Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa
File:                     34352e34322e34322e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          wCM/2b1QWb4IDY35STaCab/vRgTI1qYl+5JUszILWzQ=
Subject key identifier:   C5:24:4A:8F:6E:B3:74:83:9B:53:D9:B0:60:D6:DD:91:BA:F2:32:2A
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       6BAA555578CD6C6DA62E9B8A5FE9CCEA0BF9768B
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 12 Aug 2025 12:29:44 +0000
ROA not before:           Tue 12 Aug 2025 12:24:44 +0000
ROA not after:            Tue 11 Aug 2026 12:29:44 +0000
asID:                     53356
IP address blocks:        45.42.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:aa:55:55:78:cd:6c:6d:a6:2e:9b:8a:5f:e9:cc:ea:0b:f9:76:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Aug 12 12:24:44 2025 GMT
            Not After : Aug 11 12:29:44 2026 GMT
        Subject: CN=C5244A8F6EB374839B53D9B060D6DD91BAF2322A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:0e:16:e1:dc:8b:99:ac:63:b0:2c:ea:95:
                    1f:95:9a:02:a3:09:ef:fc:d8:65:47:56:c0:d7:a0:
                    2f:71:0d:48:be:86:85:96:06:6f:ed:22:f4:a6:51:
                    d0:67:c3:2e:63:38:79:53:d5:99:da:97:01:db:d5:
                    dd:2e:a3:92:34:19:1d:46:98:8d:97:cf:46:fb:23:
                    97:45:91:16:27:58:47:43:97:34:ac:58:80:27:fc:
                    fb:ba:56:51:78:bd:11:44:91:83:de:72:a7:b5:3b:
                    17:13:b8:ae:06:af:1d:eb:49:fd:73:d9:73:6c:81:
                    95:c6:6a:76:7e:ac:ee:27:86:5f:d5:29:5f:3e:ee:
                    c1:7d:b9:07:d8:f7:fb:d4:63:20:30:f2:70:bc:05:
                    92:4e:9f:53:de:d3:dc:7c:e4:da:72:37:d6:e5:a2:
                    9f:fc:10:4d:16:88:e1:62:36:07:3b:dc:55:fe:00:
                    0c:fa:1c:66:11:d5:41:12:b7:c7:5e:be:8c:9d:f4:
                    c6:52:9b:45:de:db:1a:9b:d5:8b:ed:11:69:f1:ce:
                    41:e0:a1:98:8a:19:5c:c4:ed:a0:2a:04:4f:ef:67:
                    7c:58:b2:f4:0e:96:4e:6c:39:70:71:f6:06:ff:93:
                    29:5e:2a:b9:6f:9f:26:f3:02:a8:1f:32:7d:75:c0:
                    08:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:24:4A:8F:6E:B3:74:83:9B:53:D9:B0:60:D6:DD:91:BA:F2:32:2A
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:49:30:12:a9:7a:9d:09:75:6a:bf:07:2e:ce:ca:c5:bf:b0:
         d1:fb:77:51:3c:cf:48:1b:db:32:0d:21:d2:98:71:95:ee:5f:
         a0:52:67:56:af:8b:53:57:1c:ca:b8:a5:dd:86:e3:88:80:8e:
         73:d4:aa:be:ee:8f:e8:6a:3a:b0:13:61:bb:cc:60:d2:ab:12:
         45:b2:64:ab:24:96:93:e2:c3:6e:95:a2:7e:fb:03:a5:84:fb:
         b6:db:fb:5c:73:28:cc:51:f0:e5:68:55:75:07:d9:5d:88:be:
         09:ec:53:9d:d4:e3:34:6e:77:6f:d8:bf:3c:99:fc:c1:d6:d8:
         15:0e:57:ff:e1:02:b3:fa:53:de:32:07:e4:85:01:e0:bb:09:
         ef:34:0a:4c:50:64:f3:ef:80:48:e0:07:42:c7:d4:48:8d:57:
         6b:27:4a:f2:27:3d:90:cc:5f:a0:a7:a9:ef:b6:5e:a5:09:4a:
         e0:02:f6:18:c2:a0:3a:85:d6:db:c9:c2:af:1a:21:34:b6:7d:
         00:9a:26:65:52:33:97:98:73:85:db:75:09:57:18:b6:2c:5a:
         ed:fe:5d:a7:aa:f9:72:24:d7:95:5f:b0:97:eb:13:da:c3:aa:
         49:9f:35:59:d7:64:87:0e:ad:67:c9:f0:7d:b7:c1:2d:f3:1e:
         a9:cb:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:45:09 2025 by rpki-client