Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203134333135.roa
File:                     34352e34322e34362e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          CEsL8GS8LHTCJz5Q0ndS+1xMJUNn952R2MOAImipn6A=
Subject key identifier:   A4:8A:28:18:F5:8F:CE:DD:1A:C1:FD:D7:A8:11:94:88:BF:AD:09:C0
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       78775B3CBFD87B27D87283448D560C1C155D1DCC
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203134333135.roa
Signing time:             Sun 08 Mar 2026 07:14:46 +0000
ROA not before:           Sun 08 Mar 2026 07:09:46 +0000
ROA not after:            Sun 07 Mar 2027 07:14:46 +0000
asID:                     14315
IP address blocks:        45.42.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Mar 2026 18:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:77:5b:3c:bf:d8:7b:27:d8:72:83:44:8d:56:0c:1c:15:5d:1d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Mar  8 07:09:46 2026 GMT
            Not After : Mar  7 07:14:46 2027 GMT
        Subject: CN=A48A2818F58FCEDD1AC1FDD7A8119488BFAD09C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:3c:3f:f1:2b:32:18:ab:6b:75:4f:d9:f6:
                    f2:cc:80:94:51:df:28:03:ce:cc:20:6f:96:32:2b:
                    ba:87:7f:32:22:b5:e3:b2:b4:8d:39:a8:a3:69:50:
                    99:7e:f2:4f:d6:a0:a6:12:99:34:97:85:48:41:e5:
                    c0:96:4f:cb:5e:68:96:54:e7:ad:bb:38:97:dd:62:
                    04:19:89:a8:57:f4:d5:9f:c2:72:10:82:ec:26:09:
                    7a:6f:52:53:f9:c6:d1:62:69:22:da:01:a1:d9:ea:
                    c6:9d:93:82:63:81:8c:2b:5f:f8:da:be:36:bd:26:
                    6b:4d:09:f4:04:b7:e8:34:3c:b8:45:11:0e:b0:f2:
                    ba:4e:db:78:6d:e7:25:db:39:65:33:53:b9:88:ad:
                    da:ce:82:b9:1d:21:18:7b:01:74:27:98:ff:a5:00:
                    f8:f2:0a:53:ad:9a:e6:74:ea:1d:13:05:07:99:67:
                    ae:2f:44:79:08:4a:b7:75:f0:8f:a5:bb:28:3c:9c:
                    0c:e8:d4:7e:1c:0d:5d:4a:92:fe:4a:bc:75:d9:88:
                    9e:87:06:8b:25:3c:82:1a:04:e1:aa:f7:b9:e9:4d:
                    5b:89:15:54:ee:fd:71:f6:7d:d6:d9:08:f2:5b:59:
                    04:d6:f4:39:bd:b2:3a:d4:7f:10:94:c7:6f:7e:ee:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8A:28:18:F5:8F:CE:DD:1A:C1:FD:D7:A8:11:94:88:BF:AD:09:C0
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:59:42:f5:49:2e:9d:c1:fd:ef:5d:f5:68:3f:30:d5:11:7a:
         d7:81:4b:0f:62:1d:f4:e8:18:7b:0c:de:42:f5:39:15:c6:9c:
         1e:f0:05:03:51:fc:09:02:3c:e4:ba:0a:01:2e:40:a8:5d:ca:
         07:72:9f:39:91:c4:bd:07:02:48:0f:69:8f:d5:28:6a:fb:6e:
         df:a5:67:16:9e:1b:a6:ea:53:b6:13:9c:31:b8:33:22:ef:18:
         ec:55:d3:17:d7:59:32:d9:13:18:17:65:f5:9b:8a:cd:85:8f:
         c9:ca:b0:a3:b5:ab:2d:8a:db:de:f6:d3:4e:7a:65:f8:fc:0e:
         cd:32:b4:d8:54:2d:91:27:b0:b4:a3:28:fe:36:3a:7e:13:21:
         b4:9e:67:d4:24:f0:6a:d1:3c:ae:a8:53:ee:d4:68:14:de:52:
         f1:ec:51:c1:42:f5:79:d7:fd:3d:c0:95:e1:94:09:56:8f:71:
         d0:1e:a6:22:0c:f4:19:1e:26:41:ce:e7:2d:58:d7:a2:aa:6a:
         7b:d9:05:70:72:35:e5:2f:48:e1:59:c3:f7:bb:e0:05:6d:75:
         31:e8:44:8e:b6:5d:29:ff:98:cb:a3:82:1a:2e:00:62:a5:6e:
         6b:d9:54:16:14:cf:7e:07:61:dc:41:78:b1:4a:8d:94:42:bd:
         b5:0c:53:e7
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUeHdbPL/YeyfYcoNEjVYMHBVdHcwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjYwMzA4MDcwOTQ2WhcNMjcwMzA3MDcxNDQ2
WjAzMTEwLwYDVQQDEyhBNDhBMjgxOEY1OEZDRUREMUFDMUZERDdBODExOTQ4OEJG
QUQwOUMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPU8P/ErMhir
a3VP2fbyzICUUd8oA87MIG+WMiu6h38yIrXjsrSNOaijaVCZfvJP1qCmEpk0l4VI
QeXAlk/LXmiWVOetuziX3WIEGYmoV/TVn8JyEILsJgl6b1JT+cbRYmki2gGh2erG
nZOCY4GMK1/42r42vSZrTQn0BLfoNDy4RREOsPK6Ttt4becl2zllM1O5iK3azoK5
HSEYewF0J5j/pQD48gpTrZrmdOodEwUHmWeuL0R5CEq3dfCPpbsoPJwM6NR+HA1d
SpL+Srx12YiehwaLJTyCGgThqve56U1biRVU7v1x9n3W2QjyW1kE1vQ5vbI61H8Q
lMdvfu5l0QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKSKKBj1j87dGsH916gRlIi/
rQnAMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMxMzQzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtKi4wDQYJKoZIhvcNAQELBQADggEB
AHNZQvVJLp3B/e9d9Wg/MNUReteBSw9iHfToGHsM3kL1ORXGnB7wBQNR/AkCPOS6
CgEuQKhdygdynzmRxL0HAkgPaY/VKGr7bt+lZxaeG6bqU7YTnDG4MyLvGOxV0xfX
WTLZExgXZfWbis2Fj8nKsKO1qy2K29720056Zfj8Ds0ytNhULZEnsLSjKP42On4T
IbSeZ9Qk8GrRPK6oU+7UaBTeUvHsUcFC9XnX/T3AleGUCVaPcdAepiIM9BkeJkHO
5y1Y16KqanvZBXByNeUvSOFZw/e74AVtdTHoRI62XSn/mMujghouAGKlbmvZVBYU
z34HYdxBeLFKjZRCvbUMU+c=
-----END CERTIFICATE-----
Generated at Sat Mar 21 09:17:00 2026 by rpki-client