Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS394344.roa
File:                     AS394344.roa (raw, json)
Hash identifier:          ACAxRmgrAKjmcXvPgG0AG353KqOHFyuYS1O6Ps+p9NQ=
Subject key identifier:   0F:4B:0E:6C:4E:81:04:1E:B7:74:12:EB:A0:AE:26:A7:6E:0A:03:14
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       601BFAB7E6CE96F6E8F353546F60881316AADE0A
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS394344.roa
Signing time:             Tue 03 Nov 2026 16:37:56 +0000
ROA not before:           Tue 03 Nov 2026 16:32:56 +0000
ROA not after:            Tue 02 Nov 2027 16:37:56 +0000
asID:                     394344
IP address blocks:        45.54.34.0/24 maxlen: 24
                          2607:f740:e614::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:31:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1b:fa:b7:e6:ce:96:f6:e8:f3:53:54:6f:60:88:13:16:aa:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Nov  3 16:32:56 2026 GMT
            Not After : Nov  2 16:37:56 2027 GMT
        Subject: CN=0F4B0E6C4E81041EB77412EBA0AE26A76E0A0314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:d5:10:08:31:3d:15:8b:a2:1e:67:3b:e1:
                    5a:fd:c6:e6:e6:c5:ba:1e:17:4c:75:13:b3:9f:22:
                    1b:d6:3b:f5:07:1d:64:a9:8f:a0:95:ad:8a:da:7c:
                    84:48:16:1c:2c:f7:b4:77:98:c9:7e:c0:d5:da:01:
                    bd:8f:99:55:d5:08:be:10:17:23:fe:cb:1b:82:c9:
                    5d:33:16:82:06:96:83:fc:03:48:dc:2b:52:58:b4:
                    bc:df:fb:b4:f0:4b:dc:48:0b:1b:e6:3e:26:df:95:
                    5b:cc:8f:8f:f5:90:6c:69:84:d4:d7:d9:21:4a:8d:
                    39:b5:3a:e9:7c:49:96:b5:aa:c2:ee:2e:2d:fe:b6:
                    56:28:e9:90:34:d0:be:87:3a:79:ec:ed:4c:6f:af:
                    13:86:76:12:0c:71:40:66:b5:ba:25:0a:57:dc:40:
                    71:11:df:2d:9b:ce:9e:61:71:51:e3:b3:0d:f3:99:
                    86:a9:f0:46:04:0c:35:49:6f:49:18:07:d8:c8:e7:
                    6d:8f:12:e1:ff:f0:28:1d:3c:d9:5b:79:0c:3c:8d:
                    de:0a:11:43:4c:a0:02:e7:3a:4a:45:f7:fe:97:cb:
                    4d:44:44:25:de:f5:c1:52:88:ca:00:14:44:65:af:
                    ff:4e:d8:26:c9:28:b1:9f:38:0a:e3:ae:ad:2d:56:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:0E:6C:4E:81:04:1E:B7:74:12:EB:A0:AE:26:A7:6E:0A:03:14
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS394344.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.34.0/24
                IPv6:
                  2607:f740:e614::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:7b:56:c1:0e:c6:78:8e:21:b0:d9:a8:37:36:4c:3b:05:
         c9:a1:0f:28:9f:bb:47:7d:a9:59:ae:5b:17:77:88:3e:38:79:
         38:69:5d:ff:8c:42:5b:04:39:c8:f5:e9:38:d4:d3:f3:e4:df:
         fc:e1:47:e2:61:50:d6:ac:d0:3d:47:76:0e:0a:e3:b3:c3:4f:
         08:38:27:4e:32:98:33:23:88:33:c2:75:71:33:8a:bd:51:02:
         fa:11:27:5e:6b:b4:b1:56:c7:d9:ec:83:74:f4:d0:a8:68:b1:
         af:a7:94:41:04:b4:d1:b4:87:f4:88:2c:5e:13:9a:db:a6:79:
         ef:07:34:3a:51:94:5e:9c:ac:34:00:5c:26:e9:4e:67:0f:bb:
         dc:13:d4:b1:cd:c2:2a:1e:32:71:0f:38:d5:0d:9b:e3:9a:ad:
         e0:cb:21:55:0d:fa:8c:0e:50:f1:35:86:42:84:5b:66:55:c2:
         c4:01:22:e8:2a:8e:11:fc:59:c9:93:08:b4:fb:d4:a0:f7:21:
         12:6b:bf:42:a9:27:df:ff:47:f5:62:6c:85:d3:3a:f1:0e:12:
         0f:5f:ee:63:01:b9:99:a4:88:3e:4a:46:c8:7a:84:45:30:60:
         6b:66:20:df:3f:1e:c9:c5:b1:f1:18:bf:73:fb:c8:0e:b1:d0:
         d3:87:6a:6c
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUYBv6t+bOlvbo81NUb2CIExaq3gowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYxMTAzMTYzMjU2WhcNMjcxMTAyMTYzNzU2
WjAzMTEwLwYDVQQDEygwRjRCMEU2QzRFODEwNDFFQjc3NDEyRUJBMEFFMjZBNzZF
MEEwMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjDVEAgxPRWL
oh5nO+Fa/cbm5sW6HhdMdROznyIb1jv1Bx1kqY+gla2K2nyESBYcLPe0d5jJfsDV
2gG9j5lV1Qi+EBcj/ssbgsldMxaCBpaD/ANI3CtSWLS83/u08EvcSAsb5j4m35Vb
zI+P9ZBsaYTU19khSo05tTrpfEmWtarC7i4t/rZWKOmQNNC+hzp57O1Mb68ThnYS
DHFAZrW6JQpX3EBxEd8tm86eYXFR47MN85mGqfBGBAw1SW9JGAfYyOdtjxLh//Ao
HTzZW3kMPI3eChFDTKAC5zpKRff+l8tNREQl3vXBUojKABREZa//TtgmySixnzgK
466tLVaWPwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFA9LDmxOgQQet3QS66CuJqdu
CgMUMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM5NDM0NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAC02IjAPBAIAAjAJAwcAJgf3QOYU
MA0GCSqGSIb3DQEBCwUAA4IBAQCgpXtWwQ7GeI4hsNmoNzZMOwXJoQ8on7tHfalZ
rlsXd4g+OHk4aV3/jEJbBDnI9ek41NPz5N/84UfiYVDWrNA9R3YOCuOzw08IOCdO
MpgzI4gzwnVxM4q9UQL6ESdea7SxVsfZ7IN09NCoaLGvp5RBBLTRtIf0iCxeE5rb
pnnvBzQ6UZRenKw0AFwm6U5nD7vcE9SxzcIqHjJxDzjVDZvjmq3gyyFVDfqMDlDx
NYZChFtmVcLEASLoKo4R/FnJkwi0+9Sg9yESa79CqSff/0f1YmyF0zrxDhIPX+5j
AbmZpIg+SkbIeoRFMGBrZiDfPx7JxbHxGL9z+8gOsdDTh2ps
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:59:00 2026 by rpki-client