Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LVQQ1G2IXbYJAH6Cm1ulyOTFOVI33oA+VqcJX7+VH5s=
Subject key identifier:   14:B9:53:44:DA:9B:35:7D:BF:06:EF:63:4A:9D:5E:AA:74:F5:CA:F2
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       39FB6C8C37A956C6D83A67F7FA17E710CAC77B0A
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 17 Sep 2025 13:04:31 +0000
ROA not before:           Wed 17 Sep 2025 12:59:31 +0000
ROA not after:            Wed 16 Sep 2026 13:04:31 +0000
asID:                     834
IP address blocks:        45.42.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fb:6c:8c:37:a9:56:c6:d8:3a:67:f7:fa:17:e7:10:ca:c7:7b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Sep 17 12:59:31 2025 GMT
            Not After : Sep 16 13:04:31 2026 GMT
        Subject: CN=14B95344DA9B357DBF06EF634A9D5EAA74F5CAF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9c:90:d6:30:ce:75:9f:5d:fc:e4:e1:95:6d:
                    c6:02:6a:1a:59:44:c7:49:ab:00:18:d2:24:d5:38:
                    62:b9:99:cf:3c:11:f2:86:b2:33:6b:64:07:b8:58:
                    2e:87:d6:81:ff:88:9c:e4:df:4e:62:9f:77:cf:e9:
                    63:09:a9:0c:e2:b8:af:9e:ff:11:3d:5b:69:03:7b:
                    66:9a:52:96:0c:c2:ec:13:77:51:82:d6:31:e2:bd:
                    e5:d7:7a:7c:51:8d:34:c6:76:d3:e4:00:ab:48:26:
                    d2:cd:91:ec:dc:e8:2c:ee:7d:69:df:19:14:4b:10:
                    95:92:75:86:31:2a:02:ec:fe:31:01:d3:9f:09:2f:
                    68:de:d0:70:69:de:9c:22:2a:71:5c:66:a2:8f:3a:
                    e2:af:cd:1b:85:44:7d:e3:05:a0:35:d1:1f:de:a3:
                    54:e8:93:6c:1a:79:5d:4d:6d:35:30:7f:96:f7:d4:
                    a1:15:81:ca:1e:78:0f:8d:8d:a1:a0:5b:9a:a5:63:
                    7f:8b:12:7c:ab:88:73:8e:6c:3c:05:6a:1a:9b:a3:
                    cb:d9:b4:ed:39:57:30:6e:03:5a:d5:a5:82:7a:38:
                    11:56:22:7f:e9:63:5b:b7:94:3b:48:0a:3d:cb:78:
                    15:5d:d5:01:b4:c3:9d:24:48:ee:a0:6b:88:aa:ed:
                    9d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B9:53:44:DA:9B:35:7D:BF:06:EF:63:4A:9D:5E:AA:74:F5:CA:F2
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:9b:88:39:47:52:78:70:11:22:1c:c2:27:3c:ee:13:51:9c:
         c2:2d:55:25:63:92:4f:0a:4b:7e:6e:b2:b0:84:45:b9:90:9c:
         c4:d4:e3:3f:24:eb:fb:9d:e6:43:a2:5a:0c:cd:23:bb:8a:09:
         ae:b9:89:e6:b6:b3:52:b6:8a:86:ff:1e:d3:12:94:de:e9:91:
         92:47:a3:27:a7:3e:ee:56:54:c4:dc:33:a6:32:f4:4a:c8:72:
         88:87:33:b4:00:ce:38:c0:58:86:e9:e0:ba:15:75:2f:53:a1:
         5b:a5:61:f2:cd:dc:c5:ea:70:f6:ff:4e:76:1b:e6:38:e3:e9:
         c5:f7:a2:f9:f5:f7:6d:6f:ca:c0:22:a1:29:9a:4f:38:cd:90:
         03:7c:8f:0d:7b:91:a0:8b:e8:fa:7e:37:bc:2d:5b:54:63:5e:
         e0:96:1b:cb:25:51:84:fc:30:ac:49:06:e9:58:2e:ac:f0:cb:
         fb:9c:f6:ba:1c:af:59:24:b4:e4:b8:ef:2d:f0:ef:fd:44:b1:
         72:9f:b0:07:8d:fe:b1:f3:c0:12:15:fd:4f:9a:e7:be:43:d1:
         25:41:27:1a:f7:05:b4:a4:76:d4:1a:2b:d5:22:29:76:94:7d:
         95:9a:3d:01:36:85:05:3a:0b:0e:30:0e:e9:29:23:f1:87:9e:
         f6:7f:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:34:33 2025 by rpki-client