Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e2038323230.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e2038323230.roa (raw, json)
Hash identifier:          UuwVYQwzfFDsYo/TgF8Q+5iHIOBi+2ajzgzGq2fPKuc=
Subject key identifier:   23:BD:7D:16:84:32:D9:65:63:7B:9D:D0:C3:5F:6E:68:3B:1A:42:51
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5A2E24A35C6D7BACB10B4988858198910879EB1F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e2038323230.roa
Signing time:             Fri 03 Jul 2026 06:07:57 +0000
ROA not before:           Fri 03 Jul 2026 06:02:57 +0000
ROA not after:            Fri 02 Jul 2027 06:07:57 +0000
asID:                     8220
IP address blocks:        45.135.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2e:24:a3:5c:6d:7b:ac:b1:0b:49:88:85:81:98:91:08:79:eb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul  3 06:02:57 2026 GMT
            Not After : Jul  2 06:07:57 2027 GMT
        Subject: CN=23BD7D168432D965637B9DD0C35F6E683B1A4251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:34:4f:f1:45:64:79:28:12:ca:8b:e1:d7:
                    c4:8e:3d:10:9b:1c:60:a9:db:48:2c:2f:bd:08:5e:
                    7e:6b:c8:2e:e4:d2:9c:b9:82:0b:c2:7a:e6:80:3e:
                    64:a3:ed:e5:6d:b3:40:45:eb:f8:9f:c7:f7:8a:7e:
                    da:16:ef:57:5f:39:0e:d8:7e:bd:f0:98:ec:bb:b4:
                    71:fd:a7:25:c1:a8:77:a4:13:cc:c4:43:fc:0e:f2:
                    82:1d:0b:fe:3f:2f:4c:4f:52:17:a7:d6:98:ad:b4:
                    5a:aa:a0:06:99:78:a9:64:4b:0d:c5:05:6b:64:f5:
                    0e:be:db:fb:35:a1:a1:09:de:10:b9:be:cd:7f:ba:
                    47:ef:bc:46:9d:99:e7:17:4d:21:bb:3b:3a:b5:9c:
                    c9:3d:d5:f0:52:0f:09:a1:ce:8e:15:87:ed:fb:29:
                    31:f0:9f:00:f8:e9:c9:5a:a4:37:67:ee:5d:3f:b4:
                    f9:34:3c:80:9c:aa:33:d5:07:22:e0:22:6e:14:5e:
                    c8:0c:8d:e9:18:c1:d4:5d:11:7d:88:ef:0c:4a:87:
                    be:06:3f:af:49:2c:04:5a:3b:06:54:77:87:a9:ef:
                    af:7c:e2:40:f8:09:8e:bf:f2:5c:6a:93:21:99:8d:
                    3c:9f:4f:16:6c:8c:13:58:7e:4b:65:b2:17:6d:29:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:7D:16:84:32:D9:65:63:7B:9D:D0:C3:5F:6E:68:3B:1A:42:51
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e2038323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:f5:1d:47:f8:04:00:77:f7:9a:6b:5e:ff:1e:68:02:aa:f6:
         f1:af:5a:e5:77:c6:36:55:97:cc:0a:dd:c0:29:c5:60:4f:6e:
         11:b1:2b:6c:4f:51:23:6c:71:9f:ad:6e:cf:6c:19:9c:51:6b:
         73:7a:24:a1:1a:2f:1a:ce:2b:3a:8d:14:22:e0:36:eb:59:92:
         ef:4a:17:5b:50:b4:b3:a5:07:06:aa:5b:fb:77:1c:4c:e3:20:
         6d:3b:81:91:cb:1d:b0:5b:38:f4:52:45:16:4f:32:c9:af:b8:
         dd:36:77:1b:9e:94:3b:0e:07:77:44:01:4a:22:1e:90:80:b1:
         7f:90:ca:58:e3:de:52:5e:1d:89:d4:e5:a5:02:4f:06:08:62:
         f6:fc:f9:22:17:39:ee:35:28:44:1b:ed:b7:48:b6:a0:31:03:
         7e:f9:5e:91:8b:62:f8:b2:73:fe:45:63:be:c5:b8:9d:8b:a8:
         25:0e:92:a1:5d:11:53:17:50:25:c1:0b:9c:03:b9:1a:d2:8d:
         9e:c1:b6:00:7e:fa:50:b8:27:33:bd:ec:35:9c:d3:54:ad:a1:
         c9:d8:25:a9:88:06:3f:33:ba:09:e7:c5:d8:24:d2:09:4c:7b:
         e5:c9:92:12:d7:50:8f:1b:f8:d2:6d:8c:41:16:84:ca:ce:a1:
         c6:77:44:48
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUWi4ko1xte6yxC0mIhYGYkQh56x8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNzAzMDYwMjU3WhcNMjcwNzAyMDYwNzU3
WjAzMTEwLwYDVQQDEygyM0JEN0QxNjg0MzJEOTY1NjM3QjlERDBDMzVGNkU2ODNC
MUE0MjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQc0T/FFZHko
EsqL4dfEjj0QmxxgqdtILC+9CF5+a8gu5NKcuYILwnrmgD5ko+3lbbNARev4n8f3
in7aFu9XXzkO2H698Jjsu7Rx/aclwah3pBPMxEP8DvKCHQv+Py9MT1IXp9aYrbRa
qqAGmXipZEsNxQVrZPUOvtv7NaGhCd4Qub7Nf7pH77xGnZnnF00huzs6tZzJPdXw
Ug8Joc6OFYft+ykx8J8A+OnJWqQ3Z+5dP7T5NDyAnKoz1Qci4CJuFF7IDI3pGMHU
XRF9iO8MSoe+Bj+vSSwEWjsGVHeHqe+vfOJA+AmOv/JcapMhmY08n08WbIwTWH5L
ZbIXbSkhzwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCO9fRaEMtllY3ud0MNfbmg7
GkJRMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzM0MzUyZTMxMzMzNTJlMzEzNjMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzgzMjMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAth6AwDQYJKoZIhvcNAQELBQAD
ggEBAJj1HUf4BAB395prXv8eaAKq9vGvWuV3xjZVl8wK3cApxWBPbhGxK2xPUSNs
cZ+tbs9sGZxRa3N6JKEaLxrOKzqNFCLgNutZku9KF1tQtLOlBwaqW/t3HEzjIG07
gZHLHbBbOPRSRRZPMsmvuN02dxuelDsOB3dEAUoiHpCAsX+Qyljj3lJeHYnU5aUC
TwYIYvb8+SIXOe41KEQb7bdItqAxA375XpGLYviyc/5FY77FuJ2LqCUOkqFdEVMX
UCXBC5wDuRrSjZ7BtgB++lC4JzO97DWc01StocnYJamIBj8zugnnxdgk0glMe+XJ
khLXUI8b+NJtjEEWhMrOocZ3REg=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:19 2026 by rpki-client