Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38322e302f32342d3234203d3e20383334.roa
File:                     34352e3133322e38322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          6bFI5iF5y2ufjK8Hy0c3LfkxXSfr+AYX9Ve1Ni4791s=
Subject key identifier:   68:65:60:F4:CA:18:01:1D:10:1B:85:87:BD:B4:38:B8:FB:40:B1:8D
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       66CE92CD18268F0A46D101617F0F4582E13D904C
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38322e302f32342d3234203d3e20383334.roa
Signing time:             Wed 08 Jul 2026 17:05:45 +0000
ROA not before:           Wed 08 Jul 2026 17:00:45 +0000
ROA not after:            Wed 07 Jul 2027 17:05:45 +0000
asID:                     834
IP address blocks:        45.132.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ce:92:cd:18:26:8f:0a:46:d1:01:61:7f:0f:45:82:e1:3d:90:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul  8 17:00:45 2026 GMT
            Not After : Jul  7 17:05:45 2027 GMT
        Subject: CN=686560F4CA18011D101B8587BDB438B8FB40B18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:5f:3d:b6:86:0d:62:9e:38:50:7a:a4:bc:
                    b4:9b:4a:75:2a:c3:78:5a:f9:f0:a4:d5:85:bc:3c:
                    6d:41:5d:37:28:7b:d5:9e:d0:d9:8d:df:e5:50:7d:
                    5d:22:92:47:98:0d:d8:23:c3:ac:c7:14:1f:ce:b8:
                    fd:19:90:4a:6d:bc:98:3f:25:ec:4d:3b:9b:32:82:
                    19:22:f1:d2:ab:1c:c8:5e:c4:04:8c:98:86:5d:f4:
                    8b:6a:c2:0e:c2:9f:47:cc:08:27:4a:93:44:5e:68:
                    c1:6a:14:da:26:bd:0e:b5:1b:90:f5:46:16:4c:7c:
                    47:0c:aa:db:50:4b:42:1c:2a:95:82:1e:1b:4a:dc:
                    75:10:31:dd:27:a3:56:4c:45:b9:7d:62:e7:7a:98:
                    d9:da:04:9b:1d:64:7a:08:6e:bc:0e:e3:54:17:78:
                    8e:5f:68:85:1c:89:28:0f:a4:74:88:b7:9b:44:e0:
                    45:84:dc:6b:a9:0c:67:80:0c:0f:df:c4:77:98:e9:
                    aa:13:e1:fc:66:76:ce:43:40:19:bd:a1:a8:f4:3d:
                    ee:6a:9d:2f:98:cc:ee:e8:e8:b2:60:69:77:03:dc:
                    98:1a:b5:a4:37:e9:e6:d6:45:97:de:eb:63:9b:ba:
                    0e:02:ba:db:16:b5:8f:02:d2:01:82:4a:c6:0b:40:
                    3c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:65:60:F4:CA:18:01:1D:10:1B:85:87:BD:B4:38:B8:FB:40:B1:8D
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:5e:94:aa:d9:11:b0:85:e1:c8:4a:ef:84:e8:5c:35:b1:
         93:2c:71:44:74:73:23:f6:2a:65:8f:16:f2:62:24:0e:f6:96:
         d3:7e:5f:56:d4:50:24:9c:f9:e1:62:0e:9b:c5:73:53:23:d1:
         0a:47:78:0d:71:0f:50:9a:dd:34:4f:ec:42:80:98:f1:50:72:
         76:49:3a:9e:50:62:33:6a:82:df:ae:dd:f2:36:96:88:a3:ce:
         d5:d4:78:b2:71:a0:3e:6b:dc:72:77:f5:66:b7:8b:70:57:20:
         d0:91:7b:4f:fd:bd:89:f3:81:17:b4:62:69:a0:40:7a:62:80:
         7a:3f:f0:e6:56:d3:95:91:1b:66:d6:32:19:de:e5:6d:46:bd:
         b6:d4:61:2c:d4:be:70:4c:a1:9f:e6:58:cf:b3:34:28:8c:e9:
         35:55:c5:37:94:ee:aa:c2:54:19:7a:83:ba:3c:58:a7:5f:61:
         ed:1e:7f:9b:27:59:78:df:a7:50:66:6c:4e:63:a3:de:dc:da:
         80:8c:3c:55:11:50:fa:5e:6b:eb:da:84:50:8f:82:0c:fc:48:
         d9:8f:ae:df:d6:46:92:74:19:8b:60:39:ac:24:62:58:61:88:
         ff:ec:78:10:d4:ec:46:10:eb:d4:60:77:97:84:aa:b3:c5:1f:
         09:1d:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:08 2026 by rpki-client