Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37392e302f32342d3234203d3e203533333536.roa
File:                     3230342e31342e37392e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          4xnW52i+IrTkLSbTGbeuQVXMoRX7zdGyWaOpx0E2gpc=
Subject key identifier:   DC:2C:41:70:B8:CC:2F:F8:ED:64:1D:1F:38:DF:91:42:01:B0:83:77
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       346D1BBD48E04E456496E274FDEEA63865EE74DC
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37392e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 24 Mar 2026 13:35:54 +0000
ROA not before:           Tue 24 Mar 2026 13:30:54 +0000
ROA not after:            Tue 23 Mar 2027 13:35:54 +0000
asID:                     53356
IP address blocks:        204.14.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6d:1b:bd:48:e0:4e:45:64:96:e2:74:fd:ee:a6:38:65:ee:74:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Mar 24 13:30:54 2026 GMT
            Not After : Mar 23 13:35:54 2027 GMT
        Subject: CN=DC2C4170B8CC2FF8ED641D1F38DF914201B08377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bf:05:ba:7a:5d:09:02:c0:31:86:32:8d:56:
                    e8:4a:e6:38:8d:e3:97:8c:77:16:3d:43:0c:a4:07:
                    ad:5a:da:5d:b2:ad:b3:ab:6d:ca:a8:91:0c:49:6f:
                    5f:bc:d3:9f:f2:df:db:a9:60:f9:b6:44:ab:10:19:
                    51:7c:28:71:df:75:4e:8e:d5:98:ef:aa:ff:38:6b:
                    ec:dc:c7:ce:63:a1:94:f8:2c:08:b4:b8:43:7c:c8:
                    ec:31:a4:63:bc:db:67:aa:4f:06:af:7d:75:44:80:
                    b8:e9:fe:ec:30:2b:cc:85:0c:9a:0e:7f:c7:1d:c5:
                    ac:c7:18:a5:53:ee:b5:5d:a4:cf:c2:2d:c6:9e:9e:
                    73:96:75:cf:f5:49:34:fb:a5:b2:7b:e6:e8:ab:d7:
                    2d:6d:ac:aa:91:6a:97:13:47:90:44:ef:ec:da:f4:
                    c0:03:c7:2b:0a:47:2a:e8:85:9c:90:79:19:d9:f3:
                    e4:ac:f4:8e:8e:f0:2b:5e:08:63:75:b7:b4:14:8c:
                    ba:70:f6:68:a8:d2:98:f2:52:a4:e2:56:fe:10:8b:
                    a6:ea:1b:6d:0e:48:fc:2b:54:40:45:a3:15:0d:9f:
                    2c:b7:75:aa:f1:ed:e9:2e:71:43:7f:0a:b0:ee:de:
                    9f:8f:16:e7:5b:2a:80:1c:97:50:26:03:c9:11:0e:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2C:41:70:B8:CC:2F:F8:ED:64:1D:1F:38:DF:91:42:01:B0:83:77
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37392e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:62:41:5a:da:85:c1:c0:bf:e5:12:41:14:8e:ab:59:e5:8b:
         c0:6a:15:a8:5b:e0:dc:0d:76:7a:2e:73:86:b7:d1:15:8d:fe:
         77:de:25:75:bf:fd:fe:9c:46:ef:3c:2b:ed:a5:bc:54:5d:1d:
         7f:92:d7:92:4a:b6:ee:0d:39:de:e7:a3:a4:44:89:a2:04:e8:
         64:9c:36:0c:3c:0d:a4:ba:84:4e:bc:74:5c:3b:b7:ec:5f:06:
         64:ee:3f:5b:a8:04:41:a0:4c:13:3c:c7:73:09:51:c0:77:82:
         3a:60:05:5e:6c:59:03:6d:ee:b9:e4:cf:31:e5:c4:47:b2:33:
         e7:00:bb:19:a5:f6:2e:18:ac:01:a0:d5:0d:44:24:ed:1c:54:
         76:3b:ab:0c:f9:4b:4c:b2:ee:e2:8b:06:6d:a7:c5:01:42:93:
         27:d5:00:24:e5:db:ba:52:67:de:00:95:55:25:1b:1a:bd:ad:
         9c:f1:28:5a:7f:b7:fa:79:1e:4d:b7:75:58:b6:3c:41:5f:07:
         59:6b:11:ae:c1:b1:8f:45:8c:4f:2c:3b:3e:33:65:28:15:b4:
         23:db:d5:70:dc:44:43:68:6c:95:d4:c6:03:a3:8c:7c:00:07:
         3d:ae:fd:9d:33:47:14:1c:6b:1f:c8:15:4f:f6:66:ed:18:55:
         d5:ec:04:e9
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUNG0bvUjgTkVkluJ0/e6mOGXudNwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj
Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjYwMzI0MTMzMDU0WhcNMjcwMzIzMTMzNTU0
WjAzMTEwLwYDVQQDEyhEQzJDNDE3MEI4Q0MyRkY4RUQ2NDFEMUYzOERGOTE0MjAx
QjA4Mzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv78FunpdCQLA
MYYyjVboSuY4jeOXjHcWPUMMpAetWtpdsq2zq23KqJEMSW9fvNOf8t/bqWD5tkSr
EBlRfChx33VOjtWY76r/OGvs3MfOY6GU+CwItLhDfMjsMaRjvNtnqk8Gr311RIC4
6f7sMCvMhQyaDn/HHcWsxxilU+61XaTPwi3Gnp5zlnXP9Uk0+6Wye+boq9ctbayq
kWqXE0eQRO/s2vTAA8crCkcq6IWckHkZ2fPkrPSOjvArXghjdbe0FIy6cPZoqNKY
8lKk4lb+EIum6httDkj8K1RARaMVDZ8st3Wq8e3pLnFDfwqw7t6fjxbnWyqAHJdQ
JgPJEQ6/eQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNwsQXC4zC/47WQdHzjfkUIB
sIN3MB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv
REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0
YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmIy
ZGFiN2NjMGE5MS8wLzMyMzAzNDJlMzEzNDJlMzczOTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM1MzMzMzM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMDk8wDQYJKoZIhvcNAQELBQAD
ggEBAIViQVrahcHAv+USQRSOq1nli8BqFahb4NwNdnouc4a30RWN/nfeJXW//f6c
Ru88K+2lvFRdHX+S15JKtu4NOd7no6REiaIE6GScNgw8DaS6hE68dFw7t+xfBmTu
P1uoBEGgTBM8x3MJUcB3gjpgBV5sWQNt7rnkzzHlxEeyM+cAuxml9i4YrAGg1Q1E
JO0cVHY7qwz5S0yy7uKLBm2nxQFCkyfVACTl27pSZ94AlVUlGxq9rZzxKFp/t/p5
Hk23dVi2PEFfB1lrEa7BsY9FjE8sOz4zZSgVtCPb1XDcRENobJXUxgOjjHwABz2u
/Z0zRxQcax/IFU/2Zu0YVdXsBOk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:32:32 2026 by rpki-client