Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20383334.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          GQrThXzQExmqNmGmnYBUiNGyd/C72o9W3jUPorPONjg=
Subject key identifier:   93:4B:05:CF:43:A1:CD:4B:26:46:73:64:7E:8B:D7:29:B3:36:EF:2E
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       22D1CAB6B3B97A7EAB88068F92C3BD8A9B8E30AA
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20383334.roa
Signing time:             Sat 15 Mar 2025 00:01:50 +0000
ROA not before:           Fri 14 Mar 2025 23:56:50 +0000
ROA not after:            Sat 14 Mar 2026 00:01:50 +0000
asID:                     834
IP address blocks:        45.135.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 09:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d1:ca:b6:b3:b9:7a:7e:ab:88:06:8f:92:c3:bd:8a:9b:8e:30:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Mar 14 23:56:50 2025 GMT
            Not After : Mar 14 00:01:50 2026 GMT
        Subject: CN=934B05CF43A1CD4B264673647E8BD729B336EF2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:75:ec:bb:34:13:76:6f:dc:4a:ab:fb:03:
                    6d:f1:38:16:a3:8a:74:cf:39:72:01:e6:00:98:eb:
                    e4:75:e1:cc:e7:74:51:d7:dd:04:34:02:7d:28:75:
                    a3:d6:4c:4b:f1:b9:3b:a2:01:c1:41:36:21:1e:22:
                    f7:12:05:b9:54:88:c8:b4:c1:94:e5:05:a2:75:ff:
                    be:09:14:9a:39:cf:14:4d:ba:b0:1e:22:11:b8:1f:
                    a2:11:60:08:96:e8:f9:b8:4e:bd:e3:4b:20:b6:14:
                    c4:7d:a4:86:0f:35:16:3b:f3:ff:cf:9f:3b:28:9d:
                    9c:65:61:bc:a0:a9:eb:6b:d7:ef:5f:7c:3b:34:a0:
                    e8:de:64:05:f4:83:a0:3b:21:f2:2d:ec:43:47:ed:
                    dd:ed:e5:dd:9b:90:8a:d4:dc:c9:69:2a:0f:dd:b0:
                    4b:71:45:51:12:29:48:cb:57:bd:24:1b:fb:8e:1a:
                    ed:d8:ca:25:74:f5:ec:85:c4:77:7d:a5:4b:35:7f:
                    20:a4:f9:1b:e3:f8:23:c6:99:a8:b8:b3:7e:4e:86:
                    60:4e:7b:20:89:96:4f:c9:ed:5d:29:ef:fe:4d:3f:
                    af:99:7a:3b:6f:25:cf:30:8f:e6:71:78:44:89:61:
                    40:c7:8e:df:0f:4e:32:2a:96:e5:37:57:15:67:c0:
                    be:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4B:05:CF:43:A1:CD:4B:26:46:73:64:7E:8B:D7:29:B3:36:EF:2E
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:cb:07:15:80:f0:69:56:f7:f4:bd:b1:d7:2c:db:65:0e:53:
         df:27:0a:e3:96:a0:f2:af:9d:83:a1:20:fa:62:75:29:af:a3:
         60:be:33:2b:91:e8:0a:3a:1e:c1:36:ff:a0:55:8d:b6:a5:19:
         7b:3d:82:9c:4a:86:b9:40:97:f2:7c:58:97:65:c2:d1:56:dd:
         a7:e7:6b:33:4e:99:97:2d:d5:56:ce:e6:0e:aa:42:3b:0c:63:
         87:98:31:6e:af:80:75:99:42:3b:7a:0c:29:dc:0a:50:7c:49:
         dc:91:24:22:ce:b1:e5:b3:ea:79:96:8f:ea:41:89:bb:b7:2c:
         95:3c:c7:04:7d:bd:99:a7:d5:02:78:4b:5c:c1:ed:0a:00:b4:
         e6:24:3a:7b:4e:78:b7:ab:8b:85:0a:3c:62:c6:25:d9:a9:57:
         c8:1c:62:cb:92:a9:2c:0a:06:84:28:f0:67:a2:e8:69:ec:84:
         77:22:9d:d3:9b:1b:34:87:ea:11:71:00:a7:d3:2b:7a:34:96:
         e8:b9:50:ff:21:ba:bd:47:26:65:9b:ba:fe:2d:9e:b2:05:92:
         73:9f:98:fa:2d:40:22:de:99:f5:1a:b5:66:49:cd:08:46:69:
         45:e0:b2:9c:58:0d:74:17:38:44:61:80:bf:2b:de:5a:ba:3b:
         5b:f5:ec:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:59:57 2025 by rpki-client