Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/34352e35392e3135322e302f32322d3232203d3e20323039313039.roa
File:                     34352e35392e3135322e302f32322d3232203d3e20323039313039.roa (raw, json)
Hash identifier:          D1rBE7uExpIowPa7x9LcLPMfEeum810WyWeetPiYVAg=
Subject key identifier:   16:30:24:2F:1C:69:35:7A:7B:29:01:D9:BB:12:F7:FC:2E:09:AB:CF
Certificate issuer:       /CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
Certificate serial:       2B3870F2BA0F8D968709E4487BAAB81D026245C0
Authority key identifier: 31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/34352e35392e3135322e302f32322d3232203d3e20323039313039.roa
Signing time:             Wed 07 Oct 2026 13:34:45 +0000
ROA not before:           Wed 07 Oct 2026 13:29:45 +0000
ROA not after:            Wed 06 Oct 2027 13:34:45 +0000
asID:                     209109
IP address blocks:        45.59.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/15838c48-cf11-45c4-8e0b-0455f2640cd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 00:11:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:70:f2:ba:0f:8d:96:87:09:e4:48:7b:aa:b8:1d:02:62:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9371e706db917120354ce162e131307448d445d3bda534e4
        Validity
            Not Before: Oct  7 13:29:45 2026 GMT
            Not After : Oct  6 13:34:45 2027 GMT
        Subject: CN=1630242F1C69357A7B2901D9BB12F7FC2E09ABCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:60:6d:31:17:7c:f9:b7:4e:3f:3a:80:d8:
                    5d:11:4d:0f:4c:12:1c:9e:6c:25:7a:84:d3:dd:19:
                    c9:87:5b:ec:69:0c:32:9c:0d:cb:51:24:50:02:94:
                    04:81:6a:a8:b3:25:ed:95:5d:59:db:c7:24:c7:93:
                    60:3d:4e:f4:8b:01:d9:d3:69:67:83:80:72:06:6c:
                    0d:9d:ee:e1:ba:a8:c7:a7:d5:db:d3:55:bd:56:40:
                    10:be:8f:55:dd:33:7e:b3:18:60:ee:34:73:a7:c2:
                    28:40:56:06:ba:9a:bc:9e:46:07:e9:41:d3:7b:70:
                    4b:0f:e7:c5:f5:01:59:93:f8:aa:68:56:b7:dd:a9:
                    c4:9e:a4:fb:4a:43:bb:21:5c:08:c1:73:63:26:ca:
                    07:d3:1c:69:a0:48:2b:ba:92:dd:f1:d1:aa:4e:93:
                    b1:2a:dc:b2:2c:ef:3c:30:61:08:bf:0d:2e:da:5c:
                    28:c7:ac:4d:74:e2:cb:9f:01:bd:b9:cf:a1:24:8b:
                    cb:fe:68:97:7f:e1:17:9d:49:22:22:aa:09:ff:08:
                    08:91:a5:0b:ad:6a:33:92:8b:df:dc:1f:c6:97:61:
                    80:c8:7c:ea:a6:89:56:8b:5a:87:9d:fe:4e:41:cd:
                    59:fc:e3:0f:86:27:0a:35:76:db:71:01:47:1f:5e:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:24:2F:1C:69:35:7A:7B:29:01:D9:BB:12:F7:FC:2E:09:AB:CF
            X509v3 Authority Key Identifier:
                keyid:31:8A:31:E0:F9:B2:FD:58:4D:99:4E:84:8E:7E:81:7C:CC:91:52:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/318A31E0F9B2FD584D994E848E7E817CCC9152AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/15838c48-cf11-45c4-8e0b-0455f2640cd9/5d9371e706db917120354ce162e131307448d445d3bda534e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/1/34352e35392e3135322e302f32322d3232203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:fd:82:77:4f:6b:74:e3:18:cb:7b:0f:4a:96:53:67:03:2f:
         ae:d5:5a:d3:c2:51:26:fd:85:5e:37:50:53:e9:91:3a:cf:ef:
         18:52:f0:1f:68:3e:18:39:a7:3d:65:2a:cf:87:91:74:fa:a8:
         2c:ef:b3:27:2f:64:99:0a:9c:07:12:76:b1:d4:82:ef:85:c6:
         7e:15:12:f6:3f:7c:f6:08:71:16:01:d1:52:2c:2d:17:d4:a6:
         cc:36:84:33:62:e4:52:3e:6b:9f:f9:ab:e1:cf:2b:08:d4:4f:
         08:5a:19:a2:c4:18:3f:d9:6d:11:97:61:e2:64:f0:b5:02:d5:
         42:05:2f:d9:0e:7e:25:97:b6:53:3c:a1:a7:5c:10:23:0b:a0:
         2c:73:11:c6:f1:98:e2:c5:05:f5:8a:5b:0d:c9:3c:8b:d1:0b:
         2e:3a:8b:83:19:54:51:42:63:0e:e4:05:8f:fd:f8:32:c0:51:
         32:17:44:f4:3d:e0:a7:5f:db:a9:72:79:e3:9c:8d:9f:02:03:
         a6:c8:96:cd:d7:98:18:b9:77:6a:96:9b:d5:e5:91:36:b0:3f:
         a4:54:f4:95:ec:f4:97:ac:8b:15:81:55:60:50:77:7e:11:f8:
         48:08:26:e2:6c:42:ee:9d:af:ff:70:d8:98:24:03:8e:98:d2:
         a2:1d:19:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:07:08 2026 by rpki-client