Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20323635353137.roa
File:                     34352e34322e34322e302f32342d3234203d3e20323635353137.roa (raw, json)
Hash identifier:          tgtfa6utTieKhy9E8SNlxHBD53fuba+Y75TpBvdwvtQ=
Subject key identifier:   3C:1E:C8:63:8C:79:42:FE:D2:7E:95:D9:5F:38:E5:AD:22:39:F6:A2
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       6CBD69517BF05BD2CD163B25993D33E61682AFD9
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20323635353137.roa
Signing time:             Fri 10 Jul 2026 17:12:13 +0000
ROA not before:           Fri 10 Jul 2026 17:07:13 +0000
ROA not after:            Fri 09 Jul 2027 17:12:13 +0000
asID:                     265517
IP address blocks:        45.42.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bd:69:51:7b:f0:5b:d2:cd:16:3b:25:99:3d:33:e6:16:82:af:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jul 10 17:07:13 2026 GMT
            Not After : Jul  9 17:12:13 2027 GMT
        Subject: CN=3C1EC8638C7942FED27E95D95F38E5AD2239F6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:77:16:d1:92:b8:ea:90:e5:56:2a:31:f6:98:
                    9f:9a:78:12:a3:40:de:02:6d:5c:96:22:ca:85:ab:
                    37:90:a7:a7:52:0e:3b:37:0b:87:48:b3:53:a7:d3:
                    69:84:81:3a:81:76:e3:5e:05:c1:e0:14:f6:05:ae:
                    9a:2b:c5:25:fd:15:74:ea:22:46:3c:75:e8:ce:0d:
                    fa:4d:a6:b2:ed:5e:fd:42:03:14:e4:a2:9c:d6:bd:
                    aa:1a:7e:f0:79:f8:97:31:4d:2f:c4:5e:7f:8d:fb:
                    a6:62:0a:a8:40:70:da:3b:0c:9c:58:a2:6d:61:fa:
                    e7:d7:53:2d:8b:ea:27:44:18:c1:e7:f7:75:a5:03:
                    18:07:c2:2b:15:85:02:50:14:a2:0e:dd:00:ef:26:
                    9b:9a:cf:04:f6:fe:87:ea:a6:3f:c7:92:cf:7b:b7:
                    6e:8b:dd:c7:de:5d:b1:08:b2:35:ab:3c:b8:32:3e:
                    5c:26:1b:d0:8f:e3:a6:3c:e4:58:ee:61:8f:70:23:
                    e4:d6:cc:58:cd:80:83:12:5c:6c:a3:59:39:21:d5:
                    13:d7:85:dc:b9:7d:1b:51:0a:1e:a7:26:76:6a:a3:
                    03:29:7d:fc:b8:70:48:49:6b:81:03:7a:9d:2e:73:
                    ce:50:8c:3a:a7:99:7c:2b:68:09:9b:23:c1:03:43:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1E:C8:63:8C:79:42:FE:D2:7E:95:D9:5F:38:E5:AD:22:39:F6:A2
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20323635353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4c:76:1c:2b:8f:91:c3:da:ac:b0:5d:cd:c7:2a:8f:59:0f:
         55:f6:4b:30:7b:42:45:2b:86:d2:06:58:3e:00:01:91:f3:76:
         75:34:28:fd:7a:f5:9a:45:15:f4:7e:04:fe:81:8f:9b:f0:60:
         ba:b8:5f:f0:97:09:7e:36:e0:cc:aa:15:f7:82:82:ad:f9:da:
         bc:fc:59:f7:9b:a1:c2:32:0b:2a:1f:3c:ee:40:80:27:b1:f7:
         35:e0:87:31:7b:25:b7:be:de:3c:8b:3f:60:f8:32:14:6d:92:
         77:25:b7:92:eb:20:b5:20:78:f7:3a:28:b3:be:2f:df:0a:a1:
         a5:38:aa:85:b4:bd:a3:01:e6:8f:03:ae:28:31:98:ab:9c:a6:
         64:a8:0e:81:bc:35:40:76:d4:1a:97:5d:82:66:5b:a2:8a:87:
         a9:a7:e9:c1:20:32:a0:93:b1:d3:fa:80:98:79:a5:5a:44:7a:
         99:8a:b7:24:d6:0e:e6:37:1d:96:16:0a:ff:e9:d6:62:bc:66:
         37:7e:ee:98:e4:56:10:02:43:09:cc:7c:6f:74:e1:a0:bb:02:
         7e:e1:78:52:8d:9b:be:95:43:7e:ac:84:21:92:dc:52:a5:c1:
         d1:a6:e5:0e:f5:4c:c5:c5:2f:3f:5c:d4:9e:fc:c3:95:50:97:
         af:32:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:36 2026 by rpki-client