Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e2036303739.roa
File:                     34352e34322e34352e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          vomxni8ey7U7bgyhZSR2BXeSxkGUuwd4knUrmAyhrHs=
Subject key identifier:   93:6B:06:C0:43:02:37:92:83:CB:B8:6F:63:08:4B:43:AA:91:FA:AF
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       52C70410173DB4A7767FDC8AAED34F7E21BC3836
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 17 Mar 2025 18:52:45 +0000
ROA not before:           Mon 17 Mar 2025 18:47:45 +0000
ROA not after:            Mon 16 Mar 2026 18:52:45 +0000
asID:                     6079
IP address blocks:        45.42.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 09:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:c7:04:10:17:3d:b4:a7:76:7f:dc:8a:ae:d3:4f:7e:21:bc:38:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Mar 17 18:47:45 2025 GMT
            Not After : Mar 16 18:52:45 2026 GMT
        Subject: CN=936B06C04302379283CBB86F63084B43AA91FAAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:8e:33:a9:87:d9:c1:55:bf:e8:b6:d1:a4:
                    c8:96:b1:f3:bf:a8:41:37:03:7a:68:3b:05:22:a6:
                    b6:74:29:3a:59:b9:02:d9:af:59:4a:39:f3:2e:c6:
                    66:54:4c:4a:66:49:8c:fe:c1:e1:2c:5c:27:51:dd:
                    40:a6:f8:9b:88:43:bf:e5:2a:3e:62:67:9f:df:ee:
                    f1:80:b4:a3:c3:1c:f3:f4:57:61:17:30:7b:56:09:
                    b6:b9:a2:2e:5e:e4:a1:a4:a0:aa:15:b8:74:65:00:
                    d1:c8:9f:a3:82:0e:3f:20:17:5b:70:a1:a9:a9:6a:
                    68:ee:26:bf:be:80:eb:a4:91:69:eb:a5:07:30:20:
                    ee:91:a9:e5:4c:ce:c5:d1:52:b4:c7:e5:a7:55:99:
                    e7:ef:34:85:b3:db:59:ed:2a:7a:7c:d4:0d:91:d8:
                    e2:a2:ad:d7:93:04:06:9b:06:28:3d:33:bd:59:e7:
                    7a:48:fb:47:f5:60:19:a9:47:04:5f:81:67:d2:92:
                    19:17:63:e4:57:43:14:b7:ea:f1:ac:03:51:04:48:
                    f2:02:7d:99:e2:d2:31:70:02:42:f4:2d:a6:83:ed:
                    92:78:14:58:56:be:de:21:56:d5:7b:cb:a6:ef:48:
                    6d:3a:91:ef:91:3b:3f:6a:bd:21:9b:89:88:24:1b:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6B:06:C0:43:02:37:92:83:CB:B8:6F:63:08:4B:43:AA:91:FA:AF
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:6c:e5:55:00:d2:fd:61:f2:90:c7:b3:e8:93:ef:a5:ec:52:
         69:2f:ed:0c:19:84:80:7d:e1:e9:71:16:16:63:0d:be:52:cf:
         c5:32:d1:4c:cd:50:1f:e6:b8:55:44:9e:fd:90:8b:98:cc:9e:
         de:aa:fe:2b:60:59:2e:bb:ef:09:8e:49:24:a7:a5:6d:46:9b:
         67:27:38:b1:eb:13:81:74:63:79:c2:c8:47:79:bb:2c:e1:ee:
         29:6e:d6:26:69:b9:73:67:1e:03:77:fd:96:1d:44:48:62:ee:
         36:70:3b:a8:a2:0f:12:f9:e2:18:9a:ec:4b:4b:e6:f9:74:f7:
         75:5f:b3:94:6b:ea:30:9f:5f:41:bd:10:06:4c:e5:a3:7e:bb:
         7f:c7:ba:21:d2:16:40:8c:cf:7e:41:9a:fa:f7:8a:05:1c:95:
         fd:15:8f:b2:80:55:b0:fb:f2:31:a2:eb:8f:79:40:a9:c4:de:
         bb:b1:04:d5:32:14:ab:e0:73:b6:5f:7e:d8:5c:5e:7f:a2:93:
         fd:5d:8b:45:46:6d:8c:c2:44:d0:54:8e:b1:eb:7e:be:be:f1:
         94:5f:1c:d7:55:d4:8a:bd:92:0c:fb:8f:e2:d7:d8:5c:2a:00:
         c3:bf:8a:98:51:5a:82:b2:f6:70:dd:8e:25:97:28:4c:f5:1c:
         85:49:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:12:22 2025 by rpki-client