Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38322e302f32332d3234203d3e20383334.roa
File:                     34352e3133322e38322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          577ZhTLI/PEp3EsEehz0I8POyh+ivnHth+DE9T8++F4=
Subject key identifier:   B3:A3:BE:F7:51:60:CF:B8:08:A7:78:4B:C9:CF:56:12:EC:C7:AE:EC
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       03DFD2041FF38254AC9F5E718172869F360DBA48
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38322e302f32332d3234203d3e20383334.roa
Signing time:             Thu 06 Aug 2026 14:47:05 +0000
ROA not before:           Thu 06 Aug 2026 14:42:05 +0000
ROA not after:            Thu 05 Aug 2027 14:47:05 +0000
asID:                     834
IP address blocks:        45.132.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 12:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:df:d2:04:1f:f3:82:54:ac:9f:5e:71:81:72:86:9f:36:0d:ba:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug  6 14:42:05 2026 GMT
            Not After : Aug  5 14:47:05 2027 GMT
        Subject: CN=B3A3BEF75160CFB808A7784BC9CF5612ECC7AEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:d5:83:55:61:0a:af:fc:d7:64:f4:24:03:
                    75:2c:43:5e:e8:88:56:cc:e5:58:b3:2d:33:ca:c0:
                    93:68:0b:61:48:5d:ae:cd:8b:3b:96:05:a4:ba:de:
                    8c:02:21:60:90:94:52:f8:b8:fc:fb:2e:78:44:5d:
                    4f:22:25:9c:10:b2:07:9d:d5:f4:22:57:1c:6f:12:
                    ae:9a:90:20:2a:47:11:8e:de:d6:1a:27:be:69:4a:
                    89:44:7c:3a:b7:9a:29:c6:82:a8:55:8a:da:46:78:
                    c4:de:e8:12:e1:62:8e:70:58:a0:4a:87:41:88:b8:
                    cf:56:b4:f4:e3:a7:fa:01:4f:12:3d:2e:ec:9e:5f:
                    53:cc:01:2f:4b:c8:fd:76:47:0d:0e:c3:07:f3:25:
                    2f:76:cf:9f:9b:45:65:f1:59:e1:35:74:0d:eb:ea:
                    b9:9e:b8:eb:e9:31:5a:11:90:af:ff:34:41:e4:7e:
                    a1:58:78:31:43:82:92:91:c3:3b:e0:ff:7e:24:c4:
                    28:f8:c6:73:24:4b:a7:dc:a5:f3:7b:6b:96:67:42:
                    c5:1f:15:bb:1a:43:4f:9a:e1:8f:6f:e4:55:3b:25:
                    25:45:96:6d:e9:d6:1a:ae:47:23:86:be:ba:7d:34:
                    2a:d3:c1:65:bf:7e:0e:0c:ea:df:0e:bf:22:4f:07:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A3:BE:F7:51:60:CF:B8:08:A7:78:4B:C9:CF:56:12:EC:C7:AE:EC
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:84:c2:23:d0:82:ee:0f:cf:af:00:82:a9:04:85:f0:56:
         02:db:6e:70:09:7c:ce:47:5c:a5:28:c9:7f:08:af:c0:7b:33:
         e8:d3:64:8e:dd:04:95:6a:e2:d6:c8:97:de:0e:53:f9:9b:7b:
         07:6a:4b:ae:34:79:e3:42:3e:5c:3e:a0:77:45:49:a9:4f:bd:
         23:9e:7f:97:ca:ce:4f:7b:46:dd:bf:0e:bb:54:8d:63:9c:e4:
         c2:4d:db:74:b5:e5:32:a1:55:d3:d8:57:86:fc:7d:dc:79:83:
         0b:cc:ca:7d:f6:48:e4:7e:2e:22:2f:f0:91:b1:39:9f:d9:61:
         3e:54:38:07:b6:2f:e0:90:98:09:9c:3b:59:68:8a:18:3e:3e:
         b0:d4:1f:d4:95:37:51:da:ad:e4:6c:6e:9f:cb:38:a3:4b:9e:
         29:6f:5d:f6:be:7f:ff:c4:78:8c:f0:8f:c6:61:d9:74:35:e5:
         04:c9:99:cf:f8:cd:73:dc:a7:69:41:9b:03:cb:c8:b6:9b:48:
         e1:6a:92:46:db:86:46:17:96:7f:67:27:bf:25:28:c3:49:b0:
         aa:94:ad:e3:f8:b5:cd:25:84:5f:34:67:cb:b3:65:9c:5e:be:
         91:40:11:aa:42:ea:fa:7f:28:55:aa:b4:c7:b5:17:cd:7d:9c:
         fa:7a:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:03 2026 by rpki-client