Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313432313131.roa
File:                     34352e3135302e35322e302f32342d3234203d3e20313432313131.roa (raw, json)
Hash identifier:          5wty6TjHJJaTm51q62ZLkhtPrPfE+WGHRcJuw4mORsE=
Subject key identifier:   CD:85:40:9B:B5:4D:C9:9E:C2:C0:11:6A:3F:EC:48:E6:BE:F4:4A:8E
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       7B1C32BBDC1967101AED1032079FA4E7537AD9D2
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313432313131.roa
Signing time:             Mon 30 Jun 2025 21:08:19 +0000
ROA not before:           Mon 30 Jun 2025 21:03:19 +0000
ROA not after:            Mon 29 Jun 2026 21:08:19 +0000
asID:                     142111
IP address blocks:        45.150.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1c:32:bb:dc:19:67:10:1a:ed:10:32:07:9f:a4:e7:53:7a:d9:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 30 21:03:19 2025 GMT
            Not After : Jun 29 21:08:19 2026 GMT
        Subject: CN=CD85409BB54DC99EC2C0116A3FEC48E6BEF44A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:2f:7c:7f:32:aa:cd:08:23:83:7b:75:fc:
                    80:2c:47:cd:a3:5e:ae:bf:2f:81:07:6b:f0:05:fb:
                    be:71:19:5e:29:ee:b7:b4:44:da:3f:cb:ae:2c:80:
                    1d:07:d4:1f:a4:5c:a2:e2:96:ba:bf:e8:b3:6e:6b:
                    f5:43:45:ff:b0:3e:ed:a0:fb:7b:ba:9d:9c:08:ca:
                    49:11:67:19:4b:70:da:4d:a2:e0:51:a7:04:58:70:
                    d6:86:24:47:e6:12:53:8e:77:d7:73:7f:a8:a2:2e:
                    a9:e5:90:80:86:fb:72:70:43:13:ff:c2:6a:21:b6:
                    de:df:36:77:c0:2f:97:c0:f2:1d:68:50:89:27:5f:
                    69:2e:fd:af:6c:17:a0:6f:30:2b:30:93:07:68:0d:
                    3a:e0:69:cb:58:d2:54:94:65:2a:3b:4b:1f:bd:8b:
                    b5:4c:bb:5d:9b:d3:de:1b:0e:14:a8:aa:32:e5:bc:
                    28:6c:97:c2:24:56:6e:48:1e:57:b1:30:b2:33:8e:
                    e8:01:41:9a:9d:70:57:bc:53:74:cb:a5:ae:c1:fb:
                    4a:6b:37:a3:dc:e2:aa:d2:6d:ee:3f:d0:76:61:50:
                    5f:d7:2c:8b:af:fe:41:19:9b:d5:e8:f0:52:93:4f:
                    7f:e5:1d:f3:e7:73:5a:63:81:3e:8e:71:17:ea:ea:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:85:40:9B:B5:4D:C9:9E:C2:C0:11:6A:3F:EC:48:E6:BE:F4:4A:8E
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313432313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:31:30:2e:bc:bb:a6:bd:5f:40:aa:0e:83:60:af:be:32:
         ca:af:0f:de:37:6d:43:84:47:cd:8e:4e:64:32:64:13:0e:73:
         3c:88:a0:14:c2:ff:68:6e:6b:9d:7f:dd:b8:95:cb:1b:4e:f6:
         4d:f5:84:94:b0:05:ce:1d:bb:c0:d8:29:3c:cc:1b:96:0b:90:
         02:a1:30:34:a4:5b:e8:6d:8a:ab:cc:ec:cf:c2:ba:c5:8f:b4:
         07:c1:6b:d0:d6:d5:b8:40:e1:b0:75:06:81:4a:7f:e6:00:7e:
         e0:a9:ec:93:ec:36:c1:2b:8e:74:d0:8c:58:5b:d2:ea:14:26:
         f3:67:85:95:af:20:7f:1a:2c:7a:cc:fa:62:05:ee:2a:69:c2:
         6f:36:d2:72:c2:89:0a:71:fb:55:3c:af:4a:53:1c:0d:71:29:
         f4:8d:73:e9:43:f2:8e:8a:65:9b:7e:fe:39:68:fa:8f:e3:92:
         7f:0e:8d:7d:03:40:cb:c3:63:6f:7d:28:29:67:32:32:ec:b2:
         45:bb:e0:77:24:8b:07:03:6a:31:52:0d:de:31:7f:de:db:4f:
         7b:6e:93:7a:92:0e:0f:34:e7:fb:c2:45:f2:61:38:30:9b:75:
         e3:13:54:e3:0e:f9:f1:67:38:35:07:97:a4:a9:f1:b1:93:a8:
         53:47:88:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:09:06 2025 by rpki-client