Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46450.roa
File:                     AS46450.roa (raw, json)
Hash identifier:          uEW8i/mrlcLpQ4oNuEwwabXeHeJRg95gWh4O9b5pIio=
Subject key identifier:   2D:63:D4:27:48:E8:2C:BD:AE:C7:87:80:B6:CC:CD:AF:47:A6:7D:2E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2709549926054B3C7B10BFA46ED23F62D087B41A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46450.roa
Signing time:             Wed 10 Sep 2025 13:05:12 +0000
ROA not before:           Wed 10 Sep 2025 13:00:12 +0000
ROA not after:            Wed 09 Sep 2026 13:05:12 +0000
asID:                     46450
IP address blocks:        64.50.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:09:54:99:26:05:4b:3c:7b:10:bf:a4:6e:d2:3f:62:d0:87:b4:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 10 13:00:12 2025 GMT
            Not After : Sep  9 13:05:12 2026 GMT
        Subject: CN=2D63D42748E82CBDAEC78780B6CCCDAF47A67D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:06:83:d0:fa:6a:d5:80:d2:82:f8:04:69:
                    9d:2b:25:8c:e6:88:c2:f8:17:b1:18:1d:58:a2:a6:
                    fc:e2:d2:99:32:04:c4:d0:1a:4c:b0:31:03:e9:16:
                    31:14:6c:e1:92:87:54:31:82:90:a1:2f:5b:80:d5:
                    0a:d7:18:53:3f:aa:ae:6c:9a:e9:20:b0:46:08:01:
                    13:8e:a9:2e:09:13:8c:60:cf:06:77:9e:3b:cb:73:
                    2c:b6:6c:05:87:f6:c2:a8:0c:9b:94:ae:5b:ab:5d:
                    59:da:6c:82:4d:9f:7a:88:c2:58:ac:71:fb:ed:dd:
                    9b:75:37:0b:82:e8:08:da:76:2f:8d:b1:bb:80:fa:
                    70:08:f6:96:70:ce:b9:4e:3b:2d:7f:20:ca:06:7e:
                    22:7d:81:ce:eb:a5:25:c5:17:35:dc:c9:e2:b9:ae:
                    8b:b9:47:31:02:e0:1c:31:f8:80:0a:e9:9b:97:3c:
                    3b:ef:64:8a:2a:64:9b:1a:fa:56:18:7a:56:fa:ad:
                    b9:b4:fb:85:85:33:d7:16:91:c7:2d:5c:1a:09:93:
                    64:08:e6:37:ce:ed:9d:ca:d7:3a:10:3f:4d:ea:de:
                    8c:e0:bb:6f:08:68:f9:dd:31:0e:56:1f:27:81:ec:
                    3b:ed:75:56:d1:99:3a:d6:1d:e0:c3:de:28:7b:52:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:63:D4:27:48:E8:2C:BD:AE:C7:87:80:B6:CC:CD:AF:47:A6:7D:2E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS46450.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:25:b3:55:8a:1c:3d:c4:6f:44:9b:ab:7e:5b:e9:28:a1:69:
         17:fd:57:f3:5b:14:25:c7:0e:d3:1f:50:9c:59:44:23:99:69:
         6c:d6:2b:a0:5e:0b:47:6d:af:af:23:4c:ec:98:6a:30:cc:a8:
         eb:f5:2d:25:ba:27:a6:1b:c6:f0:64:94:13:2c:52:94:68:60:
         82:a1:83:2f:13:6a:be:2d:ec:3f:08:d6:a6:a5:ed:52:d0:2b:
         42:1a:d6:cf:32:8b:91:ae:67:2d:b8:b0:37:9d:c5:94:1f:8c:
         0c:05:3f:49:a6:95:d6:1d:b0:b7:15:eb:15:cc:cb:66:a5:c9:
         70:b6:f9:26:9f:00:0d:4b:78:fe:ef:5c:22:4a:d1:91:c6:ea:
         75:9b:f1:e3:e6:b8:c9:9b:9f:11:8b:7c:6a:78:e6:90:17:71:
         af:13:a0:7e:31:b9:e5:11:0d:a7:9b:9b:1b:12:e5:64:c0:28:
         08:d7:fa:8d:d5:d3:fd:0a:a2:fd:b9:c6:5b:45:42:06:1d:a4:
         49:4e:97:02:95:f5:df:e8:4b:7b:7d:52:40:89:65:f5:69:f0:
         b8:c4:2c:86:7a:01:9f:b2:a6:72:76:12:62:a7:21:1d:95:d5:
         ca:92:68:83:6a:1e:83:0d:e0:1e:e3:8e:50:7f:66:23:87:72:
         2a:f1:f5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:39:18 2025 by rpki-client