Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          pclqUEJm/9mZiSvJP4qUoxg4O6fSSgBSW5iN4wPnCbU=
Subject key identifier:   22:F0:CA:CC:01:F4:7C:C9:F7:12:38:EB:B6:9C:35:EC:98:29:87:AD
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       378FF0E362C8E28DE0CE22FFC171E5E4859D0C7B
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa
Signing time:             Sat 17 May 2025 00:04:03 +0000
ROA not before:           Fri 16 May 2025 23:59:03 +0000
ROA not after:            Sat 16 May 2026 00:04:03 +0000
asID:                     834
IP address blocks:        45.42.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 08:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8f:f0:e3:62:c8:e2:8d:e0:ce:22:ff:c1:71:e5:e4:85:9d:0c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: May 16 23:59:03 2025 GMT
            Not After : May 16 00:04:03 2026 GMT
        Subject: CN=22F0CACC01F47CC9F71238EBB69C35EC982987AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:b3:f8:5b:47:8b:17:7b:61:7c:01:6a:b9:
                    f4:0d:7a:3f:23:0c:c0:fb:82:8c:bd:8e:47:ae:7a:
                    a3:7a:d2:ef:6f:1c:0f:91:e6:f3:4f:02:54:68:b3:
                    41:e8:00:1a:78:03:35:ed:45:ee:7f:41:95:f7:a6:
                    f8:f4:c6:b8:87:de:8b:30:b3:27:46:98:ac:62:63:
                    d8:62:21:b4:3c:27:d3:51:3d:43:bc:f9:d4:14:0c:
                    e8:56:e0:6f:e3:ca:9f:2b:2f:b7:24:9c:ab:e9:1d:
                    4c:6d:17:77:ed:28:15:7a:20:e6:11:ff:2a:3e:32:
                    29:ed:af:5c:a9:96:64:85:db:a3:2f:cc:50:29:40:
                    5b:1c:68:d6:83:46:40:f8:70:e5:e7:aa:5d:82:d7:
                    b5:9d:5b:dc:94:36:0e:61:3e:7f:94:c9:b5:09:64:
                    5e:d0:a8:14:17:dd:73:f5:ea:54:4f:1c:1d:e5:ea:
                    67:e7:a4:4e:b6:64:91:da:fd:2e:e9:02:c8:b4:f2:
                    db:ec:bc:f2:8d:cd:1c:2d:b1:f9:1c:d3:2d:9d:1e:
                    db:08:3f:4a:68:96:50:c6:de:b4:21:30:d0:b4:d5:
                    e8:66:92:87:56:b2:31:37:4d:e7:63:db:30:b6:dc:
                    17:61:88:11:ed:3d:e3:45:f6:b3:a4:c1:3a:86:85:
                    d2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:CA:CC:01:F4:7C:C9:F7:12:38:EB:B6:9C:35:EC:98:29:87:AD
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:4f:5b:ad:fe:b6:9f:ce:9f:f3:64:21:28:24:81:24:02:
         fc:9f:5a:46:d6:a0:27:4c:33:4a:34:dd:a7:6e:40:be:69:10:
         5b:35:18:1a:1c:89:e0:45:99:4e:bf:36:60:d9:52:a8:48:24:
         16:22:a0:cc:11:8d:96:8c:f5:e7:ba:51:74:b5:38:2a:74:95:
         25:01:f7:18:03:e5:13:31:ca:6f:12:18:c7:3c:0c:65:a5:c1:
         b3:49:a1:5a:3b:3a:3a:17:f5:c2:f0:f0:c9:4e:cf:fa:38:ce:
         ae:98:68:a7:93:f9:7e:b7:04:3e:43:75:3e:c0:f2:e4:0d:ab:
         23:dc:d1:14:5d:73:09:7e:19:cb:74:af:25:61:8f:32:58:38:
         36:24:68:fa:a4:91:05:db:67:b1:08:bd:06:10:69:ac:a3:6f:
         7d:e5:fb:cd:56:ce:43:67:75:9d:5a:8a:17:0a:9c:a0:1c:20:
         23:a9:6b:75:7b:4d:35:d0:81:36:ad:f2:af:a9:87:93:e7:2b:
         20:b3:42:92:f6:ad:39:d5:67:04:b4:28:01:8d:58:c4:d9:4b:
         d0:bb:3b:cd:b4:6f:4e:53:5d:3d:11:f7:e9:aa:32:5f:59:76:
         14:80:0d:98:6b:5b:83:34:66:e7:98:e8:64:ef:01:55:cc:0b:
         a7:4b:9e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:53 2025 by rpki-client