Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e203230343733.roa
File:                     34352e3135302e35332e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          m+kojgrhJ55CKedT6sMRanIlZd1yzeh1JdHj19f/b64=
Subject key identifier:   2D:95:93:5E:96:77:01:CF:79:0E:0F:AF:2A:37:D6:EC:95:55:84:56
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       5234CB8C4220E4B79D640D0638E85A125D9D7221
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 27 Aug 2025 15:03:08 +0000
ROA not before:           Wed 27 Aug 2025 14:58:08 +0000
ROA not after:            Wed 26 Aug 2026 15:03:08 +0000
asID:                     20473
IP address blocks:        45.150.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Sep 2025 11:50:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:34:cb:8c:42:20:e4:b7:9d:64:0d:06:38:e8:5a:12:5d:9d:72:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Aug 27 14:58:08 2025 GMT
            Not After : Aug 26 15:03:08 2026 GMT
        Subject: CN=2D95935E967701CF790E0FAF2A37D6EC95558456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:f2:27:ce:fd:fe:30:95:88:e2:55:bd:0d:
                    00:bc:50:e1:8c:04:53:e7:c6:ff:ad:9a:7e:cf:52:
                    ab:96:2b:29:10:2a:5d:8c:3b:65:c2:05:6f:57:74:
                    31:e5:da:f5:4f:db:8a:49:27:0b:20:d5:71:2c:c9:
                    55:cd:f8:6d:29:11:f8:58:bd:0d:07:18:d8:1e:f7:
                    2d:63:cb:94:31:54:55:b1:b0:72:95:19:ea:67:9c:
                    67:86:1f:89:e1:60:6b:e4:04:71:ba:e6:d4:1c:ae:
                    dd:df:74:8e:3f:be:7b:f6:9d:c9:ee:3d:11:1c:f6:
                    20:02:d2:37:b4:36:3b:9e:97:8e:53:5d:ba:e8:af:
                    1c:0c:b3:19:0d:91:de:05:f7:14:c5:4d:5f:2b:2a:
                    d4:5a:5d:11:ce:1a:6f:18:8c:8c:8a:0f:61:a7:ce:
                    4d:22:f1:7f:21:f0:b1:91:6f:4f:cf:98:59:d1:40:
                    94:05:44:28:ea:7e:15:57:58:ce:77:94:eb:c7:84:
                    1d:14:2c:45:23:8f:7a:ea:e0:d2:1e:45:2b:ef:55:
                    2b:95:bf:bc:21:c9:73:f4:28:88:cb:1e:80:a7:f6:
                    43:ed:bc:d1:27:f5:bd:32:4d:6e:e5:d9:94:54:b6:
                    32:23:dd:9c:72:f4:f5:b7:49:2b:d4:ce:71:b5:5e:
                    ce:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:93:5E:96:77:01:CF:79:0E:0F:AF:2A:37:D6:EC:95:55:84:56
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7d:64:ef:2e:ee:b5:d7:c4:51:c3:00:73:31:8a:2e:93:17:
         36:fc:94:f9:73:99:a0:ec:50:f4:98:96:7b:78:bc:9e:37:f3:
         74:92:d9:b6:2a:56:b5:43:49:aa:af:a0:be:7e:3b:00:a0:c1:
         01:31:95:d0:ff:e7:83:38:d8:52:23:69:9a:b9:43:76:ed:ee:
         79:bd:45:33:2e:45:f1:f8:eb:90:e0:30:2a:4b:81:ad:2a:b0:
         63:6a:44:14:b5:de:2f:90:ee:bf:a6:27:94:84:c1:6d:0d:fa:
         54:1b:a4:7c:8b:83:03:0a:9d:b0:20:e8:c2:7d:dc:3d:3f:74:
         7d:36:88:73:b5:80:b9:41:33:51:05:ff:81:e8:4e:80:48:90:
         e9:ed:ec:af:2a:07:2b:2f:f6:2b:9d:07:9a:43:35:c9:7a:1b:
         e3:fc:6c:24:a8:c2:40:3b:e4:41:af:37:3f:aa:7d:97:fd:18:
         20:1a:32:72:56:a1:bc:15:9d:a9:39:3a:c3:6b:c3:d4:2b:18:
         9f:2e:b8:10:d1:4e:c0:73:d2:ba:37:b1:bf:da:c5:63:48:23:
         ac:7d:cb:e8:b6:7b:66:a2:50:9a:58:24:d9:23:3f:99:ee:10:
         a7:f8:08:84:3e:c6:99:dd:2d:97:11:cb:a4:62:d5:ee:70:2e:
         04:2d:4c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 13 19:49:28 2025 by rpki-client