Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
File:                     3230342e31342e37382e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier:          zyh+vwIJxz1MhLhTd8YKI5ifA8sRsi/DxQDGpBmA7LI=
Subject key identifier:   44:A1:79:A0:93:74:06:1D:AD:24:B7:8B:23:3F:E7:E6:04:C4:7D:D1
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       185F27AA7ADCDA0A18C5953357859667AA09A826
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
Signing time:             Thu 11 Sep 2025 08:29:45 +0000
ROA not before:           Thu 11 Sep 2025 08:24:45 +0000
ROA not after:            Thu 10 Sep 2026 08:29:45 +0000
asID:                     400039
IP address blocks:        204.14.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:5f:27:aa:7a:dc:da:0a:18:c5:95:33:57:85:96:67:aa:09:a8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Sep 11 08:24:45 2025 GMT
            Not After : Sep 10 08:29:45 2026 GMT
        Subject: CN=44A179A09374061DAD24B78B233FE7E604C47DD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:85:22:c4:d4:2c:bd:a0:0e:2b:8d:51:a7:
                    f8:b6:20:b6:9f:e5:2e:47:2e:bc:19:bb:16:22:38:
                    81:71:d5:85:2c:ec:20:1c:78:e3:18:fd:d4:d0:5d:
                    90:8d:b0:5a:db:69:3e:84:3f:15:dc:92:ce:18:06:
                    f6:33:ca:92:55:2a:e0:a2:70:e0:28:9e:5d:df:77:
                    05:87:9d:12:9c:c4:d1:aa:93:34:0e:fb:9b:ee:ff:
                    16:83:8f:df:f2:01:7c:33:58:ea:14:d5:c2:af:97:
                    a8:8d:74:eb:f9:6c:56:e0:49:5d:ae:e8:af:4a:8f:
                    fc:73:54:ee:fb:60:57:95:23:c3:1b:f7:fd:9c:79:
                    fa:07:15:12:5b:5d:65:0e:ea:47:45:a4:b7:62:90:
                    e0:a0:3e:b3:d0:65:8e:46:bd:12:6a:f8:a1:5c:46:
                    4b:b7:15:2d:50:19:02:f4:f4:18:dc:0c:ba:65:13:
                    d7:cc:c2:9a:72:64:f3:7e:b7:c6:43:c3:4a:65:1a:
                    46:32:27:14:e9:a0:92:4f:73:ed:33:6a:a5:75:4e:
                    8f:53:b0:c9:7e:3c:3b:0d:1f:46:37:93:fa:49:28:
                    fd:b9:02:2a:db:2f:54:b7:3d:6a:03:d4:09:8e:5c:
                    c6:71:a8:5c:8d:2a:dc:b6:33:03:0d:b8:60:4e:ab:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:79:A0:93:74:06:1D:AD:24:B7:8B:23:3F:E7:E6:04:C4:7D:D1
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:23:71:0f:3e:41:18:72:76:3a:d3:47:92:3d:49:9d:6c:
         25:49:fd:e7:d3:71:28:2b:0c:cb:cf:69:f0:9a:eb:0f:11:95:
         85:97:db:bb:a7:21:f2:2a:6c:6e:2f:41:17:5f:d3:e2:b3:69:
         a8:b9:6f:c9:c4:9c:e4:f2:00:ff:bc:23:c7:0e:3b:90:9d:31:
         a4:66:79:5e:73:38:99:f1:38:7c:df:65:d7:7f:75:6f:fb:78:
         43:0f:1d:ff:04:a1:5c:dd:3d:a4:fb:15:a9:23:6a:54:b1:2c:
         6e:66:ed:07:d7:58:16:e8:7c:77:cf:25:fe:fb:4e:72:2b:93:
         35:1c:2e:eb:25:8b:2b:7e:ef:6d:86:41:da:51:45:8f:ad:e0:
         f6:b2:59:5d:a6:02:d5:79:a6:2e:79:1f:f9:00:ad:09:79:56:
         3d:50:a1:ec:39:e3:30:97:0a:65:1c:74:9e:7a:96:a8:9e:2d:
         cd:83:99:f8:b2:8c:5c:11:e5:bb:9d:6a:af:87:d5:27:4c:49:
         61:93:02:ae:bd:d8:bf:11:47:4d:44:ff:9e:b9:5e:0f:1a:f5:
         e9:f7:4b:da:2b:81:0d:cb:42:38:47:0a:da:b4:46:02:d0:d5:
         59:31:fa:54:61:af:e6:86:7e:ae:94:eb:0b:e6:21:27:69:ed:
         22:d7:93:57
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGF8nqnrc2goYxZUzV4WWZ6oJqCYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj
Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjUwOTExMDgyNDQ1WhcNMjYwOTEwMDgyOTQ1
WjAzMTEwLwYDVQQDEyg0NEExNzlBMDkzNzQwNjFEQUQyNEI3OEIyMzNGRTdFNjA0
QzQ3REQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZWFIsTULL2g
DiuNUaf4tiC2n+UuRy68GbsWIjiBcdWFLOwgHHjjGP3U0F2QjbBa22k+hD8V3JLO
GAb2M8qSVSrgonDgKJ5d33cFh50SnMTRqpM0Dvub7v8Wg4/f8gF8M1jqFNXCr5eo
jXTr+WxW4EldruivSo/8c1Tu+2BXlSPDG/f9nHn6BxUSW11lDupHRaS3YpDgoD6z
0GWORr0SavihXEZLtxUtUBkC9PQY3Ay6ZRPXzMKacmTzfrfGQ8NKZRpGMicU6aCS
T3PtM2qldU6PU7DJfjw7DR9GN5P6SSj9uQIq2y9Utz1qA9QJjlzGcahcjSrctjMD
DbhgTqu9pQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFESheaCTdAYdrSS3iyM/5+YE
xH3RMB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv
REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0
YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmIy
ZGFiN2NjMGE5MS8wLzMyMzAzNDJlMzEzNDJlMzczODJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzAzMDMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMwOTjANBgkqhkiG9w0BAQsF
AAOCAQEATRgjcQ8+QRhydjrTR5I9SZ1sJUn959NxKCsMy89p8JrrDxGVhZfbu6ch
8ipsbi9BF1/T4rNpqLlvycSc5PIA/7wjxw47kJ0xpGZ5XnM4mfE4fN9l1391b/t4
Qw8d/wShXN09pPsVqSNqVLEsbmbtB9dYFuh8d88l/vtOciuTNRwu6yWLK37vbYZB
2lFFj63g9rJZXaYC1XmmLnkf+QCtCXlWPVCh7DnjMJcKZRx0nnqWqJ4tzYOZ+LKM
XBHlu51qr4fVJ0xJYZMCrr3YvxFHTUT/nrleDxr16fdL2iuBDctCOEcK2rRGAtDV
WTH6VGGv5oZ+rpTrC+YhJ2ntIteTVw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:00 2025 by rpki-client