Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203233343730.roa
File:                     34352e34322e34322e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          EuXe761tB7uM2mqqePF2VsjF4nHHdQJAlxtBeut2ecQ=
Subject key identifier:   C3:1C:99:44:54:2A:55:CD:44:16:F9:B1:89:4C:77:1C:B1:0F:43:36
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       303FA561CA730B9BFF1E863899664DEA6AD3FF7F
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 10 Sep 2025 18:57:55 +0000
ROA not before:           Wed 10 Sep 2025 18:52:55 +0000
ROA not after:            Wed 09 Sep 2026 18:57:55 +0000
asID:                     23470
IP address blocks:        45.42.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3f:a5:61:ca:73:0b:9b:ff:1e:86:38:99:66:4d:ea:6a:d3:ff:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Sep 10 18:52:55 2025 GMT
            Not After : Sep  9 18:57:55 2026 GMT
        Subject: CN=C31C9944542A55CD4416F9B1894C771CB10F4336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:32:37:1a:08:52:bc:29:2d:6f:0c:8b:05:13:
                    2b:67:c5:b5:95:7f:4e:ab:57:d9:93:17:50:96:a3:
                    9a:54:58:62:42:0c:c8:c4:88:36:18:b5:3d:30:8b:
                    93:6c:ab:f9:84:6d:55:a4:ae:9b:46:14:c3:7a:23:
                    7d:fa:6c:55:38:dd:7e:bb:7f:5d:6c:37:78:6d:91:
                    25:ba:bc:3b:91:9c:6e:d7:63:be:26:b5:bc:63:b6:
                    47:fa:ec:ba:74:bb:c8:2f:25:b0:0a:d3:7d:a8:c7:
                    d5:19:bd:6c:7b:29:2e:b9:77:3f:9c:5a:a7:d3:d7:
                    e3:9b:b2:9d:ae:a2:3c:5f:46:b3:d5:3a:f5:dc:7c:
                    4c:af:77:66:27:e1:63:f8:63:29:c2:14:b2:46:67:
                    71:0f:82:8c:51:4d:59:5c:1d:10:da:fb:cb:1d:79:
                    bd:86:11:46:b0:6a:7d:ec:c5:23:33:32:da:66:18:
                    38:28:a2:05:bc:5d:b8:5b:5e:98:e2:3c:94:fc:ed:
                    a2:84:19:d9:03:f0:93:86:99:c4:5e:c8:6c:98:fc:
                    5c:1f:64:48:30:0f:e6:43:c0:43:42:85:c7:55:c7:
                    2e:0e:d8:02:b9:25:e2:37:09:3e:f8:47:a8:bf:18:
                    b1:bd:c0:d4:44:02:9b:ba:97:e6:9e:b6:d1:f8:b3:
                    e1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1C:99:44:54:2A:55:CD:44:16:F9:B1:89:4C:77:1C:B1:0F:43:36
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:aa:9e:e2:d9:9d:d7:00:72:2c:18:75:82:a3:e4:5e:df:ff:
         e2:61:e6:08:09:73:4d:55:df:45:a5:54:b8:24:5b:65:86:4a:
         da:05:5a:08:5c:ba:3e:cb:bf:46:c5:88:83:6f:33:b7:13:6c:
         a5:45:0d:e7:22:fb:af:0f:49:fb:ee:3d:16:7b:94:ea:6a:de:
         67:28:07:51:b9:d8:91:b3:3c:c3:09:9c:23:77:8c:18:99:41:
         57:0f:2f:e6:29:6c:f3:af:33:dd:8e:84:62:78:92:70:34:4e:
         5e:6c:68:e9:2f:98:d8:b5:b1:2c:00:95:07:f0:ef:d4:c3:42:
         4c:b0:79:eb:c9:0c:54:6a:d1:8d:36:b5:2c:a5:2e:3d:7e:62:
         00:83:d3:e7:1b:d9:b9:a7:85:d4:a2:36:99:89:58:34:32:db:
         eb:84:f4:64:69:4e:7b:a9:c8:01:dc:2e:5b:dc:11:42:94:9f:
         de:45:87:70:eb:ae:4a:54:bb:3e:70:2e:69:8c:e0:1c:5b:d0:
         a9:c2:12:24:b2:83:59:51:8e:d2:18:02:52:a8:e9:7b:06:6e:
         e6:7e:6a:d5:dd:b9:ab:2a:fa:4f:69:77:51:99:14:f3:c0:9a:
         8c:7f:da:2d:61:ea:ba:55:4a:6b:8b:55:88:82:12:bd:a6:d4:
         06:f0:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:59:39 2025 by rpki-client