Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37392e302f32342d3234203d3e203533333536.roa
File:                     3230342e31342e37392e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          S/KzIGfLCQDSo41iO7cuJDOUlbGbRBuTP5gZe3j2a6o=
Subject key identifier:   53:BD:37:8B:C3:B4:EB:1E:85:0F:C3:6A:0A:95:A6:10:1C:53:8F:AC
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       36450E1D1D1C11EA661D2D2AB1FBA201E17B91B0
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37392e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 22 Apr 2025 13:28:30 +0000
ROA not before:           Tue 22 Apr 2025 13:23:30 +0000
ROA not after:            Tue 21 Apr 2026 13:28:30 +0000
asID:                     53356
IP address blocks:        204.14.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 17:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:45:0e:1d:1d:1c:11:ea:66:1d:2d:2a:b1:fb:a2:01:e1:7b:91:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Apr 22 13:23:30 2025 GMT
            Not After : Apr 21 13:28:30 2026 GMT
        Subject: CN=53BD378BC3B4EB1E850FC36A0A95A6101C538FAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:27:f3:09:a5:20:2e:ad:7a:f6:69:85:86:
                    fb:16:99:6c:2c:76:18:cd:24:8d:83:9a:d1:84:18:
                    de:a0:a6:11:d6:de:85:7c:e2:47:14:ca:8b:a7:e1:
                    c3:85:e8:5c:7c:a7:3c:43:ea:6e:91:66:bb:0b:76:
                    82:04:77:fc:ba:b7:1d:8f:d4:91:1d:78:c0:32:55:
                    25:69:ce:9b:a5:24:72:b8:50:0a:19:cf:2f:17:1d:
                    2c:32:84:11:e6:42:cc:a5:c5:33:7d:68:9d:cb:78:
                    db:13:b8:78:67:f7:01:8e:49:0c:ec:64:59:6e:9e:
                    a4:41:66:e9:5e:29:f0:0c:64:e7:46:99:c2:c8:84:
                    d1:15:b2:73:6d:8c:1a:8e:8b:9c:d0:f5:6b:83:06:
                    52:98:0c:63:13:e2:84:f9:36:5d:68:19:fa:b4:b6:
                    32:1a:07:c6:b7:8f:9a:98:25:df:62:fe:ff:e1:f5:
                    e7:ca:29:59:f8:fb:3b:19:e7:62:d1:6d:b3:23:14:
                    f8:a5:f3:bc:6c:03:b7:28:9b:87:42:06:93:67:02:
                    99:92:1b:24:5f:1a:ad:ac:38:08:2e:34:a6:09:75:
                    ee:7b:e0:a1:c5:0e:7b:19:27:6b:c6:35:2d:8c:98:
                    8b:ba:62:9a:5d:55:b7:99:f7:21:5b:f6:65:0f:7e:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BD:37:8B:C3:B4:EB:1E:85:0F:C3:6A:0A:95:A6:10:1C:53:8F:AC
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37392e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c8:9e:28:0c:59:4a:65:8c:41:75:1b:76:f2:be:70:68:ef:
         12:84:c4:41:0b:14:74:0d:7e:c9:aa:20:cf:95:b6:72:a0:e9:
         46:5c:75:ff:2d:93:85:03:b9:eb:18:e8:0f:b3:e6:10:21:8d:
         e0:b5:64:52:77:69:23:55:c3:0d:15:ea:71:0a:fb:17:da:9c:
         02:51:6e:52:d8:c5:85:1c:59:bd:78:ed:96:0b:24:05:97:ab:
         48:dc:8b:da:3a:fb:6d:1c:a4:69:e0:5c:7a:c6:6c:75:c8:4e:
         0c:26:93:27:17:7b:54:52:c0:35:84:b5:d1:8e:0e:1d:27:c0:
         4e:cc:97:c3:b6:06:04:9a:a9:1e:dd:52:e4:02:63:2b:6c:d9:
         12:96:fe:22:66:62:de:38:26:d8:07:13:4d:a1:75:fc:60:4a:
         88:a8:4f:15:a8:8b:34:5d:65:a3:59:53:b1:c6:4b:20:b7:a3:
         23:62:58:d1:4d:99:74:aa:5e:77:dc:a8:18:12:e9:f4:91:27:
         eb:25:a3:f2:af:3d:61:c9:4a:87:21:ec:6c:6f:83:d6:82:bd:
         c6:ba:6f:31:de:11:8a:c9:f2:3d:33:e5:41:bd:c9:8c:62:55:
         37:92:56:af:9e:2e:46:12:6c:08:b1:51:5f:36:55:8d:ae:6f:
         c5:07:1b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:57:43 2025 by rpki-client