Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e2039333034.roa
File:                     3230342e31342e37322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          xsk2S7LsF6AUoyJA/ZSngUikR4ZqjfD6VJCE4p3A6Mc=
Subject key identifier:   79:67:C0:21:55:93:71:50:AB:7D:F2:46:84:05:80:20:5A:AE:71:EF
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       3D12F6523A9978D28ADFD026EB92DCB57BBBFE02
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 15 Aug 2025 07:52:39 +0000
ROA not before:           Fri 15 Aug 2025 07:47:39 +0000
ROA not after:            Fri 14 Aug 2026 07:52:39 +0000
asID:                     9304
IP address blocks:        204.14.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 18:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:12:f6:52:3a:99:78:d2:8a:df:d0:26:eb:92:dc:b5:7b:bb:fe:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Aug 15 07:47:39 2025 GMT
            Not After : Aug 14 07:52:39 2026 GMT
        Subject: CN=7967C02155937150AB7DF246840580205AAE71EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:dc:34:9a:35:c4:c5:f1:43:32:f3:90:14:22:
                    f2:53:b2:a1:30:f2:4c:c5:c7:01:e0:a0:6b:22:dc:
                    d2:12:a7:cc:a1:31:01:a2:c1:3c:75:b4:5a:d7:a3:
                    88:69:5f:2d:3c:74:b2:00:ea:54:85:6f:05:fb:2d:
                    2e:02:b5:be:3d:a9:f0:37:76:48:37:47:d0:42:24:
                    3a:f9:26:df:e3:23:d4:4a:12:cf:e3:fe:03:66:23:
                    44:c9:79:2c:c9:f9:df:83:c5:ad:4c:7b:10:4c:8f:
                    5d:99:bb:57:34:04:79:99:ac:3d:16:8c:1a:36:70:
                    6f:dc:3d:e3:dc:dd:0a:6f:ad:e0:ef:fc:d0:6d:1a:
                    86:40:7e:51:c2:e7:78:44:e1:e7:2b:2c:b2:39:1a:
                    c8:a4:54:47:6b:53:6f:7c:4f:5e:ae:8e:a4:c8:a6:
                    5f:90:9c:ca:d5:f4:6f:8b:bd:fc:a7:87:1f:ba:2a:
                    82:35:e9:b6:b7:e7:72:0e:21:7a:09:87:22:e3:df:
                    4f:a6:8f:6c:8d:a8:8a:4e:18:25:75:96:7c:bb:ee:
                    0a:3f:54:27:93:f6:83:40:5c:b5:6c:0a:62:5c:2b:
                    94:59:ee:ab:93:78:36:90:2e:b9:01:1e:1f:e5:f3:
                    a0:8a:ef:5f:8b:06:fb:e2:8a:cc:f0:85:31:6d:1a:
                    9e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:67:C0:21:55:93:71:50:AB:7D:F2:46:84:05:80:20:5A:AE:71:EF
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:25:ee:06:0a:1f:e7:28:02:5c:cc:d1:a2:03:72:1e:47:18:
         72:9c:da:75:32:69:9d:3e:50:6e:f7:49:7d:72:18:f8:72:70:
         9e:9e:94:cd:ab:bf:b5:aa:8f:ed:c7:af:79:8b:03:4d:67:31:
         8a:ea:23:2a:13:44:a4:77:c0:ca:48:ad:9b:e3:68:86:a1:7c:
         ab:db:38:01:ac:e3:08:ec:41:02:a4:4c:65:e8:e2:ff:0f:61:
         42:2e:30:7e:b8:29:5b:fb:03:bc:64:8c:99:64:78:b7:9c:d1:
         d1:86:47:16:cc:bf:f4:70:ab:41:ec:04:d6:ba:b6:36:2f:75:
         d4:63:bc:d1:8a:64:0e:d9:55:d2:8a:81:95:95:77:20:c8:8d:
         60:10:55:bd:6f:9d:4d:72:9b:4f:4b:86:95:89:7f:d4:4b:4d:
         04:03:2f:5f:b0:f4:ed:55:b4:06:33:63:7a:d9:00:d6:3e:41:
         d9:3c:c3:1d:ef:f1:ab:9e:25:c4:ed:12:c5:40:e7:18:67:97:
         47:45:6e:29:d0:1d:7c:73:7f:4d:86:3c:6c:79:df:93:8f:54:
         a0:c8:17:82:0d:a5:fa:b6:ed:38:f1:dd:1d:86:80:a2:d3:03:
         0e:84:02:ea:64:9c:75:da:f6:4e:df:51:65:bd:da:04:8c:23:
         96:e7:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:03 2025 by rpki-client