Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203534323532.roa
File:                     3230342e31342e37352e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          AlIh8bawNxXhocZIW53pQ4UmH+0fdXyAeMhrMNHMNmo=
Subject key identifier:   CB:35:9E:10:B5:7A:D4:85:D9:7E:96:72:FB:0D:C3:CA:8E:03:99:3F
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       4D4E405E6995424DF4C4C0491A526A29D322668D
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203534323532.roa
Signing time:             Fri 10 Oct 2025 12:26:37 +0000
ROA not before:           Fri 10 Oct 2025 12:21:37 +0000
ROA not after:            Fri 09 Oct 2026 12:26:37 +0000
asID:                     54252
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4e:40:5e:69:95:42:4d:f4:c4:c0:49:1a:52:6a:29:d3:22:66:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 10 12:21:37 2025 GMT
            Not After : Oct  9 12:26:37 2026 GMT
        Subject: CN=CB359E10B57AD485D97E9672FB0DC3CA8E03993F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:df:55:0b:80:72:83:11:52:2b:de:1c:c0:
                    91:4d:5d:46:5a:ee:3c:4a:da:20:d4:1a:9d:c7:c9:
                    03:96:b9:a8:dc:79:cc:20:4c:06:76:0a:86:20:37:
                    b6:f3:99:fb:9c:0e:07:d0:c9:79:bd:7e:34:ea:53:
                    e0:f1:fe:3b:5f:7e:df:1f:1e:4e:92:7c:15:01:f5:
                    5b:58:a0:56:b8:71:1b:1b:32:9f:87:c4:be:57:82:
                    3a:49:ab:29:0e:d9:db:5c:e7:f3:45:de:fc:09:4c:
                    b0:89:f8:94:17:5d:b8:bd:78:5a:ff:66:6c:e0:44:
                    f0:a9:bc:e7:c7:14:d1:e7:b6:d4:82:2e:52:d8:14:
                    72:02:3f:b8:04:79:91:01:a1:a1:d1:33:c1:3c:3f:
                    9e:a7:d4:19:c5:06:ff:76:ea:02:a8:58:a2:c4:82:
                    e1:64:54:51:c9:e1:e3:a5:50:60:bd:bd:65:62:12:
                    c0:0b:9f:43:df:8d:0d:cd:b4:72:7b:ca:14:9d:a2:
                    1c:e4:36:62:f6:be:bf:5a:9f:f1:4e:fb:68:d2:68:
                    14:21:25:d4:f5:82:91:ff:8a:7a:ea:ef:a3:2b:85:
                    98:09:4c:d6:e8:17:9b:b1:bc:79:70:fb:e5:59:3c:
                    3f:e3:28:ed:25:69:45:07:3e:e8:82:00:37:20:69:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:35:9E:10:B5:7A:D4:85:D9:7E:96:72:FB:0D:C3:CA:8E:03:99:3F
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:74:af:f8:fe:66:f2:af:4f:80:36:de:01:dd:68:e5:31:f4:
         99:e8:6d:ff:23:3f:be:58:c4:91:30:32:32:45:cf:85:ae:a5:
         99:1d:b0:e1:f1:bd:eb:b4:22:c6:dd:e9:55:d7:34:09:a9:ef:
         9b:74:df:b0:1b:de:76:54:9d:05:d7:1b:15:54:21:6f:82:3e:
         eb:98:d6:cd:53:3b:92:30:72:d7:c1:9e:7a:d8:34:2f:c4:05:
         cf:c5:dc:06:f5:f9:75:52:6a:d8:c2:f7:be:a5:37:58:e9:6f:
         31:9b:3d:3b:24:66:f3:aa:09:49:21:44:45:26:98:c1:54:03:
         37:6e:05:33:6d:7f:e7:e9:64:7c:45:32:29:2f:17:b0:26:5f:
         e1:e7:f8:9b:0f:09:53:21:70:26:32:e7:3c:59:72:23:f5:a3:
         d5:42:5b:f1:f5:49:69:1e:23:f1:b7:66:b5:be:3d:72:19:36:
         82:c8:a3:b7:4b:bb:a1:2f:50:16:93:fa:47:ce:4b:ef:61:60:
         8a:0c:93:4f:48:21:c2:61:9c:47:00:e5:be:6b:a1:21:25:12:
         5f:82:47:ad:48:a1:6d:c6:2c:11:50:6a:86:0f:11:ad:2c:9e:
         43:58:2e:fb:63:1c:a8:4e:b6:1c:51:b3:68:b7:0b:4f:7e:e7:
         be:d0:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:13 2025 by rpki-client