Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203531373931.roa
File:                     34352e34322e34322e302f32342d3234203d3e203531373931.roa (raw, json)
Hash identifier:          M3x4MdC8diK80ipkcS7nMFoAMWHoa+h66RUxB8pSq7g=
Subject key identifier:   DC:39:20:35:10:88:A6:1E:30:0E:F9:C8:58:B0:AD:85:A6:3C:40:B2
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       62153071515B8268443146704A7579C4795A30CC
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203531373931.roa
Signing time:             Thu 16 Oct 2025 16:43:21 +0000
ROA not before:           Thu 16 Oct 2025 16:38:21 +0000
ROA not after:            Thu 15 Oct 2026 16:43:21 +0000
asID:                     51791
IP address blocks:        45.42.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:15:30:71:51:5b:82:68:44:31:46:70:4a:75:79:c4:79:5a:30:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 16 16:38:21 2025 GMT
            Not After : Oct 15 16:43:21 2026 GMT
        Subject: CN=DC3920351088A61E300EF9C858B0AD85A63C40B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:f4:24:a1:a0:c1:cf:bc:38:c1:f2:73:68:
                    47:19:85:d4:b5:29:43:2f:71:38:cc:30:cf:c7:3b:
                    b2:2d:95:c4:3a:1b:98:79:22:ed:fc:df:e8:bf:a5:
                    f7:f5:66:32:a1:17:66:52:2b:36:a4:36:4c:79:bb:
                    e5:ed:67:80:aa:ac:30:11:db:63:92:84:4d:05:64:
                    aa:68:e7:a6:b0:14:b2:52:16:09:58:99:6f:68:ef:
                    7b:3f:64:78:24:de:d1:28:ca:e8:e6:4a:22:42:2c:
                    09:8e:3b:0d:e2:16:1e:9e:72:57:d0:b9:78:27:f9:
                    12:f5:9c:ea:26:d8:9a:c0:9c:9b:09:32:42:1d:9a:
                    f9:67:09:6d:04:72:83:4a:09:b6:11:8e:96:7e:98:
                    4b:17:50:0e:37:36:7f:30:ed:5b:67:64:66:ae:0c:
                    54:ac:4e:78:31:93:e8:d3:37:ab:58:3e:98:f9:30:
                    18:2e:be:70:82:f6:68:c9:67:88:13:06:89:fa:9f:
                    66:59:37:4b:ab:e3:0f:27:26:d9:45:68:72:c5:32:
                    59:b3:e5:10:cb:a4:6f:43:07:05:b1:67:67:c9:0a:
                    9f:a8:26:05:94:02:e4:57:74:77:24:47:4d:2a:0a:
                    d5:85:fe:67:94:e2:1b:8e:5b:ee:63:5b:8d:a1:01:
                    74:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:20:35:10:88:A6:1E:30:0E:F9:C8:58:B0:AD:85:A6:3C:40:B2
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203531373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d6:41:4e:12:1f:3a:1b:92:9b:30:f3:1a:dd:ef:17:29:d4:
         de:31:45:d2:67:ee:88:98:e9:45:51:25:24:3f:ad:dc:d4:e5:
         65:81:e7:f9:3a:98:04:2a:6f:2f:87:27:00:8e:2e:6b:d8:3a:
         f4:e9:ac:f0:80:bd:20:a3:ff:ec:00:cf:75:54:04:b9:73:4e:
         82:45:5e:bb:98:34:84:e5:10:02:92:b1:d0:e9:9d:7e:be:ec:
         aa:41:a9:9e:0e:ef:e6:a2:c3:50:2a:2d:e9:3d:d1:e1:d6:7d:
         a9:65:21:04:0a:e4:28:20:6a:96:b3:6d:64:11:b0:9f:bc:71:
         96:1d:61:8e:d1:b5:95:25:c1:a7:b0:74:15:5d:df:6f:91:09:
         59:b8:a3:a2:91:1d:ac:18:1a:02:0a:fd:c5:58:b0:80:cd:75:
         3f:21:f4:89:66:68:d9:8f:43:31:69:55:97:c5:39:56:d4:d2:
         89:06:e4:ae:b0:de:6f:74:8a:0d:22:90:2a:da:c7:57:fd:50:
         a7:a9:a7:a2:cc:06:8d:4e:41:66:13:8f:41:ac:5c:f6:9c:87:
         80:6c:c4:25:68:a7:50:76:f2:28:56:56:52:33:46:8d:1a:d0:
         ad:ef:d1:24:8b:d0:42:f8:b4:a9:24:76:4e:b7:7c:a5:d2:da:
         4f:08:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:17 2025 by rpki-client