Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20313436383133.roa
File:                     3230342e31342e37352e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier:          OEDhq7vxsu7E0TKYOk3Ub3iXrmx3JHKhcP7wEn1Y4S8=
Subject key identifier:   0E:44:B3:D6:E9:DB:6B:2D:88:E4:57:61:3A:0A:22:42:06:15:74:E0
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       5B84A781CA45EE9010CF8365E70E2110E37214BE
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20313436383133.roa
Signing time:             Fri 25 Sep 2026 01:54:37 +0000
ROA not before:           Fri 25 Sep 2026 01:49:37 +0000
ROA not after:            Fri 24 Sep 2027 01:54:37 +0000
asID:                     146813
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:35:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:a7:81:ca:45:ee:90:10:cf:83:65:e7:0e:21:10:e3:72:14:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Sep 25 01:49:37 2026 GMT
            Not After : Sep 24 01:54:37 2027 GMT
        Subject: CN=0E44B3D6E9DB6B2D88E457613A0A2242061574E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:2d:5e:ba:88:32:28:c4:a7:14:e4:5d:c5:
                    7a:de:95:ae:1b:e8:d0:e5:0a:01:7c:0c:fb:9b:e4:
                    e0:a6:7a:e3:72:d1:f6:4a:eb:fa:b2:d8:15:cd:95:
                    d6:f8:2a:8f:c5:65:2c:58:99:23:92:9b:13:26:4c:
                    16:ea:b0:9a:98:db:fe:51:cb:e2:1d:ee:ab:6a:88:
                    f1:8f:9e:72:2c:80:8b:92:29:9f:1f:f9:8a:23:8a:
                    54:e0:32:c8:0c:4a:44:96:f9:a6:1b:8b:59:c4:f9:
                    e0:60:a1:1a:38:1a:b2:d9:e0:c3:d3:89:2c:e6:af:
                    14:36:22:1b:d4:78:fc:b4:1d:42:45:e0:8b:b7:a7:
                    b0:15:4a:38:f0:80:1e:f3:3c:00:94:d0:6a:51:93:
                    43:40:fc:16:1d:41:c3:8b:da:1c:ef:53:1c:27:98:
                    2e:ed:3c:27:f3:38:86:ba:1b:96:9e:ad:16:9e:d4:
                    9d:35:6d:74:13:fb:07:96:98:2d:f7:59:41:48:e0:
                    4e:9a:83:d0:d4:90:78:a0:35:3d:d1:0c:cd:8a:28:
                    90:60:fe:93:f7:d5:a4:10:81:d8:7b:af:16:db:18:
                    4a:6a:45:35:77:c6:b1:23:3d:6b:cd:1e:4d:50:72:
                    97:03:00:39:22:f9:3b:60:de:5a:c5:37:c0:2e:3a:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:44:B3:D6:E9:DB:6B:2D:88:E4:57:61:3A:0A:22:42:06:15:74:E0
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20313436383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:51:e1:64:79:69:73:40:0e:89:5d:86:6b:e4:c3:41:82:7c:
         77:da:9b:06:25:e9:f4:21:46:b9:f0:20:20:39:69:7a:4a:97:
         ae:da:36:de:d3:3a:a5:a0:41:a0:28:fc:e5:69:7e:28:7e:5a:
         f7:92:d7:dd:06:87:79:c5:7f:95:b2:1d:d6:f7:da:9a:ed:d0:
         d3:a3:c1:08:28:2f:42:15:41:9f:e3:13:1a:f3:4c:15:54:dd:
         ad:5c:56:a2:27:80:89:7b:18:fb:57:a9:1b:ce:86:e4:9b:ba:
         e7:27:9c:d9:50:da:4e:1a:9c:dc:5e:6e:be:f8:11:46:5c:b3:
         34:ac:70:3b:9a:b9:b9:36:52:7c:ee:4d:7a:54:f5:d8:af:32:
         80:b9:55:b0:50:6b:d9:9c:06:4e:51:2f:8e:11:bb:b8:e7:d9:
         51:aa:a4:8c:a3:2e:70:07:ad:a8:b4:33:a3:20:8a:b5:38:ca:
         f0:84:d5:cc:29:0b:c0:65:92:0c:8d:e2:cd:44:a7:09:28:26:
         16:4e:c6:37:94:1a:b6:e0:4d:63:ad:21:8b:25:b9:87:99:61:
         8f:d4:db:02:78:ad:3a:76:f7:a8:31:05:22:e2:2c:87:e1:a6:
         2d:53:ae:f4:1e:4f:1f:f6:48:3c:79:22:97:29:f5:35:aa:1b:
         50:94:59:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:25 2026 by rpki-client