Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e2037303138.roa
File:                     3230342e31342e37342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          b+nZlspIVUYvy2IR0fOpWUv6rseVsHdeiIucKmXRYqA=
Subject key identifier:   32:F9:80:23:59:91:1B:C2:A1:86:9F:8C:B7:B7:8C:45:95:DA:41:08
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       7CFD17EC4B9EB6256B5134FDE29B916CB75CDC5C
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 20 Oct 2025 15:30:39 +0000
ROA not before:           Mon 20 Oct 2025 15:25:39 +0000
ROA not after:            Mon 19 Oct 2026 15:30:39 +0000
asID:                     7018
IP address blocks:        204.14.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 17:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:fd:17:ec:4b:9e:b6:25:6b:51:34:fd:e2:9b:91:6c:b7:5c:dc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 20 15:25:39 2025 GMT
            Not After : Oct 19 15:30:39 2026 GMT
        Subject: CN=32F9802359911BC2A1869F8CB7B78C4595DA4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:90:b5:74:6d:bd:92:fa:18:96:ee:e2:6d:01:
                    46:6c:f7:de:ec:db:86:93:a5:26:2b:52:00:a3:f3:
                    ed:a8:db:a2:d0:72:f7:13:43:5a:60:c9:19:3e:e0:
                    c3:ff:81:02:3e:41:78:91:04:5b:9d:45:b0:c5:e8:
                    60:8e:60:65:07:11:6b:04:28:34:b3:31:4a:75:00:
                    e9:6a:87:d6:3f:a4:c3:69:5e:76:84:97:24:d5:78:
                    0e:68:65:eb:9e:e3:e1:99:4d:25:e3:d6:e5:93:d0:
                    0b:69:a1:3f:69:d8:58:57:89:68:7f:d3:73:64:88:
                    1e:c3:17:de:9f:68:09:9c:a9:6e:1b:88:90:00:17:
                    9d:7f:53:a8:8c:5e:9f:a6:54:50:88:9c:9f:19:56:
                    d5:66:2d:90:1a:59:79:1e:7b:00:94:94:9c:69:63:
                    8a:68:9f:ce:3e:2d:8f:7a:fb:8a:5a:d8:21:c8:da:
                    08:a9:d3:1f:93:c9:5e:e6:bf:81:eb:6a:cb:63:e6:
                    fe:b5:9f:8b:96:83:6f:b7:41:75:3b:3f:50:0d:59:
                    7e:07:97:72:dd:ab:19:cc:dd:b7:db:03:e7:d7:be:
                    d7:38:d2:38:66:27:8b:9e:2e:1a:05:8b:da:6a:73:
                    19:4d:e6:59:0e:a2:4e:17:ba:b6:18:29:e7:d8:6b:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:80:23:59:91:1B:C2:A1:86:9F:8C:B7:B7:8C:45:95:DA:41:08
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:7a:fe:8a:d2:2f:ca:83:4b:5a:6c:25:12:ff:f0:9a:1b:a6:
         8e:37:a3:9e:a1:e6:69:fb:2b:7b:8a:10:82:22:63:de:8e:7e:
         d1:3e:6f:49:45:28:15:d4:e7:64:eb:f5:83:64:75:b8:2d:b3:
         0b:1c:70:10:d3:ff:1e:5b:b8:b4:34:23:46:3f:be:30:84:4c:
         c0:9b:b9:5f:72:05:65:1f:e3:23:a9:cb:58:9d:8c:c6:05:86:
         e8:4c:6d:5c:cd:ae:d6:21:91:ea:72:17:bf:cb:0b:98:a3:d9:
         15:4d:b3:70:dc:46:76:15:65:ed:e4:7e:a3:69:c9:f6:94:1d:
         14:83:f2:b5:1c:29:0f:4f:97:46:09:1c:9a:23:f2:62:12:8b:
         fc:a1:db:76:9c:64:db:f2:ad:13:7b:57:0e:ca:33:a7:d7:c0:
         c1:1d:4e:e1:20:67:4b:f7:cb:36:1a:14:12:4a:ec:c0:59:98:
         cf:d1:1e:c1:43:bb:3b:5e:49:84:1e:08:a3:13:5b:32:b8:62:
         88:48:9e:24:aa:bc:4d:19:82:52:72:69:08:e7:84:90:ef:c8:
         d0:ed:a5:71:cb:0f:2c:9c:25:06:2d:90:56:69:1b:f3:cd:81:
         b8:29:b9:38:4a:3a:58:1c:7d:50:77:a4:cb:21:17:03:f1:cd:
         96:1b:00:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:07:41 2025 by rpki-client