Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203634323637.roa
File:                     3230342e31342e37352e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          7e4IW3+vJvMqaylllTBRIyPvydnaKzhheL9iuAprgTI=
Subject key identifier:   F4:84:55:E6:54:63:CE:DE:4E:F1:C6:D2:40:74:55:8B:A8:CC:D0:F5
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       48713D6DFBBF3C800C0E91AB5AD2C408EA16F7E9
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203634323637.roa
Signing time:             Fri 10 Oct 2025 12:26:37 +0000
ROA not before:           Fri 10 Oct 2025 12:21:37 +0000
ROA not after:            Fri 09 Oct 2026 12:26:37 +0000
asID:                     64267
IP address blocks:        204.14.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:71:3d:6d:fb:bf:3c:80:0c:0e:91:ab:5a:d2:c4:08:ea:16:f7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Oct 10 12:21:37 2025 GMT
            Not After : Oct  9 12:26:37 2026 GMT
        Subject: CN=F48455E65463CEDE4EF1C6D24074558BA8CCD0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:bd:44:56:46:15:bc:a3:65:2d:f5:33:e3:
                    2b:be:e7:6a:b0:36:a2:37:ca:76:d3:d2:dc:87:0c:
                    44:e0:cb:87:6f:73:05:6b:ec:ef:90:15:3a:ad:48:
                    dc:02:1c:d8:eb:9e:95:39:64:3a:57:ec:40:59:a4:
                    67:7b:34:b7:d9:a8:b9:6a:bb:9b:ff:54:a8:56:55:
                    12:f3:6b:27:d0:f1:1b:1e:ce:c8:85:47:95:27:e9:
                    cb:b6:cf:d5:d8:15:56:b1:89:7d:3f:ec:39:1b:ab:
                    0e:22:7a:b2:28:7f:49:cb:a4:e0:1c:99:4e:36:00:
                    55:36:bf:03:9c:31:5f:b6:5e:0b:b1:fc:2b:73:8b:
                    fe:3b:4b:2a:98:c6:8c:b9:a2:ad:ea:cf:41:05:f2:
                    4c:3d:b9:7d:13:ee:76:b5:c6:ad:3e:9b:f1:2b:5f:
                    b2:72:dc:d0:e2:b3:b3:07:3b:4e:f2:b8:bd:6d:04:
                    00:65:d1:2a:23:b7:c7:15:3d:96:3e:76:14:92:a4:
                    38:4e:bf:88:dc:7e:b5:ed:6f:a1:06:c7:19:7f:38:
                    d8:c9:2a:ab:8e:06:5f:a9:d3:3e:7c:ff:eb:0e:f2:
                    6f:68:c6:8b:37:65:eb:29:d9:4a:14:dd:c9:82:95:
                    36:29:6f:91:a7:85:82:02:c9:6e:18:92:5a:21:ce:
                    fc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:84:55:E6:54:63:CE:DE:4E:F1:C6:D2:40:74:55:8B:A8:CC:D0:F5
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:e5:1b:79:25:10:fa:9c:fd:09:14:59:d4:d5:ee:8e:98:57:
         54:f9:0f:45:b9:f0:d0:21:3d:a9:13:9a:cb:39:b5:6a:e0:72:
         c6:9e:9f:53:d1:8b:80:d5:52:ab:7e:9d:8c:a5:bf:b9:d5:ad:
         3e:5b:e6:0a:87:b6:ff:52:01:24:77:99:24:fe:c2:d7:af:3e:
         54:dd:d1:ad:56:98:39:a4:b9:fd:e2:9a:9c:f0:e8:96:d4:0f:
         90:48:ba:87:b9:06:1b:f5:11:61:01:43:9b:22:1a:bb:b6:27:
         5b:5a:84:05:aa:6f:ea:32:7e:a7:59:6d:12:c8:59:08:4f:95:
         95:52:e3:40:d7:ee:58:8e:7e:4f:08:b4:85:76:e2:e5:a4:98:
         6f:50:30:4d:bb:3c:7f:c0:cc:47:0f:c2:33:e3:19:e3:fd:f2:
         af:09:28:f1:aa:e2:e6:56:cb:e2:9e:c7:ed:17:10:72:90:ab:
         fc:86:b3:bf:93:7f:86:b1:35:99:f2:6b:fd:7d:29:7d:4f:73:
         e9:b3:dc:e6:f8:d0:42:2e:b2:88:20:48:11:69:96:e9:b4:5f:
         27:c7:9e:fb:65:1d:b0:06:0d:cd:b5:04:d0:f0:9a:5c:b1:74:
         2e:50:8a:e4:b3:ac:b5:41:7c:0a:98:39:b0:0a:e3:80:49:63:
         2b:03:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:33 2025 by rpki-client