:23:8e:48:b8:ed:bd:e2:93:0f:4f:ef:a6:21:9c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Oct 17 18:25:38 2025 GMT
            Not After : Oct 16 18:30:38 2026 GMT
        Subject: CN=DABB29DD92914BF7C04F36319DAC79FB8345F04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0a:72:71:6f:81:5e:db:8e:eb:b3:19:f9:a0:
                    d6:bb:53:84:a9:ee:b8:d0:eb:8f:ff:93:8d:3e:89:
                    e4:34:b4:2f:0b:29:99:91:97:3d:4e:9d:89:20:30:
                    9f:ea:c1:33:81:ad:ff:c0:9b:13:d2:ba:80:ea:1c:
                    59:37:20:f6:de:32:90:0c:08:52:ab:62:6c:8f:f9:
                    17:59:0f:c6:9a:b5:ab:04:62:59:ec:7b:1a:39:8f:
                    22:0a:23:33:14:03:38:a2:9b:ed:62:d3:47:a2:10:
                    c7:58:ec:b4:93:ce:b5:ed:6c:2a:54:df:00:12:3d:
                    52:a0:f3:e3:f8:17:f6:85:f9:43:36:1f:e9:e1:4d:
                    52:11:2e:cf:aa:7f:da:c9:51:b8:f7:76:66:b9:f4:
                    bf:62:dd:ef:eb:03:fb:7e:bd:12:52:fa:06:b1:af:
                    1d:67:f8:75:69:2a:08:da:89:26:82:a7:f0:69:0a:
                    6b:45:3d:7f:c2:cc:a5:f1:8f:bf:02:32:b0:f3:bb:
                    87:18:c5:4e:e9:90:76:bb:86:e7:b8:fb:15:52:a8:
                    70:e0:cf:2b:ab:32:06:6d:61:54:21:9d:fa:f1:ff:
                    f3:23:9c:2c:cb:4a:1f:b0:4a:88:a1:8d:6d:9e:02:
                    59:30:a0:8f:19:c0:85:d8:ba:4e:cc:6f:f6:e0:a8:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BB:29:DD:92:91:4B:F7:C0:4F:36:31:9D:AC:79:FB:83:45:F0:4C
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3231302e302f32332d3233203d3e203231373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:ee:b0:49:45:1b:ec:98:14:96:ff:cd:da:5f:de:e7:d7:
         3a:4a:08:52:14:57:e6:39:5a:75:d1:16:30:3a:1c:bc:50:46:
         62:99:38:5b:ad:a4:da:06:ce:ed:f4:ef:8d:cc:7d:df:9a:ac:
         8c:a3:ec:1f:32:e0:ff:4b:19:93:2f:39:3c:f4:8d:24:96:9a:
         1f:f2:1e:25:c6:19:0d:63:62:80:75:19:a0:c9:97:7a:00:01:
         99:db:11:7d:e8:de:16:23:85:25:5b:80:82:9f:e5:43:6b:55:
         20:33:b1:c4:a9:9d:49:ed:7d:28:76:2f:fa:67:63:46:8f:dd:
         6b:f2:fc:ad:38:79:9d:1f:07:f2:2e:0a:06:b3:1a:70:fd:8c:
         c6:1b:e3:13:9b:e3:fc:de:a4:36:d8:50:0c:10:2b:de:72:3f:
         58:3e:41:83:e1:16:34:fc:32:d8:d2:dd:f8:2c:8d:f1:a7:ef:
         7c:98:4d:c0:48:2b:f8:03:8b:dc:f5:4a:17:c1:91:55:6e:b7:
         b8:c5:07:c4:68:82:ae:bb:d5:67:ea:a9:9d:f7:e7:6f:ce:8b:
         d6:c1:30:2f:df:51:22:af:e4:e0:eb:e2:c4:d2:79:00:c5:50:
         3c:5a:4d:f4:e5:47:e8:6a:74:be:2b:c0:0a:d9:9b:37:62:03:
         ab:6d:b9:42
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUJ8l9KoEjjki47b3ikw9P76YhnB8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWFjZTI4MGNlZmFjOWY1ZmFmNzRmMGUxMTQ3YTRhZjUy
OTkwNjJmNzRjZTA1MjFiNjIwHhcNMjUxMDE3MTgyNTM4WhcNMjYxMDE2MTgzMDM4
WjAzMTEwLwYDVQQDEyhEQUJCMjlERDkyOTE0QkY3QzA0RjM2MzE5REFDNzlGQjgz
NDVGMDRDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gpycW+BXtuO
67MZ+aDWu1OEqe640OuP/5ONPonkNLQvCymZkZc9Tp2JIDCf6sEzga3/wJsT0rqA
6hxZNyD23jKQDAhSq2Jsj/kXWQ/GmrWrBGJZ7HsaOY8iCiMzFAM4opvtYtNHohDH
WOy0k8617WwqVN8AEj1SoPPj+Bf2hflDNh/p4U1SES7Pqn/ayVG493ZmufS/Yt3v
6wP7fr0SUvoGsa8dZ/h1aSoI2okmgqfwaQprRT1/wsyl8Y+/AjKw87uHGMVO6ZB2
u4bnuPsVUqhw4M8rqzIGbWFUIZ368f/zI5wsy0ofsEqIoY1tngJZMKCPGcCF2LpO
zG/24KjZ8wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNq7Kd2SkUv3wE82MZ2sefuD
RfBMMB8GA1UdIwQYMBaAFKVf+gNccwyHmh7yY3TjYAJNbR8YMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5Njg5NzJlMjE2ZGU3LzAv
QTU1RkZBMDM1QzczMEM4NzlBMUVGMjYzNzRFMzYwMDI0RDZEMUYxOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzlhNjliOGNlLTI0ZGEtNDFiMy1hMDhlLTQ4ZDY0Yzk2NzM2MC9lYWNl
MjgwY2VmYWM5ZjVmYWY3NGYwZTExNDdhNGFmNTI5OTA2MmY3NGNlMDUyMWI2Mi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTY4
OTcyZTIxNmRlNy8wLzMxMzAzNDJlMzIzNTM0MmUzMjMxMzAyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMjMxMzczNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP7SMA0GCSqGSIb3DQEB
CwUAA4IBAQBvTe6wSUUb7JgUlv/N2l/e59c6SghSFFfmOVp10RYwOhy8UEZimThb
raTaBs7t9O+NzH3fmqyMo+wfMuD/SxmTLzk89I0klpof8h4lxhkNY2KAdRmgyZd6
AAGZ2xF96N4WI4UlW4CCn+VDa1UgM7HEqZ1J7X0odi/6Z2NGj91r8vytOHmdHwfy
LgoGsxpw/YzGG+MTm+P83qQ22FAMECvecj9YPkGD4RY0/DLY0t34LI3xp+98mE3A
SCv4A4vc9UoXwZFVbre4xQfEaIKuu9Vn6qmd9+dvzovWwTAv31Eir+Tg6+LE0nkA
xVA8Wk305UfoanS+K8AK2Zs3YgOrbblC
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:21:27 2025 by rpki-client