Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e203235313938.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          kY88FB/oMjzUNO5UzfAO6Oyckzj09tYeVmplubAWqTg=
Subject key identifier:   40:E0:50:7D:6E:E9:07:5E:F9:6B:DE:87:EB:F5:8E:95:18:A1:3F:42
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7D38F27B4F3977F07D5FA786A9467CB380D7EA14
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e203235313938.roa
Signing time:             Thu 18 Sep 2025 03:12:50 +0000
ROA not before:           Thu 18 Sep 2025 03:07:50 +0000
ROA not after:            Thu 17 Sep 2026 03:12:50 +0000
asID:                     25198
IP address blocks:        45.135.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:38:f2:7b:4f:39:77:f0:7d:5f:a7:86:a9:46:7c:b3:80:d7:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 18 03:07:50 2025 GMT
            Not After : Sep 17 03:12:50 2026 GMT
        Subject: CN=40E0507D6EE9075EF96BDE87EBF58E9518A13F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:d6:a5:cf:71:94:42:4b:8e:25:c7:33:58:
                    20:d5:24:d1:de:72:fa:3d:26:6d:2e:25:38:6c:c3:
                    15:be:14:50:34:b1:bb:09:36:1a:6c:90:a2:a7:2a:
                    c6:5c:74:3e:c8:cf:58:2f:f1:99:f5:00:2a:84:55:
                    e4:2a:35:a0:01:aa:49:55:17:c4:26:b3:75:2f:cd:
                    2c:56:be:44:07:3f:0d:9a:20:10:33:ad:05:83:30:
                    08:7b:e4:53:48:10:34:0c:c5:ce:f6:7d:00:b6:09:
                    2a:56:0f:98:98:de:00:36:47:12:17:f3:ca:05:4a:
                    29:b8:69:66:9e:48:8b:06:ca:bb:4f:ff:7e:33:95:
                    34:b2:55:88:cf:08:32:8b:19:c6:90:5b:6b:f7:5b:
                    3c:0f:92:60:a0:18:cd:61:0b:20:5b:e2:31:09:e5:
                    9a:7c:d3:e4:8e:f1:7f:fa:0c:d5:11:ad:20:c2:a2:
                    26:3a:a0:7b:fd:e5:da:d1:ea:b5:0c:09:b6:bf:e7:
                    49:a7:4a:4b:c3:f1:6a:c0:da:57:b7:c4:ce:52:3f:
                    a1:e4:62:67:4a:34:df:a4:6a:e1:75:ce:e4:84:84:
                    45:fe:9f:7d:ac:d2:3b:dd:0d:40:ed:60:a4:f8:cb:
                    8d:5c:bd:09:13:1c:68:43:40:7e:ec:7f:4b:3c:07:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E0:50:7D:6E:E9:07:5E:F9:6B:DE:87:EB:F5:8E:95:18:A1:3F:42
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:2d:35:e5:bc:b4:a3:a9:9b:e1:f6:c1:21:f7:81:b7:ce:9d:
         e3:c0:e2:a8:a1:4e:fe:5b:4c:02:b1:5c:f3:2e:84:3b:54:81:
         42:b8:64:d4:26:de:12:73:e9:70:ed:3f:bf:3b:2c:e4:79:66:
         77:6d:09:31:3d:96:22:96:bd:6e:bc:97:6d:2e:21:96:4d:ed:
         3c:dd:7d:e3:3f:5b:8a:40:14:8b:f8:f3:c0:08:fa:c7:b3:0e:
         4d:22:1f:7b:98:09:7b:5e:30:55:d2:15:0e:20:18:58:a3:d1:
         9a:9a:05:29:48:7c:20:c0:05:92:19:09:43:82:db:f8:9b:26:
         ac:f1:12:61:5b:db:c3:a7:7e:c4:7a:d9:ac:62:43:bc:af:80:
         de:3c:82:a9:e7:32:97:04:56:c1:22:e3:d1:a5:c7:d3:b4:0e:
         0e:33:46:2c:73:0c:5e:b2:8c:4d:fd:bb:b9:f9:4c:85:34:6b:
         60:9d:c4:ad:6a:81:52:af:4e:e8:cb:1e:30:48:00:f8:86:d9:
         fe:04:c3:b6:81:d5:3f:19:70:ec:5b:ff:d1:64:30:d9:2e:68:
         52:d2:dd:46:c7:7a:48:26:95:3f:cf:fe:39:ca:e1:a5:11:f3:
         ed:55:5b:97:f6:67:12:4d:bc:c5:28:33:7b:fc:53:22:ac:4f:
         39:02:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:59 2025 by rpki-client