Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38312e302f32342d3234203d3e203235313938.roa
File:                     34352e3133322e38312e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          yfO/ECoJ6tBQLfLXLUuJ0cf0t0AZGP8lhbyCbkDmKzM=
Subject key identifier:   DD:94:28:DD:7C:74:62:7C:D6:D0:32:85:EB:56:14:98:9E:C9:A0:F3
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       12AA14AEE33707EB3EA18B989C5103195DAFBB3A
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38312e302f32342d3234203d3e203235313938.roa
Signing time:             Thu 20 Aug 2026 07:48:38 +0000
ROA not before:           Thu 20 Aug 2026 07:43:38 +0000
ROA not after:            Thu 19 Aug 2027 07:48:38 +0000
asID:                     25198
IP address blocks:        45.132.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:aa:14:ae:e3:37:07:eb:3e:a1:8b:98:9c:51:03:19:5d:af:bb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug 20 07:43:38 2026 GMT
            Not After : Aug 19 07:48:38 2027 GMT
        Subject: CN=DD9428DD7C74627CD6D03285EB5614989EC9A0F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:7f:06:d2:8a:b0:90:1c:61:4b:00:97:5e:
                    d5:19:a8:5b:70:9a:5a:87:d3:1b:fc:df:7d:f3:3f:
                    07:35:77:c7:c2:61:98:76:3f:25:c6:94:c4:8e:94:
                    80:f1:f3:98:22:0f:dd:9f:80:25:26:58:6b:c1:14:
                    d0:e2:54:36:50:8d:9c:9b:45:52:10:e0:be:47:5a:
                    ac:33:ce:d3:a1:fa:47:0e:8e:6d:69:cb:38:48:dc:
                    6c:7d:71:b6:2f:28:cb:34:54:f3:e2:74:74:38:22:
                    66:2a:75:46:3c:8c:db:79:fb:42:c2:15:ab:0b:04:
                    08:4d:ad:04:77:c2:6f:59:f8:62:60:da:45:4c:34:
                    3f:79:49:8b:bc:98:3c:57:b0:ac:55:45:bf:28:61:
                    36:94:3b:2c:ad:fd:90:21:83:08:a2:2d:3a:ac:c1:
                    49:40:4d:87:29:70:34:76:35:e6:1e:72:06:08:3e:
                    26:a1:82:d5:08:4c:1a:fa:28:50:82:ef:0f:36:33:
                    9e:fa:73:36:0b:0d:cd:b5:de:81:d2:19:78:9f:94:
                    59:d1:44:c3:f3:18:3d:df:6a:5f:65:2c:f6:7e:64:
                    d0:8a:3b:6c:64:7a:36:43:d8:f0:72:ab:a4:1c:87:
                    e7:d5:70:78:88:80:d6:42:3a:15:7e:6e:3d:9c:e7:
                    82:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:94:28:DD:7C:74:62:7C:D6:D0:32:85:EB:56:14:98:9E:C9:A0:F3
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38312e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:27:ca:ba:e0:43:59:a7:a9:04:e1:99:33:9e:0b:51:a1:46:
         83:bf:3c:dc:fa:a7:d6:33:92:8b:99:93:7f:d8:d8:c4:f7:17:
         e8:da:ec:c9:1a:69:67:96:e4:76:19:94:a6:d1:ed:1d:b0:d6:
         5b:9f:ca:aa:d0:d3:ab:cf:27:2e:83:df:96:ab:59:2b:76:46:
         bb:dd:61:35:08:14:a4:aa:42:20:6b:ce:d6:97:11:d1:11:62:
         12:4c:4f:35:0f:52:50:a5:0f:21:ba:db:80:30:28:1a:f6:42:
         21:17:e9:67:7e:4c:c6:56:91:fb:2c:2e:2d:b7:6e:b8:17:a5:
         29:b8:f9:d4:e4:65:bf:9d:13:28:39:43:ae:0b:d5:bd:21:21:
         d6:32:55:4f:19:0d:ea:e3:7a:cf:8c:80:68:65:aa:7d:80:32:
         7e:e0:7c:6e:16:4f:49:35:a9:15:90:6f:69:76:4c:38:d5:c8:
         fa:17:56:52:75:5e:d8:34:61:74:f5:26:3e:70:59:ad:b7:64:
         73:c7:13:cd:96:c0:25:00:b6:18:b3:b4:f9:2b:3f:f6:b8:3a:
         6d:04:78:70:97:bc:73:0c:b0:83:49:c5:9f:69:00:8c:d4:be:
         43:c5:4c:9c:c6:dd:06:52:ae:c4:e7:68:6b:cc:8e:cd:9b:99:
         16:6d:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 01:20:43 2026 by rpki-client