Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          u1e4Sf32/UUB/ilQgPY7k0lI/gGzyQ/HmJJ5jNh4Mqc=
Subject key identifier:   EB:1E:1D:59:81:93:B3:B4:82:8E:0B:2D:87:9B:C0:79:5F:2F:FC:F0
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       48171E88A1E5B51B58A3902F306F3F76C0E73EA2
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e20383334.roa
Signing time:             Fri 10 Jul 2026 17:14:45 +0000
ROA not before:           Fri 10 Jul 2026 17:09:45 +0000
ROA not after:            Fri 09 Jul 2027 17:14:45 +0000
asID:                     834
IP address blocks:        45.42.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:58:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:17:1e:88:a1:e5:b5:1b:58:a3:90:2f:30:6f:3f:76:c0:e7:3e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jul 10 17:09:45 2026 GMT
            Not After : Jul  9 17:14:45 2027 GMT
        Subject: CN=EB1E1D598193B3B4828E0B2D879BC0795F2FFCF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:3b:68:83:19:a0:d9:1d:e8:3c:8c:96:e5:
                    eb:c7:7c:fb:03:02:8c:57:5f:87:c9:13:47:c8:f3:
                    4b:76:47:ec:c4:fd:93:76:74:fd:fe:a3:7a:a0:40:
                    dd:48:40:60:e1:b3:65:69:51:1f:c8:5f:da:38:14:
                    92:fe:26:1c:7b:44:15:a1:25:19:84:2f:97:46:b2:
                    da:68:e1:4a:74:cb:7b:c2:10:90:86:a9:72:82:48:
                    c9:9f:13:ef:d5:50:2d:3e:64:2e:35:06:de:73:8f:
                    36:1e:d2:4c:35:ac:21:6c:37:cb:9c:98:7e:6b:0c:
                    a9:64:09:dd:0e:86:df:b1:53:8f:7b:cc:77:e9:b7:
                    59:ec:16:68:a5:27:5e:40:df:b0:89:46:71:a9:7c:
                    a0:f8:5b:05:4f:ae:33:4d:a1:82:85:df:ba:ce:2c:
                    57:ab:8b:5b:bc:67:63:3f:6e:2e:bd:47:69:79:06:
                    f6:5e:4c:e5:58:8b:bd:61:65:df:39:47:2d:e5:28:
                    9d:46:44:3e:c7:6a:25:16:3b:6b:48:19:c0:ca:4f:
                    a0:00:9b:25:4e:16:d1:bc:12:5a:de:ac:56:a8:d4:
                    4d:35:45:45:0c:c7:ca:12:a6:f1:3d:e3:c4:a7:23:
                    0d:05:69:7e:00:b5:79:58:3f:3c:5e:bd:85:2d:bc:
                    3d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1E:1D:59:81:93:B3:B4:82:8E:0B:2D:87:9B:C0:79:5F:2F:FC:F0
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:6a:2d:4b:9a:92:1f:af:65:e9:74:53:96:82:3e:37:9e:7d:
         3c:16:da:e9:e9:f4:2e:a0:a3:f6:e0:b8:af:78:a2:fe:56:74:
         d3:65:09:e7:68:f3:8e:82:34:20:40:60:ec:4b:22:93:8d:ca:
         ff:a0:0e:5b:87:08:03:da:06:9c:9d:7c:ac:c9:15:5a:e7:7d:
         70:d5:8c:2b:42:13:a6:2e:f4:b3:79:89:71:68:b0:dd:99:37:
         1a:a9:9b:bd:b0:83:04:05:38:c7:26:5f:2c:b0:cf:b6:06:9f:
         78:34:1c:29:1f:e9:74:d7:23:98:c0:30:76:f3:69:42:fe:ce:
         43:7c:bc:1c:45:17:ca:bd:d1:62:27:c7:3c:be:fa:c9:3b:14:
         43:ae:bd:bb:2c:c6:15:b2:81:9b:55:92:af:77:52:7a:03:bf:
         0b:a6:80:95:98:d2:29:9c:da:1c:5d:e8:b1:13:01:9b:1a:32:
         50:97:33:0e:8e:76:3d:28:b7:7e:0d:27:25:c5:09:91:82:1d:
         54:86:aa:cd:27:93:49:65:4d:3f:82:d1:0a:ac:ec:91:15:da:
         f0:15:75:6f:f2:e0:e4:32:c6:3c:d3:22:c4:30:be:03:a7:2f:
         a8:7a:7d:84:58:24:05:2f:e4:40:8e:ee:1f:28:57:b5:27:4a:
         c9:5d:74:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:56 2026 by rpki-client