Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32322d3234203d3e20383334.roa
File:                     34352e3133322e38302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          C68D5IMesXWENU0hV+KCeoomXDsyw2VvHhSQ6k68b88=
Subject key identifier:   C9:75:00:87:28:3A:A8:1C:90:FF:50:31:CE:D8:5C:0C:B4:85:5A:2F
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       57AC86C18B2294466316F9E0B93D01F6BA730A92
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32322d3234203d3e20383334.roa
Signing time:             Thu 08 Oct 2026 06:11:14 +0000
ROA not before:           Thu 08 Oct 2026 06:06:14 +0000
ROA not after:            Thu 07 Oct 2027 06:11:14 +0000
asID:                     834
IP address blocks:        45.132.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 05:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:86:c1:8b:22:94:46:63:16:f9:e0:b9:3d:01:f6:ba:73:0a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Oct  8 06:06:14 2026 GMT
            Not After : Oct  7 06:11:14 2027 GMT
        Subject: CN=C9750087283AA81C90FF5031CED85C0CB4855A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d7:96:6d:d0:5c:21:51:dd:a3:26:c0:14:02:
                    2b:17:2c:aa:bb:e6:a3:f6:7f:3f:08:dc:e8:0a:c6:
                    50:72:08:97:35:25:de:04:d9:22:d5:7e:c5:27:dd:
                    bc:48:e3:fa:c2:66:19:69:14:25:9e:03:02:ad:d2:
                    ac:74:e1:99:c3:6e:68:37:27:b9:27:04:30:a8:ce:
                    c7:20:36:6e:64:d6:61:a4:b6:ac:26:37:17:37:64:
                    3c:30:82:f4:bb:c1:9f:7c:be:62:b6:14:db:31:9d:
                    54:87:69:04:24:dc:89:19:91:3c:72:55:3c:7b:70:
                    a2:4d:bd:9f:84:5b:67:11:c4:78:59:38:19:c2:0f:
                    dc:5e:cd:05:b7:42:68:3a:e4:6f:70:d6:1f:d2:b5:
                    d8:4e:04:30:ad:b5:56:81:ee:6d:a7:5d:d8:6f:fe:
                    c9:62:01:fa:b4:a4:d5:09:f4:28:5e:bf:52:44:5d:
                    37:c3:4f:c6:07:da:71:27:29:36:44:00:fe:92:05:
                    5b:af:66:5e:a3:68:af:6e:94:d8:5e:94:f0:10:8e:
                    70:fc:6b:cc:95:91:7b:5f:6a:34:3d:4c:6e:96:4e:
                    20:0c:d4:ac:38:77:e7:07:c4:78:5d:99:55:61:2b:
                    f1:4a:29:bc:35:79:bf:57:38:f1:fa:f8:23:7d:11:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:75:00:87:28:3A:A8:1C:90:FF:50:31:CE:D8:5C:0C:B4:85:5A:2F
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:af:45:b7:b0:d9:61:65:9a:92:bc:a7:83:e4:29:36:f5:
         36:e6:71:69:be:d6:e7:26:9e:9d:b8:20:fb:fa:dc:8f:62:75:
         52:23:b2:11:61:9e:bb:80:9a:ff:9c:3e:8f:cd:87:7c:d8:49:
         40:99:bc:11:57:d3:e9:ea:92:f1:50:b2:b5:76:7b:5a:97:a9:
         3d:31:34:75:25:90:c0:fd:84:6b:d8:4f:37:78:34:55:2a:40:
         31:e9:48:34:c8:94:00:76:c2:cb:56:14:d0:3d:9f:24:91:45:
         b8:76:7f:7c:94:9f:b2:2d:8e:99:22:22:36:95:ac:12:60:4e:
         d4:95:e3:be:4a:f4:37:62:bd:59:cf:c4:e6:81:c1:09:bc:06:
         4b:a3:b1:66:0a:5e:8f:16:53:21:6e:a9:a3:9e:55:51:f6:d6:
         fd:71:53:28:39:32:67:8e:13:a4:6f:84:48:00:7c:78:3f:19:
         d8:eb:f4:24:4f:c7:ad:3c:c8:19:7f:6b:8e:21:bc:d3:46:96:
         8d:64:5b:2e:54:61:50:e7:99:ba:2c:35:c6:62:0e:60:12:c5:
         f5:67:1d:e5:b7:bf:08:19:c6:41:63:3d:73:82:6e:03:5b:c7:
         c2:e0:f1:b6:48:47:3c:c9:e4:c4:6b:0a:c8:4f:0e:45:38:fe:
         f8:68:b1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:25 2026 by rpki-client