Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa (raw, json)
Hash identifier:          TLQ95BENSJI5RYyOzJgiiV6mFCYCZyu4hJesd09QFb4=
Subject key identifier:   C8:CF:FB:C1:D0:A4:D5:87:CA:8D:54:85:F0:61:07:42:48:A0:89:3F
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1DCA6AB884506C28C8A87E2A89B3C87B144518A7
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
Signing time:             Fri 26 Jun 2026 15:36:09 +0000
ROA not before:           Fri 26 Jun 2026 15:31:09 +0000
ROA not after:            Fri 25 Jun 2027 15:36:09 +0000
asID:                     400175
IP address blocks:        45.135.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ca:6a:b8:84:50:6c:28:c8:a8:7e:2a:89:b3:c8:7b:14:45:18:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 26 15:31:09 2026 GMT
            Not After : Jun 25 15:36:09 2027 GMT
        Subject: CN=C8CFFBC1D0A4D587CA8D5485F061074248A0893F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:a7:c7:5b:7b:a3:67:c1:20:6d:54:f8:06:
                    f8:71:30:f0:bf:ea:c0:77:ec:e2:b9:63:57:23:e2:
                    3d:72:41:79:de:4e:da:85:1e:d1:5e:1b:ec:91:94:
                    db:59:4f:12:3b:b0:bf:64:d5:de:e5:0c:57:25:22:
                    a5:36:ea:73:e5:11:e8:dd:22:62:ab:a3:3d:f2:bd:
                    25:ae:9c:82:8a:48:86:4f:0b:a5:86:da:ba:b0:48:
                    e6:de:42:05:00:37:bd:f9:89:25:b5:1f:3a:32:f4:
                    ae:52:6f:1f:c8:fe:1b:7e:d4:21:22:16:da:3c:33:
                    bc:c1:97:da:83:92:39:bc:69:cc:cb:12:03:65:45:
                    b1:9c:c2:ee:8e:bb:be:7f:ee:4f:16:d5:b4:d2:66:
                    6d:40:bd:1e:ce:d3:3d:96:84:b4:0b:c6:47:26:36:
                    98:01:f3:79:61:3e:ca:d4:63:ba:56:ae:08:ad:38:
                    6d:24:42:9e:35:c7:d2:48:76:9f:ed:9c:dd:b1:7e:
                    aa:46:e5:95:fd:96:53:05:9d:2e:18:ac:e1:c3:0d:
                    7d:67:3d:3b:14:28:93:59:26:94:a0:2c:d4:5f:4b:
                    e1:d7:02:eb:21:bd:44:d7:e3:ef:f1:2f:e4:49:de:
                    6a:05:c7:f5:f4:f8:85:94:bb:87:37:2d:95:05:52:
                    0d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:FB:C1:D0:A4:D5:87:CA:8D:54:85:F0:61:07:42:48:A0:89:3F
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:8c:ca:fc:c7:73:44:7d:93:61:1a:8a:2e:50:16:f4:bb:fb:
         9a:38:89:8b:b5:62:96:87:4f:2e:fb:06:6f:2d:a5:a0:3e:7d:
         cb:99:e8:96:0a:40:85:73:93:c5:8c:fe:0e:db:bf:6e:ce:9e:
         1e:b8:1f:6e:5d:ed:26:a5:6d:6d:62:e7:f8:67:cd:3d:13:2c:
         64:6d:11:61:86:ba:dd:44:0c:9f:fb:b0:8a:ae:91:cb:97:9f:
         0d:42:f4:34:d6:a3:56:02:bb:e8:c0:0b:7a:f2:a7:a8:25:d1:
         91:30:cb:90:88:48:2e:c5:32:f8:ac:5c:30:c7:6e:9b:16:cd:
         b0:7d:96:c2:df:59:0e:a8:b0:aa:a4:9e:a4:39:f3:a2:35:18:
         ce:a6:1a:8e:95:e5:f5:e2:7d:30:05:16:c0:ff:3a:3d:55:73:
         0d:1c:21:09:74:83:84:bf:67:8c:e2:02:fa:7a:89:7a:ee:ab:
         6f:0c:d5:9f:6f:3d:77:91:61:1c:28:1e:f8:b4:05:4a:38:38:
         97:49:27:fa:1f:a2:57:ac:39:a1:e0:fd:a9:c0:fc:e0:4b:d6:
         f6:db:f4:26:a2:f2:fa:95:fd:8a:d4:3c:5f:9b:43:c4:75:a8:
         52:9c:a8:b6:a9:2b:fc:63:01:45:11:a8:12:47:f9:4d:93:f6:
         8f:27:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:00 2026 by rpki-client