Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20343031373632.roa
File:                     34352e34322e34352e302f32342d3234203d3e20343031373632.roa (raw, json)
Hash identifier:          s8CaSigdvkBRoFQkAKheV/irI5khWFoVTdMi8pQ1QeI=
Subject key identifier:   77:EB:26:5A:01:87:D7:73:D0:00:31:8B:C4:D9:CA:80:DF:BC:96:FE
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       69B604AB5BFB5B80A886ADCC12124E5C0AE674A3
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20343031373632.roa
Signing time:             Mon 16 Jun 2025 19:24:14 +0000
ROA not before:           Mon 16 Jun 2025 19:19:14 +0000
ROA not after:            Mon 15 Jun 2026 19:24:14 +0000
asID:                     401762
IP address blocks:        45.42.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b6:04:ab:5b:fb:5b:80:a8:86:ad:cc:12:12:4e:5c:0a:e6:74:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jun 16 19:19:14 2025 GMT
            Not After : Jun 15 19:24:14 2026 GMT
        Subject: CN=77EB265A0187D773D000318BC4D9CA80DFBC96FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:5b:59:79:ca:69:ca:96:27:4b:12:f9:b5:
                    db:0c:91:9b:b1:98:84:bb:c4:94:85:3b:e9:53:71:
                    e6:7f:13:ec:2e:51:69:37:d0:bc:74:18:89:2f:49:
                    17:50:0d:29:9f:77:0d:9c:63:d8:d6:21:2f:bf:d0:
                    2a:b3:5d:7f:b2:57:f9:4e:dc:a4:05:66:78:39:52:
                    e0:9d:de:cc:64:0f:09:4e:13:4c:2c:45:e9:8d:69:
                    30:dd:e9:ec:81:99:e1:10:66:a6:4e:1d:41:ed:de:
                    a7:ab:26:ae:b5:63:e8:57:72:68:84:46:a7:cb:d9:
                    f3:cb:a5:b9:f2:6f:67:38:6c:84:31:5d:81:2f:ac:
                    f6:c0:67:8c:f0:d5:7d:5d:bb:5c:ea:d1:51:ec:a0:
                    9f:b8:99:d6:7a:42:f4:86:d2:82:18:a3:16:38:41:
                    10:25:8e:97:69:1b:0b:5b:fa:51:a7:5e:04:b0:45:
                    93:b2:d6:85:ec:e4:50:9e:41:25:a7:14:6d:22:fd:
                    8a:b5:4a:e4:6e:20:d6:e9:31:f4:39:3d:f0:cc:57:
                    81:05:07:f5:c7:ee:1b:60:6c:df:51:08:26:97:29:
                    e7:77:9f:32:2c:86:75:95:ff:42:3b:08:df:d1:00:
                    60:67:41:10:e0:33:95:cf:0b:cc:28:55:7b:fc:41:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EB:26:5A:01:87:D7:73:D0:00:31:8B:C4:D9:CA:80:DF:BC:96:FE
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e20343031373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:43:26:af:2b:d7:95:62:33:55:03:71:c1:76:3f:47:41:
         25:a9:de:87:f4:b6:8d:4b:e9:3e:1a:dd:a2:bc:2d:ba:8f:4f:
         f3:65:62:8b:4d:f7:f2:7f:e3:0e:6a:7e:03:b2:04:05:05:d3:
         06:78:90:43:27:4f:f3:38:9e:9b:ad:ab:06:20:0e:5c:a6:34:
         14:2b:90:c8:10:87:ed:7b:3f:ac:06:a4:9c:a4:36:4b:52:08:
         78:db:c9:e6:1f:18:9e:6f:4b:4c:cf:d5:1f:ad:c4:03:90:d6:
         62:c7:c8:4a:b9:cf:bc:5c:c9:f5:80:28:d3:c0:a5:b2:ea:7a:
         a7:ed:67:53:0a:3e:97:c9:9f:46:3b:47:2b:d2:b6:7f:a4:5b:
         ca:fa:e6:1f:49:3b:4d:ad:62:52:f5:af:3b:73:6c:cb:66:0f:
         66:57:f1:e9:73:23:db:6c:01:d5:57:20:4b:14:1d:61:36:b1:
         75:1d:f4:a4:6b:99:42:fa:ad:ca:99:ae:f6:14:af:69:70:5f:
         19:50:df:80:4c:fb:59:ed:c1:21:30:0b:32:06:fd:e9:11:d7:
         48:ff:18:ba:58:f4:cf:23:62:af:05:0f:3d:3b:d9:fe:70:82:
         94:9b:aa:8a:fd:08:47:79:0d:0d:01:e4:4c:cc:78:b4:43:d6:
         1c:81:b9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 13:50:10 2025 by rpki-client