Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32332d3234203d3e20383334.roa
File:                     34352e34322e34322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          YLMfJqumWqnVcfsDeLSwmuU+muQN6LzV3ru75JUgtsc=
Subject key identifier:   7F:D5:69:CC:05:23:4A:03:5D:69:16:81:38:5C:96:6B:B5:DF:B6:EE
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       55C31C2DB7F7B358985A7FC64034B3B2D12C6C7E
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32332d3234203d3e20383334.roa
Signing time:             Wed 24 Jun 2026 09:05:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Wed 23 Jun 2027 09:05:12 +0000
asID:                     834
IP address blocks:        45.42.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 19:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c3:1c:2d:b7:f7:b3:58:98:5a:7f:c6:40:34:b3:b2:d1:2c:6c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Jun 23 09:05:12 2027 GMT
        Subject: CN=7FD569CC05234A035D691681385C966BB5DFB6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:65:6e:2f:e9:5b:da:c1:7e:a0:5b:59:63:69:
                    df:3e:29:a7:fa:06:6e:23:80:a4:d9:50:13:26:3c:
                    14:43:c7:0d:05:3a:4a:5a:57:b5:de:3f:0f:5a:2a:
                    5a:7e:34:1f:d4:a1:fd:59:9f:05:54:bb:1e:b7:b9:
                    74:48:8a:8e:e5:d3:48:9e:32:28:79:a1:bd:aa:c8:
                    12:76:6d:d8:12:f3:fd:6e:15:3b:6c:75:62:ec:73:
                    33:a9:b9:63:05:e1:e5:b1:05:29:a6:aa:c4:a8:e5:
                    f6:6f:f9:52:52:83:c0:f2:db:69:2c:58:22:fb:78:
                    ce:7e:6e:f6:7a:ad:17:1c:18:85:63:3c:7e:9d:d9:
                    5c:39:b9:66:60:11:54:7f:2e:f3:75:53:ac:b2:9c:
                    a9:4b:01:92:aa:72:87:1b:33:82:ab:53:9d:f7:46:
                    96:cf:96:1a:49:17:94:62:d7:ea:a9:8c:16:a2:21:
                    d0:6c:47:ab:93:f3:42:30:e0:ba:6b:72:b3:91:bb:
                    f5:36:21:43:78:17:7f:42:b9:2e:09:a6:28:a5:47:
                    e7:4f:60:e4:4b:9c:01:d7:6b:65:c5:65:57:54:d1:
                    4c:af:9e:a6:7b:f0:42:65:50:aa:98:f3:9f:8d:ca:
                    fb:ee:00:aa:91:25:9c:44:fa:93:4a:51:b3:2a:c8:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D5:69:CC:05:23:4A:03:5D:69:16:81:38:5C:96:6B:B5:DF:B6:EE
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:59:ab:fc:aa:c2:8c:c0:67:54:4b:87:f0:e3:7c:6b:68:3c:
         b7:2e:1f:1c:c4:6c:a0:2d:e1:0e:19:6f:2a:79:d4:ad:25:ed:
         a9:f7:58:03:a0:82:dc:7f:d3:e1:3e:df:a4:50:57:37:f8:03:
         43:22:cf:05:80:0e:8c:e1:9b:50:44:41:99:41:11:20:76:5f:
         1e:a2:44:b6:15:c1:bc:ed:8e:ed:55:52:ca:f1:a7:19:e1:3f:
         e6:94:15:3d:0c:34:1f:71:42:3b:f6:a9:dd:27:d7:ff:3c:7f:
         0b:0f:cd:7f:1a:07:b1:50:46:d5:ec:dc:21:73:25:f8:75:d7:
         21:0b:13:7c:d5:f9:58:66:b0:46:04:38:12:20:2c:82:e9:de:
         79:52:0a:55:65:ca:3f:1f:c7:99:08:b2:8a:53:44:9e:1e:9f:
         aa:25:54:3d:40:7c:55:33:4e:99:27:f0:68:73:fb:29:0c:5d:
         e0:bd:55:8c:67:d7:95:e8:cf:3f:18:f1:8f:d1:cb:4a:a5:d0:
         39:d2:45:aa:5b:83:19:43:c7:de:d7:34:25:3d:28:4a:eb:b2:
         4d:c9:35:b9:a6:33:5d:55:c7:47:52:d2:4f:16:72:be:ba:a3:
         5e:07:70:b7:f2:db:da:04:02:76:fb:e3:f6:74:e1:90:b8:d6:
         31:ce:af:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:06 2026 by rpki-client