Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39372e302f32342d3234203d3e203336323336.roa
File:                     34352e3135392e39372e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          FvzHv9IW0vkuKT48XKkXTFSIb9lRttED49nSJNgoUGQ=
Subject key identifier:   8E:2C:F4:D5:BD:8B:7D:FB:10:97:FB:BF:BD:4B:A9:2F:53:41:3C:37
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       15268C335CE70B08514C486E8913B6E3B5DA3EB5
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39372e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 22:29:09 +0000
ROA not before:           Mon 06 Jul 2026 22:24:09 +0000
ROA not after:            Mon 05 Jul 2027 22:29:09 +0000
asID:                     36236
IP address blocks:        45.159.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:26:8c:33:5c:e7:0b:08:51:4c:48:6e:89:13:b6:e3:b5:da:3e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jul  6 22:24:09 2026 GMT
            Not After : Jul  5 22:29:09 2027 GMT
        Subject: CN=8E2CF4D5BD8B7DFB1097FBBFBD4BA92F53413C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:78:31:7e:14:e6:da:a0:21:56:e0:d6:0a:50:
                    a1:ed:d7:60:7d:5c:52:97:78:fd:11:d7:e3:ca:68:
                    b5:d9:fc:36:68:ac:61:dc:aa:f1:78:15:a3:1b:73:
                    d3:6c:4a:03:14:04:fd:b3:84:5e:78:05:68:e1:e5:
                    24:05:bb:c8:d0:d2:70:d5:f9:ef:1b:89:3f:08:bc:
                    b0:54:de:cd:2b:6d:2c:4f:08:91:e6:41:38:37:53:
                    7b:4e:b6:05:21:5d:35:51:29:76:cc:4a:32:3a:8e:
                    4b:e6:38:14:33:2e:f1:77:3d:5b:77:c9:61:34:cb:
                    0f:ed:3a:ae:ed:4f:03:19:e5:32:41:e8:d9:6f:95:
                    c4:c6:40:81:aa:c1:4e:02:bd:6d:f2:3e:09:e4:67:
                    19:ae:a9:31:b6:73:79:c9:55:6f:78:13:65:7a:99:
                    58:60:28:0b:eb:67:cf:6d:68:15:e8:10:8f:13:f6:
                    0e:92:08:d7:e5:84:26:1c:b7:9a:dc:90:4f:dc:e0:
                    79:fd:6f:5b:50:3d:13:f8:66:f0:c9:d3:fa:08:14:
                    67:5f:7e:98:7f:af:03:c1:5d:17:c5:4d:b8:48:77:
                    cd:79:d8:c9:40:a3:ef:64:f7:d7:f7:68:10:63:b4:
                    01:db:29:6b:7b:6a:ae:0b:cb:c4:54:2c:e5:bf:98:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2C:F4:D5:BD:8B:7D:FB:10:97:FB:BF:BD:4B:A9:2F:53:41:3C:37
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/34352e3135392e39372e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e8:f7:bd:5e:bc:8e:07:98:45:3a:1d:81:d8:3a:73:7c:a2:
         79:35:d5:c5:44:42:cb:2c:1c:9b:71:47:b0:b8:08:2f:6c:78:
         c4:bc:7a:51:89:83:de:92:69:c5:f6:e2:16:bf:14:df:19:03:
         04:68:3c:5e:e9:cc:67:67:b0:00:ae:6f:6b:d2:cd:5f:cb:2f:
         75:8d:b9:2b:78:82:a2:8b:c2:82:17:f0:8c:60:f3:00:f1:63:
         11:58:d9:5e:d9:6c:03:17:ee:ef:d4:e0:e2:ff:e4:ce:85:d0:
         d6:90:44:fe:82:a5:e5:c3:55:c9:1e:d1:11:d2:52:08:dd:47:
         48:d8:43:e1:da:77:09:6b:44:57:f3:f4:eb:e9:1d:f2:91:db:
         9a:40:79:c5:0d:08:69:7c:2a:58:55:19:ab:81:bc:95:15:a4:
         29:44:5e:00:f0:fc:d2:cd:29:24:28:63:a4:39:ac:3d:51:fd:
         ea:e1:d0:ee:c3:25:63:14:00:bc:4b:46:d2:36:b5:f7:9e:8a:
         1b:5d:17:68:ba:d5:a9:f4:35:7f:d6:fd:df:fc:70:85:0e:24:
         f2:86:89:89:94:44:a2:cc:c0:85:e4:b4:9c:7b:82:04:71:4e:
         3e:ed:1c:02:e3:a7:70:9c:ba:41:5e:9b:12:b1:36:be:ef:39:
         f5:cc:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:15 2026 by rpki-client