Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa (raw, json)
Hash identifier:          FF0UMv63LIzGdVP1FO95O+QZry6Q2xAl7YvSMSXJFvU=
Subject key identifier:   AF:AD:58:26:55:99:9F:CB:6A:97:D7:3E:C3:26:76:AD:BA:17:AC:2A
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       381C5ED9CF0CEDBBF5C8AB17BF2D89C88DDCAEAF
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa
Signing time:             Thu 09 Oct 2025 08:56:14 +0000
ROA not before:           Thu 09 Oct 2025 08:51:14 +0000
ROA not after:            Thu 08 Oct 2026 08:56:14 +0000
asID:                     400342
IP address blocks:        45.135.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1c:5e:d9:cf:0c:ed:bb:f5:c8:ab:17:bf:2d:89:c8:8d:dc:ae:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct  9 08:51:14 2025 GMT
            Not After : Oct  8 08:56:14 2026 GMT
        Subject: CN=AFAD582655999FCB6A97D73EC32676ADBA17AC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ea:bd:68:42:6d:14:f5:e7:82:db:c1:53:b4:
                    7a:b9:94:68:34:63:9b:00:09:4b:79:ca:3e:bc:af:
                    62:fe:41:b0:ea:3c:c1:d5:a0:78:6a:92:f4:77:f9:
                    e8:ca:fd:e6:00:c3:ad:f7:26:18:be:a4:4f:1a:73:
                    4a:b6:d2:1c:1d:c7:d5:d8:6a:75:a1:c8:be:7c:ad:
                    da:05:21:ed:e9:af:ca:99:58:be:51:5d:78:35:3b:
                    c0:ca:a0:8c:bf:64:c4:a5:3f:95:00:cf:a1:2e:e7:
                    13:d2:4d:24:33:5e:b5:55:1e:91:b2:4e:71:d2:41:
                    e5:35:f1:ff:24:df:c3:18:a7:81:42:a9:70:60:dc:
                    0f:a3:de:33:dd:12:78:06:ed:b7:c2:32:b0:a9:4d:
                    ea:95:46:07:14:11:04:37:76:55:e8:de:06:eb:d9:
                    df:73:91:ac:2d:e4:57:c7:d2:a1:15:b1:e4:d0:8d:
                    bf:99:0d:f3:0c:8d:64:94:15:44:77:06:9b:1a:f1:
                    dc:38:fc:3d:ff:9b:fc:a1:42:ff:2d:45:6d:92:26:
                    06:be:49:c8:1f:b8:7e:db:86:29:49:d5:6f:d5:53:
                    42:da:be:6a:a3:fa:c1:45:e1:ed:a5:0b:4b:f6:51:
                    9b:88:82:d0:e6:35:b2:a2:db:c0:57:f8:d2:82:a8:
                    90:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AD:58:26:55:99:9F:CB:6A:97:D7:3E:C3:26:76:AD:BA:17:AC:2A
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:ee:2f:75:f1:84:b6:27:41:89:f9:19:a6:19:76:66:10:
         f5:63:bb:8c:b7:69:3b:a3:93:11:a4:50:41:0c:77:59:59:28:
         26:51:52:19:59:ac:ac:78:ca:12:7e:5d:9c:e0:2a:82:93:af:
         eb:7c:e2:b4:c2:ec:51:9a:b8:8f:71:1c:d9:6a:44:be:a8:20:
         c3:a5:6f:f6:95:11:23:69:fe:53:18:24:1a:76:79:87:d2:68:
         23:39:0f:24:b5:ed:b3:f6:15:f8:2c:91:95:e4:ae:c8:91:a0:
         14:da:af:de:33:4e:53:58:d3:93:75:f6:da:f9:80:2d:4a:d0:
         41:8f:0b:a8:5d:82:5c:38:83:eb:69:9e:df:b4:4f:6e:9d:e4:
         3e:a4:1c:9c:9e:1e:a1:69:d5:e4:f7:48:02:ed:51:bb:63:97:
         00:bf:f6:a7:4d:cf:8b:c4:a1:e2:cd:45:8f:96:02:74:ea:88:
         ed:23:ef:2d:59:bf:96:f5:d2:c5:1f:70:9e:c4:25:1f:69:39:
         ad:4d:9e:f2:1c:b6:24:c1:c4:2f:9d:ad:92:d7:1b:af:c6:78:
         bd:65:ae:a2:7a:77:d9:b5:54:11:6e:6c:f5:34:14:e9:13:ea:
         dc:aa:db:b2:e0:69:cd:0e:cc:71:3c:ed:76:97:99:9a:3d:42:
         a8:8f:ff:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:52 2025 by rpki-client