Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203331373838.roa
File:                     34352e34322e34342e302f32342d3234203d3e203331373838.roa (raw, json)
Hash identifier:          BlzpGfHO67JWDLtHElr+vhW5/cqT1u5FD7lVtF/e01k=
Subject key identifier:   AA:A2:6A:FE:33:93:33:F7:08:34:E2:F4:97:91:C8:13:5E:04:42:C6
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       40015F03ADC4FE212BD7883B9483EDE3AD73F9D9
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203331373838.roa
Signing time:             Mon 07 Jul 2025 15:45:48 +0000
ROA not before:           Mon 07 Jul 2025 15:40:48 +0000
ROA not after:            Mon 06 Jul 2026 15:45:48 +0000
asID:                     31788
IP address blocks:        45.42.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:01:5f:03:ad:c4:fe:21:2b:d7:88:3b:94:83:ed:e3:ad:73:f9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jul  7 15:40:48 2025 GMT
            Not After : Jul  6 15:45:48 2026 GMT
        Subject: CN=AAA26AFE339333F70834E2F49791C8135E0442C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7a:ad:1d:14:9b:d1:e1:d7:db:72:8b:5d:92:
                    8a:2f:62:84:d6:68:17:2e:a1:88:4c:2f:2a:8a:d7:
                    9b:77:e9:dd:4f:ce:15:63:99:99:6d:61:61:3a:69:
                    d9:a6:5e:fc:95:6b:4f:76:89:25:fb:ed:27:98:d4:
                    9d:e2:57:5a:3b:98:03:fc:f7:4b:44:33:2f:c4:ee:
                    11:cd:5a:11:ed:4f:bf:7f:c0:17:5e:69:f4:bc:bd:
                    2f:57:5a:f4:57:ea:ec:eb:fc:da:47:0c:e4:cf:2d:
                    38:dd:ce:f1:13:9f:3b:7e:27:ff:0b:43:6d:be:a3:
                    f9:a1:92:8c:ec:32:47:97:d4:c2:78:32:85:fb:0d:
                    42:ef:25:7e:ad:e2:73:58:4e:79:e4:df:fa:b4:e0:
                    16:a5:e2:6f:39:bf:a6:19:eb:21:0f:e3:2e:14:42:
                    8f:41:41:03:80:fc:b1:81:2b:23:30:ea:a1:96:ac:
                    bf:1e:54:5b:a4:4e:ae:c4:71:33:00:06:f0:98:81:
                    ca:f6:0f:d5:a7:92:44:c0:77:89:71:a5:f0:2f:11:
                    5d:7a:09:f8:ef:10:e0:ba:b8:d0:af:61:57:0c:50:
                    dc:d5:81:dd:e3:1d:fc:ca:ae:20:95:15:92:d2:32:
                    45:f0:ba:a9:bb:ce:96:c6:2b:d0:18:ff:84:6b:ee:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A2:6A:FE:33:93:33:F7:08:34:E2:F4:97:91:C8:13:5E:04:42:C6
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34342e302f32342d3234203d3e203331373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:68:af:db:46:2d:99:f4:a3:ea:6c:82:48:c3:8f:a4:fe:
         48:fd:30:fe:05:cc:25:70:92:73:4a:6d:56:e0:86:ea:dd:6e:
         0a:b9:63:71:39:7c:88:c7:c3:22:79:e9:ce:25:b4:5b:2a:de:
         1b:d1:55:0d:98:e1:c7:cd:a9:3f:0c:ff:54:63:5a:45:24:b5:
         27:9d:f6:b5:32:27:51:00:db:32:82:1f:99:f2:24:0e:fc:5a:
         f8:ac:74:0e:41:f0:a0:a5:05:dc:cd:ec:93:df:25:69:1a:15:
         b0:14:bf:25:69:ba:58:83:07:2e:8c:3d:6d:50:81:37:33:63:
         47:77:84:d8:f3:04:c0:6e:25:74:11:d5:1f:3a:a4:5e:fe:a5:
         07:ed:52:df:5f:54:0b:34:0a:84:34:0a:25:8c:f2:45:32:bd:
         71:b2:a8:f1:2f:72:bd:25:de:b3:b0:0f:b0:32:b6:3c:93:81:
         0f:c7:13:7d:86:32:4b:91:c4:4d:19:d8:e3:b7:00:f7:96:d5:
         40:12:9b:d6:10:6c:a9:51:04:b1:ee:27:2e:b4:15:3e:4e:fb:
         47:b6:ef:f8:01:e3:3b:0f:8e:a9:f5:8e:2a:bd:ef:5f:56:8f:
         5d:8e:94:38:c3:95:77:19:44:9b:89:9c:74:a5:01:1a:cd:a9:
         72:a7:1e:63
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUQAFfA63E/iEr14g7lIPt461z+dkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjUwNzA3MTU0MDQ4WhcNMjYwNzA2MTU0NTQ4
WjAzMTEwLwYDVQQDEyhBQUEyNkFGRTMzOTMzM0Y3MDgzNEUyRjQ5NzkxQzgxMzVF
MDQ0MkM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXqtHRSb0eHX
23KLXZKKL2KE1mgXLqGITC8qitebd+ndT84VY5mZbWFhOmnZpl78lWtPdokl++0n
mNSd4ldaO5gD/PdLRDMvxO4RzVoR7U+/f8AXXmn0vL0vV1r0V+rs6/zaRwzkzy04
3c7xE587fif/C0NtvqP5oZKM7DJHl9TCeDKF+w1C7yV+reJzWE555N/6tOAWpeJv
Ob+mGeshD+MuFEKPQUEDgPyxgSsjMOqhlqy/HlRbpE6uxHEzAAbwmIHK9g/Vp5JE
wHeJcaXwLxFdegn47xDgurjQr2FXDFDc1YHd4x38yq4glRWS0jJF8Lqpu86WxivQ
GP+Ea+7gpwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKqiav4zkzP3CDTi9JeRyBNe
BELGMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMzMzEzNzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKiwwDQYJKoZIhvcNAQELBQADggEB
ABEOaK/bRi2Z9KPqbIJIw4+k/kj9MP4FzCVwknNKbVbghurdbgq5Y3E5fIjHwyJ5
6c4ltFsq3hvRVQ2Y4cfNqT8M/1RjWkUktSed9rUyJ1EA2zKCH5nyJA78WvisdA5B
8KClBdzN7JPfJWkaFbAUvyVpuliDBy6MPW1QgTczY0d3hNjzBMBuJXQR1R86pF7+
pQftUt9fVAs0CoQ0CiWM8kUyvXGyqPEvcr0l3rOwD7AytjyTgQ/HE32GMkuRxE0Z
2OO3APeW1UASm9YQbKlRBLHuJy60FT5O+0e27/gB4zsPjqn1jiq9719Wj12OlDjD
lXcZRJuJnHSlARrNqXKnHmM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 22:01:47 2025 by rpki-client