Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e2039333034.roa
File:                     34352e3135302e35332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          LH0UkwopsSjt+B8Vh/g3YdjRp3Ce1nOGkRsRLT7w+7k=
Subject key identifier:   85:16:CA:BE:9D:B3:20:AB:84:37:F9:57:8C:E5:3E:53:48:84:38:A1
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       055272B61E1758E6C182CFBC77FE74D8DAC220BE
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 30 Sep 2025 13:43:42 +0000
ROA not before:           Tue 30 Sep 2025 13:38:42 +0000
ROA not after:            Tue 29 Sep 2026 13:43:42 +0000
asID:                     9304
IP address blocks:        45.150.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 17:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:72:b6:1e:17:58:e6:c1:82:cf:bc:77:fe:74:d8:da:c2:20:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep 30 13:38:42 2025 GMT
            Not After : Sep 29 13:43:42 2026 GMT
        Subject: CN=8516CABE9DB320AB8437F9578CE53E53488438A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:62:09:00:fd:0b:d1:40:41:9a:4b:53:6c:
                    b5:02:c4:4f:bc:85:57:ce:17:49:62:d6:30:3f:cc:
                    e0:84:8f:6d:c5:54:71:8b:ad:cb:dd:b0:fd:aa:42:
                    be:e2:b4:8b:4e:29:2a:31:c8:45:33:94:aa:c8:fa:
                    bd:99:52:34:17:5e:ea:8e:f2:47:d6:d9:04:77:21:
                    b1:95:84:69:0a:6d:e7:e3:3e:a6:d4:b7:b6:af:fb:
                    95:9e:31:ed:3c:6a:90:71:6f:ed:d5:39:d1:60:f0:
                    10:06:26:ab:14:dd:72:fe:3d:3f:80:d4:b6:4b:61:
                    3a:93:7f:e2:5c:b8:58:ef:af:0f:48:25:24:83:27:
                    b3:30:e6:c9:0d:a0:6d:0c:36:c9:eb:e6:97:8c:19:
                    e8:52:82:ea:9f:85:57:6c:f8:fd:e3:7b:40:12:b4:
                    36:42:54:58:0e:96:03:72:72:57:17:b1:ce:d2:62:
                    88:ca:a6:43:ed:44:76:28:d9:3b:7f:d8:bc:b6:6a:
                    29:0a:88:fb:d8:85:d7:3a:e3:b6:63:1a:64:cf:d9:
                    6b:ab:4c:83:79:9b:e3:ec:91:96:5d:b6:c9:2a:53:
                    32:fc:f4:2f:34:94:d3:1d:2a:29:87:81:ab:0e:3c:
                    17:89:31:cd:3d:5a:13:a7:4f:ad:ce:5c:d8:fd:48:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:16:CA:BE:9D:B3:20:AB:84:37:F9:57:8C:E5:3E:53:48:84:38:A1
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:86:05:c6:8c:97:7a:c0:c4:cc:92:dd:8d:24:c3:b4:bd:
         d8:1e:02:fd:72:56:5a:b5:2b:87:f0:a4:f3:35:46:43:5b:5d:
         7d:0a:9a:b8:4f:60:91:f6:30:af:a3:00:cc:f5:d4:a1:9b:61:
         01:47:41:69:a5:58:6f:9c:87:2d:43:fd:9d:ff:bc:4e:61:15:
         91:5d:eb:ca:8a:ea:11:e3:63:b3:3f:19:1c:0b:f7:d4:bd:28:
         27:ff:39:a3:20:36:25:de:09:4c:71:03:94:f2:e5:73:c9:bb:
         a9:f7:93:19:41:3d:05:10:cb:b0:b5:41:60:f3:37:cc:63:2e:
         47:5a:bc:22:97:69:43:e4:46:54:a0:46:97:c2:16:09:27:71:
         7a:11:8b:20:19:7d:6e:c9:ae:23:d4:eb:02:96:2a:ce:80:16:
         73:c2:74:17:cb:10:4f:75:ff:7c:16:56:ef:9b:b9:32:36:e1:
         8e:15:f5:f0:3e:2a:ad:fa:f0:cc:ac:8f:f5:6d:74:c1:b0:c4:
         23:1c:4d:64:8e:bd:d4:90:99:94:f8:63:93:ce:4d:2a:9a:4e:
         78:a1:39:ff:af:39:3d:96:d0:92:9e:fe:c5:e1:ec:10:40:e2:
         e7:6e:db:de:23:85:ca:0e:7b:02:30:b4:fa:0d:df:73:b3:b6:
         a0:d6:9a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 00:59:10 2025 by rpki-client