Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20383334.roa
File:                     34352e3133352e3136302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iLHYmlXamlwkpYba5ThouqbUZpjmsD2BghoUH1wNwwk=
Subject key identifier:   DF:64:AB:58:35:66:3D:31:B8:C8:AD:80:5A:20:E3:30:EC:C9:CD:33
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0E20FADE94C12047995AC076C727716937BAE361
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 20 Aug 2025 11:11:33 +0000
ROA not before:           Wed 20 Aug 2025 11:06:33 +0000
ROA not after:            Wed 19 Aug 2026 11:11:33 +0000
asID:                     834
IP address blocks:        45.135.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 13:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:20:fa:de:94:c1:20:47:99:5a:c0:76:c7:27:71:69:37:ba:e3:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 20 11:06:33 2025 GMT
            Not After : Aug 19 11:11:33 2026 GMT
        Subject: CN=DF64AB5835663D31B8C8AD805A20E330ECC9CD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:46:a6:3f:b5:1b:ad:2e:62:30:87:71:71:
                    28:ee:84:55:69:b4:70:38:bd:e4:63:b8:d4:5d:1d:
                    f2:4f:a9:47:96:e0:72:80:6a:b0:2f:59:11:cc:36:
                    df:b8:6e:68:ab:f3:e6:2d:ce:09:c6:9b:0d:fd:4e:
                    b9:ab:e8:8e:da:31:f8:1e:ce:a7:fb:af:01:ac:5e:
                    00:9a:fb:e9:41:82:f7:bb:6f:27:aa:42:7b:cf:96:
                    d1:56:a6:12:37:8a:9d:64:f1:30:82:79:f2:2e:2e:
                    28:0d:fc:c3:78:0c:85:d8:08:64:57:33:49:e9:93:
                    4e:b3:ad:12:0a:a2:2f:63:bf:ca:68:16:4c:bb:6f:
                    a1:45:af:dc:84:93:fe:9d:ba:14:cc:27:d3:11:08:
                    b0:41:4f:5a:2c:d2:b5:73:c0:6a:d8:1e:bb:26:63:
                    e2:95:41:a5:e9:a1:20:28:14:07:2f:3a:3a:3a:c7:
                    03:44:3a:29:6e:f1:2d:e4:95:34:58:7a:45:95:45:
                    05:48:ef:e2:e2:43:46:d9:f9:eb:88:16:66:10:77:
                    8e:bc:3c:c9:72:0a:f3:f2:e4:7f:ef:de:18:4d:4d:
                    c9:fe:11:61:5c:4e:68:77:6e:6e:12:12:cc:e9:38:
                    08:98:5a:c4:4c:c1:2e:41:c1:19:ab:88:7d:1c:6f:
                    86:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:64:AB:58:35:66:3D:31:B8:C8:AD:80:5A:20:E3:30:EC:C9:CD:33
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:d2:58:1f:5a:eb:37:b6:c8:e1:0d:38:8c:4b:a5:9c:34:
         21:21:66:7a:ff:39:87:16:9c:70:29:13:16:56:ef:f8:89:06:
         f6:5a:a7:bf:a7:31:2f:ae:e7:2c:e9:f6:f8:f2:36:f0:ae:c3:
         5c:fe:71:6b:19:db:6d:1f:44:8b:1c:93:06:36:72:d2:5d:a5:
         d1:63:2f:4b:95:99:9c:6c:05:93:f5:62:85:db:cc:db:3d:34:
         3b:8b:2f:7e:90:30:5b:ff:2f:08:a4:c5:3b:5f:05:14:4a:ea:
         a2:b8:cc:86:fa:b8:33:6d:c2:46:c7:fe:e9:cb:3e:6c:30:56:
         49:c2:8c:b7:cf:02:19:a8:3f:73:30:44:3c:7c:79:9b:77:e4:
         9c:34:5f:41:91:75:2f:6f:84:e1:e6:e8:f3:b8:ef:77:36:c6:
         a2:b2:7c:83:e0:4b:54:e6:34:1c:c3:7d:e8:c6:6d:c3:cf:b2:
         2c:f6:66:bd:c3:36:47:54:f9:ab:da:db:e7:63:20:97:c8:ca:
         e0:ea:91:8d:20:6c:b3:70:8e:d2:dd:6f:cf:84:70:98:b8:5b:
         7f:6d:22:d6:85:f2:65:51:aa:8d:a2:03:6d:69:e1:74:b5:48:
         68:eb:67:90:a5:0f:ad:a5:ba:dd:ff:e9:08:0b:a1:ca:08:d2:
         f4:02:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:37:01 2025 by rpki-client