Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20333937363330.roa
File:                     3230342e31342e37352e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier:          iyEKugqBYl/8p4WLGwxDRkWGL4VEGkVZujCtx3+z8x4=
Subject key identifier:   EA:03:45:DC:B9:7C:7B:76:C2:2E:80:D1:B2:2B:6A:4F:11:24:B7:71
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       1C720F4C266F6563B569AD2419C1731F4AED2672
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20333937363330.roa
Signing time:             Fri 10 Oct 2025 12:26:37 +0000
ROA not before:           Fri 10 Oct 2025 12:21:37 +0000
ROA not after:            Fri 09 Oct 2026 12:26:37 +0000
asID:                     397630
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:72:0f:4c:26:6f:65:63:b5:69:ad:24:19:c1:73:1f:4a:ed:26:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 10 12:21:37 2025 GMT
            Not After : Oct  9 12:26:37 2026 GMT
        Subject: CN=EA0345DCB97C7B76C22E80D1B22B6A4F1124B771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:e8:80:34:d0:c4:49:d5:6c:86:02:ad:7d:
                    70:aa:65:c2:2b:5e:66:84:5b:69:fd:72:2c:8b:58:
                    d3:80:95:84:55:27:34:cb:ba:e4:41:ef:1c:63:6c:
                    3e:1c:36:07:4c:56:af:2e:67:d8:9a:01:3a:32:95:
                    ad:70:04:c3:ec:4e:bb:3e:93:28:7b:ff:54:28:42:
                    8b:f0:77:75:0d:fb:cc:de:a8:34:3c:ce:4b:98:c3:
                    3b:08:87:4e:54:85:30:13:bf:1e:20:cd:7e:1f:11:
                    66:2f:a3:79:26:f7:b8:53:2a:a6:60:3b:19:fc:c9:
                    f1:a5:23:ab:9e:23:6a:57:ed:82:23:e0:c5:50:5d:
                    14:d1:34:0e:8d:1a:7a:be:5b:23:5d:46:d3:e5:20:
                    e5:5e:f3:94:1c:ef:1c:0a:1f:bc:32:fe:99:ec:44:
                    16:81:ab:d2:f8:18:90:bd:15:c8:30:9d:ae:45:7f:
                    86:e8:56:a6:7a:d2:5e:b7:36:ed:90:79:70:88:39:
                    2d:d9:ef:5b:ad:77:d0:7a:00:0d:fd:26:21:63:08:
                    8e:8d:a5:0b:a4:e4:c8:30:c1:4c:af:5c:d6:e8:ac:
                    0c:72:7e:87:4e:6f:85:cd:e0:7d:9c:fb:c4:ff:f0:
                    20:33:89:89:73:80:a4:87:74:72:0b:d8:83:4d:9a:
                    8e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:45:DC:B9:7C:7B:76:C2:2E:80:D1:B2:2B:6A:4F:11:24:B7:71
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20333937363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:6d:c9:71:28:a6:36:89:e3:8e:dc:d4:d7:74:bd:9a:0a:b0:
         74:e4:fc:49:1b:67:09:02:d2:90:62:1a:10:f5:03:46:65:e9:
         8a:06:a5:27:b3:3d:ed:84:37:7d:ec:82:d1:76:af:7b:59:bd:
         24:40:5e:10:a2:11:bf:e8:ca:be:8f:6d:1a:7a:a0:0b:6c:a3:
         7e:2b:17:f7:40:2e:ee:3b:c2:35:c2:77:1e:b3:58:9a:c4:d0:
         09:21:4a:ea:78:f2:0b:0d:c5:70:9c:ea:cd:0f:e3:fd:16:fd:
         10:35:0c:4b:ff:24:8a:0d:f0:0b:3f:6d:e3:b1:36:71:2c:35:
         88:33:64:a5:b8:9b:60:45:f8:79:bd:90:6b:56:fd:96:82:a8:
         13:28:76:7d:b3:e2:5c:a2:ba:1b:0d:7f:8d:25:4f:25:a7:74:
         6e:3c:23:f4:bf:11:85:ba:a8:ca:ad:a0:76:d1:3c:0b:3f:50:
         fb:01:cc:d3:b5:36:3b:a3:a6:bf:57:88:00:40:31:17:9f:5f:
         c5:f0:25:ae:15:59:72:19:d4:9a:d8:51:e4:8a:e2:98:43:9a:
         8c:4c:50:6d:5f:8d:83:84:95:53:2d:b5:6e:ee:ad:c2:20:26:
         74:a0:a2:4c:f6:96:6a:b8:3e:df:c9:2e:4c:61:54:08:af:08:
         e5:46:3c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:54 2025 by rpki-client