Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa (raw, json)
Hash identifier:          cXGB1zCTcW48X7qQ/vaNZItCEhIsUBPZ4DXj8k9TWTE=
Subject key identifier:   4B:E0:3A:8E:7A:A7:A5:1C:3A:D6:29:57:D4:D1:1A:1B:22:E8:16:57
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       4BD93B392710861B9C1D2B15600A65B840DA29F8
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa
Signing time:             Tue 09 Sep 2025 18:29:45 +0000
ROA not before:           Tue 09 Sep 2025 18:24:45 +0000
ROA not after:            Tue 08 Sep 2026 18:29:45 +0000
asID:                     142036
IP address blocks:        45.135.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d9:3b:39:27:10:86:1b:9c:1d:2b:15:60:0a:65:b8:40:da:29:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  9 18:24:45 2025 GMT
            Not After : Sep  8 18:29:45 2026 GMT
        Subject: CN=4BE03A8E7AA7A51C3AD62957D4D11A1B22E81657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:ed:53:d8:92:0d:8a:cd:ca:d1:c3:ad:1e:
                    4b:6a:f6:32:8e:5d:15:f1:92:7d:f8:eb:9d:e7:54:
                    f7:44:50:01:56:db:bb:53:f3:7a:a1:97:45:f1:ed:
                    b3:d0:3f:35:56:62:20:56:2a:a6:8a:04:cd:12:60:
                    01:58:cf:04:6e:79:c4:d8:e5:52:05:06:ba:82:29:
                    94:a9:5d:0a:94:aa:05:fb:6c:60:bb:d7:bd:c4:e8:
                    22:15:ef:0b:62:a0:de:10:58:6b:04:e0:67:00:57:
                    3b:bc:33:47:d6:72:5a:c1:18:ed:64:77:9a:fc:1a:
                    33:03:c2:6b:31:50:58:ff:56:b6:fa:1a:c6:7c:b0:
                    1c:f4:5d:f1:94:9e:48:e1:27:42:70:a4:cd:8d:73:
                    e7:bc:48:93:69:7f:13:fe:2f:b3:b7:29:2c:b3:4d:
                    77:27:59:6a:41:7d:57:cf:70:18:05:97:a0:ef:71:
                    33:ef:34:91:7c:13:cf:7f:c1:47:71:f5:b9:6f:e0:
                    96:a7:32:ac:0a:dd:fe:c9:b1:58:b5:34:c5:f1:b8:
                    34:52:0e:e8:c8:0b:15:df:12:1d:30:17:15:bc:07:
                    ae:d4:af:75:22:5c:39:4c:71:47:59:fd:03:fe:5e:
                    37:f1:58:bf:16:f4:47:a9:99:77:20:02:42:74:56:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E0:3A:8E:7A:A7:A5:1C:3A:D6:29:57:D4:D1:1A:1B:22:E8:16:57
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136322e302f32342d3234203d3e20313432303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d6:46:53:af:ef:80:d9:65:cb:87:01:e7:9c:5d:37:60:53:
         ae:2c:d7:59:d2:17:1b:6b:bf:2e:a6:10:4e:b3:2d:38:e9:54:
         32:9e:d8:60:c7:9e:c6:bb:f8:37:73:fa:b0:d3:36:57:12:2c:
         ff:30:6c:01:e5:85:e5:04:06:07:74:33:35:ab:c6:d3:ac:f7:
         ee:09:74:c6:ac:b7:db:e0:04:ba:a7:7d:2d:25:a7:cd:ce:63:
         44:4c:0d:17:c9:3e:b9:85:1b:69:66:b4:10:55:e4:4c:b7:23:
         31:0e:d1:2d:48:66:5a:26:b4:1f:6e:0e:49:27:3f:e7:a6:1a:
         16:b1:02:aa:c7:41:df:7b:cd:66:7a:0d:4d:e0:4f:ea:01:9a:
         ff:ec:de:d0:e3:7c:ec:36:7a:f8:78:78:d2:7b:a9:1b:0e:2e:
         b7:2a:30:d4:62:ff:30:44:3a:4d:66:bf:a5:6a:af:40:17:c1:
         74:a4:99:21:0c:4c:12:16:39:0c:c2:13:c5:d9:03:bb:67:9d:
         cb:9f:5b:6c:05:51:53:95:68:26:a6:ff:ba:ee:82:e3:e2:be:
         0f:15:b5:0f:37:df:2a:65:28:ff:9f:d4:8a:13:61:2c:fa:16:
         9b:92:dd:14:69:88:f7:58:35:bc:75:70:7a:60:be:9e:1e:ea:
         cf:2b:8f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:23 2025 by rpki-client