Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20343032343532.roa
File:                     34352e34322e34322e302f32342d3234203d3e20343032343532.roa (raw, json)
Hash identifier:          H79p9zaoL6Kl8SBOaLlNXrZFtWR1qnhluT6W0MUz9WA=
Subject key identifier:   1E:EC:23:6E:CE:EE:C0:C0:7A:B6:45:05:ED:58:FC:15:2C:1F:2D:7C
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       27DB457C378BEBD6FEF134665D7725393F9DE150
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20343032343532.roa
Signing time:             Fri 08 May 2026 22:26:35 +0000
ROA not before:           Fri 08 May 2026 22:21:35 +0000
ROA not after:            Fri 07 May 2027 22:26:35 +0000
asID:                     402452
IP address blocks:        45.42.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 21:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:db:45:7c:37:8b:eb:d6:fe:f1:34:66:5d:77:25:39:3f:9d:e1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: May  8 22:21:35 2026 GMT
            Not After : May  7 22:26:35 2027 GMT
        Subject: CN=1EEC236ECEEEC0C07AB64505ED58FC152C1F2D7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:85:81:fd:a4:48:9b:fc:11:e7:53:00:71:
                    8d:37:7d:f6:bb:72:43:5e:e9:58:df:50:dc:43:0a:
                    86:8e:f0:94:35:2a:d4:83:00:c6:4e:20:66:ea:f3:
                    db:21:5a:8e:a4:ac:63:32:c7:ba:47:da:51:f5:ab:
                    c9:51:c8:c9:d2:b3:42:2d:68:2a:25:b4:47:3b:a9:
                    a6:36:ee:15:7c:57:4e:e0:67:7e:5b:0e:14:f6:56:
                    1f:22:be:32:fb:a4:6e:25:b8:40:d0:7c:de:9f:0c:
                    a7:5b:2e:91:56:f7:e5:72:f4:f0:7d:44:bc:cb:f2:
                    2c:13:c3:0a:eb:8f:a4:ee:78:3d:fd:f9:11:99:1b:
                    43:6c:53:7a:cd:0b:19:9d:26:41:35:19:98:b0:07:
                    b6:b5:22:7f:48:c4:15:76:2a:55:3e:7b:c4:0a:0b:
                    a6:f5:e7:cf:15:ab:d1:16:6c:57:fe:d8:9a:0d:d8:
                    7c:94:c8:63:ab:fd:fd:09:2c:1a:3e:df:04:26:f1:
                    87:5a:49:34:08:d8:63:60:94:86:de:70:71:17:dd:
                    64:95:69:40:c5:30:c3:64:1a:3d:1f:c5:87:8a:67:
                    43:bf:86:28:7a:cf:05:78:0b:47:af:0e:96:84:fe:
                    65:35:0c:d0:8b:84:6b:53:90:19:59:aa:35:ff:91:
                    ee:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EC:23:6E:CE:EE:C0:C0:7A:B6:45:05:ED:58:FC:15:2C:1F:2D:7C
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20343032343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:d5:4a:9a:98:ae:77:91:81:3c:dd:32:0a:99:ab:d3:30:d3:
         1a:65:6a:49:d1:26:81:57:fd:85:ec:a2:b6:4a:8a:39:a8:fc:
         e0:bf:43:2f:c7:4a:2f:a6:52:28:6a:b8:36:48:fe:d5:4d:12:
         3f:bc:f2:c5:7d:15:63:8f:ee:f3:72:f3:68:27:3f:02:3b:d5:
         ae:32:06:f0:30:c6:68:0f:a8:72:e3:9a:24:4e:e1:d3:cd:55:
         28:22:56:93:58:8a:1e:32:67:d5:73:e9:97:3b:e2:71:84:e2:
         d8:4d:6d:0f:16:f1:ac:07:71:6c:47:ab:39:7a:9d:f2:e4:e9:
         d3:ef:62:3c:80:e4:b1:aa:62:6a:bb:2e:04:54:54:cb:98:bc:
         db:d5:60:90:af:47:48:08:f3:8a:dd:c7:ec:e2:28:b2:3d:31:
         94:49:30:ed:8c:2a:ed:ca:e7:4c:d8:42:90:54:df:3f:47:54:
         3e:7f:4a:24:f3:bb:14:76:2d:04:a4:df:f8:7d:9d:03:1e:b1:
         7d:89:8e:2d:44:79:e5:b6:c9:a6:4e:68:e9:3d:78:bc:5a:6c:
         1a:0d:05:20:79:ba:18:37:7c:aa:30:f2:ef:31:23:77:b8:f1:
         79:5a:35:1b:8d:8f:32:77:3e:dd:ae:a1:ce:88:23:8a:9f:73:
         98:cb:9e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:57 2026 by rpki-client