Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
File:                     3230342e31342e37332e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier:          xFRBEEsXhpY0UKEm9queuGF0BsgbRs/GuGW1By17kYA=
Subject key identifier:   F2:6C:FE:E5:3D:46:C9:AF:AF:B0:AD:E9:EE:8B:51:02:74:87:60:C7
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       36E66AB0F9692F296D2952D26ABFD5FBEA2B9E8A
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa
Signing time:             Thu 11 Sep 2025 08:29:45 +0000
ROA not before:           Thu 11 Sep 2025 08:24:45 +0000
ROA not after:            Thu 10 Sep 2026 08:29:45 +0000
asID:                     32780
IP address blocks:        204.14.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e6:6a:b0:f9:69:2f:29:6d:29:52:d2:6a:bf:d5:fb:ea:2b:9e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Sep 11 08:24:45 2025 GMT
            Not After : Sep 10 08:29:45 2026 GMT
        Subject: CN=F26CFEE53D46C9AFAFB0ADE9EE8B5102748760C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:09:36:23:51:61:ae:d1:5d:a5:04:dc:8b:
                    72:33:91:38:78:98:2f:77:8a:0f:06:84:24:a5:77:
                    15:e1:65:80:bc:20:62:a3:2d:ba:07:ea:e6:f3:d5:
                    be:32:10:fb:0f:d7:dd:f4:30:e5:a5:1c:59:d8:bf:
                    44:97:a2:d0:de:49:46:73:0d:54:cb:c7:cf:21:47:
                    6e:06:d4:9d:ca:5a:4e:cf:ac:c5:78:a2:82:8c:a8:
                    a4:5d:12:d9:02:f5:ac:1a:6e:00:01:61:c5:18:c8:
                    31:73:af:38:2b:7d:98:97:02:db:25:09:50:a6:79:
                    e2:f5:38:52:7c:9b:e0:ed:26:a4:91:5e:9f:30:fa:
                    df:9b:4d:f3:86:92:0f:78:f0:3f:9c:72:14:4a:09:
                    49:da:03:3c:ae:ac:7b:fb:60:ae:b7:df:3c:ab:0d:
                    79:d0:4e:d7:07:cc:bb:1c:8f:67:95:6f:89:cc:b0:
                    94:98:bb:89:89:44:e9:7d:6e:ab:7b:e4:97:4c:3d:
                    6f:d7:58:a8:b4:bd:ce:8f:aa:64:9d:75:a1:d3:0f:
                    92:c1:b8:a0:56:b9:37:c5:4b:32:2a:1d:49:d7:94:
                    3e:40:6a:8e:05:77:80:8a:ce:35:a2:f6:9d:33:63:
                    da:33:61:23:61:90:3e:60:97:01:e5:cc:8a:ef:c3:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:FE:E5:3D:46:C9:AF:AF:B0:AD:E9:EE:8B:51:02:74:87:60:C7
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37332e302f32342d3234203d3e203332373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:91:55:ea:70:52:66:ba:9c:2e:8a:d7:ae:cc:0d:9f:69:
         92:34:4c:ae:31:e6:4b:a7:c1:15:2c:ff:30:33:08:52:bc:78:
         93:40:a3:fe:88:2c:5c:a0:6b:9f:ff:94:71:a4:38:a1:49:7c:
         c3:9b:97:0f:55:83:36:d4:ad:6a:40:b8:c8:af:0a:36:09:96:
         be:89:c3:81:8d:90:0b:29:a8:31:3d:6c:54:71:20:98:9a:3e:
         5e:43:84:f6:f2:ab:56:cc:06:3d:cf:a6:80:c3:3f:eb:0a:0c:
         68:6e:6a:8d:cf:45:2c:de:03:cb:79:4a:0f:89:ab:6e:b8:27:
         37:3c:5d:e6:1d:d7:05:0d:2e:24:b0:8e:a0:aa:74:57:66:f4:
         6d:e5:e1:4e:06:ed:5d:28:08:0b:70:4c:7a:59:eb:29:4e:0b:
         5f:9e:01:f0:68:17:13:5a:e4:aa:a1:e1:99:d7:75:eb:8d:de:
         e1:93:cf:35:2f:73:e4:5d:3d:7d:c3:9c:57:49:70:3b:b1:ef:
         9e:7e:44:cd:ae:86:aa:99:7c:84:45:50:01:78:c4:19:8d:20:
         08:6e:b2:a5:6e:ee:c8:78:01:ed:f1:fa:9d:93:93:f0:c0:50:
         e9:45:23:e9:fd:4f:0b:e9:ad:69:f1:5c:93:b4:e8:d9:8b:e2:
         38:9c:bf:87
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUNuZqsPlpLyltKVLSar/V++ornoowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj
Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjUwOTExMDgyNDQ1WhcNMjYwOTEwMDgyOTQ1
WjAzMTEwLwYDVQQDEyhGMjZDRkVFNTNENDZDOUFGQUZCMEFERTlFRThCNTEwMjc0
ODc2MEM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0JNiNRYa7R
XaUE3ItyM5E4eJgvd4oPBoQkpXcV4WWAvCBioy26B+rm89W+MhD7D9fd9DDlpRxZ
2L9El6LQ3klGcw1Uy8fPIUduBtSdylpOz6zFeKKCjKikXRLZAvWsGm4AAWHFGMgx
c684K32YlwLbJQlQpnni9ThSfJvg7SakkV6fMPrfm03zhpIPePA/nHIUSglJ2gM8
rqx7+2Cut988qw150E7XB8y7HI9nlW+JzLCUmLuJiUTpfW6re+SXTD1v11iotL3O
j6pknXWh0w+SwbigVrk3xUsyKh1J15Q+QGqOBXeAis41ovadM2PaM2EjYZA+YJcB
5cyK78PeUQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPJs/uU9Rsmvr7Ct6e6LUQJ0
h2DHMB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv
REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0
YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmIy
ZGFiN2NjMGE5MS8wLzMyMzAzNDJlMzEzNDJlMzczMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMzMzIzNzM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMDkkwDQYJKoZIhvcNAQELBQAD
ggEBAISnkVXqcFJmupwuiteuzA2faZI0TK4x5kunwRUs/zAzCFK8eJNAo/6ILFyg
a5//lHGkOKFJfMOblw9VgzbUrWpAuMivCjYJlr6Jw4GNkAspqDE9bFRxIJiaPl5D
hPbyq1bMBj3PpoDDP+sKDGhuao3PRSzeA8t5Sg+Jq264Jzc8XeYd1wUNLiSwjqCq
dFdm9G3l4U4G7V0oCAtwTHpZ6ylOC1+eAfBoFxNa5Kqh4ZnXdeuN3uGTzzUvc+Rd
PX3DnFdJcDux755+RM2uhqqZfIRFUAF4xBmNIAhusqVu7sh4Ae3x+p2Tk/DAUOlF
I+n9TwvprWnxXJO06NmL4jicv4c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:55:00 2025 by rpki-client