Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e2034383236.roa
File:                     34352e34322e34372e302f32342d3234203d3e2034383236.roa (raw, json)
Hash identifier:          zrLnqjREVyM4ZRoZYvvFr95VS08/Kx1RDgkZBpRbtZE=
Subject key identifier:   6F:50:9F:79:50:3F:60:9A:EC:DA:B1:5C:82:EF:6C:A4:C4:C9:A8:8D
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       23AF6E54D008D83D10EF6F4AAD097372D1A108BE
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e2034383236.roa
Signing time:             Mon 02 Jun 2025 07:53:05 +0000
ROA not before:           Mon 02 Jun 2025 07:48:05 +0000
ROA not after:            Mon 01 Jun 2026 07:53:05 +0000
asID:                     4826
IP address blocks:        45.42.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 08:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:af:6e:54:d0:08:d8:3d:10:ef:6f:4a:ad:09:73:72:d1:a1:08:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jun  2 07:48:05 2025 GMT
            Not After : Jun  1 07:53:05 2026 GMT
        Subject: CN=6F509F79503F609AECDAB15C82EF6CA4C4C9A88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:5a:c7:fd:62:64:b8:b0:67:0c:b5:d9:89:
                    b5:5f:d2:db:1b:07:31:58:fb:a0:11:81:d6:83:ff:
                    92:0d:3a:5a:1f:f6:9c:9f:40:66:ed:e9:02:b6:40:
                    29:38:c8:66:00:94:2c:ea:ff:91:2f:ef:5c:9f:91:
                    35:34:92:0c:e6:07:d6:4f:45:df:27:bb:38:00:80:
                    57:6d:6e:00:f7:d5:b2:72:6c:80:7e:b2:64:73:1e:
                    7c:53:25:09:e7:66:01:9a:23:0d:07:d5:8d:34:96:
                    1e:d5:4d:78:b6:ac:61:e6:31:ac:ed:e5:14:d6:63:
                    ca:68:1e:c7:01:9e:14:a2:4e:6d:d8:eb:e4:86:fc:
                    e7:5f:fc:19:d2:f7:2d:99:67:61:d2:7e:05:01:86:
                    30:9d:55:fd:94:d5:70:eb:c3:ac:47:dc:01:21:2e:
                    24:93:9d:43:41:56:53:79:85:01:49:0e:8d:a7:7a:
                    9a:90:00:25:50:14:68:fb:27:36:99:06:95:0f:e3:
                    fa:a4:47:17:5e:59:cd:b3:37:a3:f9:5c:fd:c5:58:
                    a7:10:31:6d:36:4c:fd:7e:dc:12:df:cd:6c:00:a2:
                    21:32:4e:83:a6:e9:9d:be:5b:84:d7:0b:3d:ba:ad:
                    80:da:bc:44:59:1e:53:49:88:40:f7:45:7c:34:1c:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:50:9F:79:50:3F:60:9A:EC:DA:B1:5C:82:EF:6C:A4:C4:C9:A8:8D
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34372e302f32342d3234203d3e2034383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:81:b6:8d:ca:07:24:3b:15:5a:28:7c:8c:15:c0:bd:f3:
         40:c4:bf:c0:e9:14:73:09:55:07:c1:d9:97:0c:60:c0:6b:91:
         19:a9:2d:db:f5:84:8e:d6:92:22:c6:39:11:89:74:ab:05:1d:
         10:ee:8c:0e:7c:93:df:48:b0:8e:3d:70:85:16:ce:20:9b:a4:
         41:6c:ef:1e:5c:71:66:a7:3c:05:8d:48:ac:02:49:2a:38:d1:
         fa:ba:9b:e6:08:ea:94:c0:5c:98:05:d7:84:14:e5:32:a2:37:
         a4:4f:5d:58:05:13:60:ec:43:1a:77:00:9e:26:fe:ab:a9:4b:
         a2:98:0d:5b:ae:91:9d:2b:9b:36:72:3c:ef:3d:ac:0a:9a:9e:
         65:e5:0f:26:5a:c4:9c:10:14:89:54:12:4e:61:20:51:1d:0b:
         a1:a7:92:b7:3c:14:12:ac:d1:00:2e:f2:09:58:bc:12:04:2c:
         0b:db:8f:14:4b:2d:e7:90:83:90:15:66:26:76:6b:de:2b:97:
         ae:a9:44:0a:ef:7a:48:82:0a:35:86:59:50:d5:37:60:3e:6e:
         61:43:ee:2a:e3:42:7c:82:a9:5d:9a:b7:81:13:be:b1:e7:81:
         a3:08:36:3c:51:86:7e:24:97:4a:34:29:56:20:a6:bf:9a:32:
         7c:22:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:45 2025 by rpki-client