Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32322d3234203d3e20383334.roa
File:                     34352e3133322e38302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          0cB1/HLgeDFmwXBXx3WkMfYq/21WS6ptOXhIXzhX2Eo=
Subject key identifier:   4C:38:53:D6:14:D8:DB:F2:83:25:1C:A0:1E:B2:B4:51:8A:9F:52:9D
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6894505B67406C8797F951A4D133904AEE9B6DCF
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32322d3234203d3e20383334.roa
Signing time:             Sat 11 Jul 2026 07:04:28 +0000
ROA not before:           Sat 11 Jul 2026 06:59:28 +0000
ROA not after:            Sat 10 Jul 2027 07:04:28 +0000
asID:                     834
IP address blocks:        45.132.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:50:5b:67:40:6c:87:97:f9:51:a4:d1:33:90:4a:ee:9b:6d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jul 11 06:59:28 2026 GMT
            Not After : Jul 10 07:04:28 2027 GMT
        Subject: CN=4C3853D614D8DBF283251CA01EB2B4518A9F529D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:4b:3c:83:da:07:36:05:5d:1c:42:24:15:
                    35:e1:69:3e:61:d6:3a:46:37:b5:d9:c8:6f:87:2f:
                    09:bf:ee:31:80:62:03:cf:7e:dc:fc:9b:09:81:bb:
                    79:e3:05:a5:a7:0b:d0:2c:ba:b8:39:94:c8:f6:b1:
                    db:22:49:4e:0d:4b:bb:52:52:7c:a6:c1:13:e6:ad:
                    f2:a8:65:7e:f8:da:a4:46:79:a3:a8:38:e8:99:2c:
                    68:f2:98:00:6a:b9:13:a3:3e:91:83:31:a0:12:f6:
                    6a:7b:b0:87:cc:89:a3:4d:98:df:f1:c7:59:03:13:
                    99:5c:b8:03:d7:d3:23:7c:5b:9f:87:0d:46:ba:28:
                    2a:d7:27:f4:f5:b4:d8:c2:9e:39:bb:55:dd:ed:8a:
                    d3:60:86:70:2a:97:e3:4a:2a:14:bc:5e:27:1f:cb:
                    e8:63:5d:96:0a:00:87:d8:5b:cb:42:ad:4a:5d:a4:
                    29:91:9d:c1:1d:71:30:05:ca:69:6b:a2:9a:cf:7e:
                    01:75:6d:ed:3a:16:ae:79:94:01:e9:2c:7a:d2:da:
                    d8:4e:32:83:0f:04:7b:da:a2:10:36:cf:62:9d:1e:
                    ec:d2:41:8d:c1:6d:7f:32:49:9a:49:59:2b:ad:b2:
                    32:02:87:78:99:e2:9b:8b:c8:04:b1:3d:15:8e:43:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:53:D6:14:D8:DB:F2:83:25:1C:A0:1E:B2:B4:51:8A:9F:52:9D
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:25:f8:d1:8a:8c:bf:ce:a0:6a:7e:8f:f1:1f:30:bb:a2:7e:
         aa:ac:43:78:aa:dd:74:8b:63:14:f8:7f:20:75:97:02:c8:71:
         72:25:2d:85:f3:9e:db:c6:9c:85:0d:24:1c:60:ad:5c:21:80:
         99:cb:f1:f5:99:6f:9e:18:d7:39:8f:52:ac:4f:29:f3:6b:a2:
         b7:e1:d2:c1:a0:75:d4:14:85:bc:8a:b4:e3:fd:f7:2f:ff:d9:
         52:4e:fa:14:37:59:1a:78:7e:6b:4d:ed:5e:b2:e8:0a:0b:c1:
         d6:44:e4:ba:e2:f8:51:89:6f:09:99:cf:8d:93:03:d0:83:e2:
         d0:a0:97:69:07:97:8b:e0:69:00:01:ad:68:b3:d0:ee:6b:af:
         5a:e6:53:89:b5:43:09:66:42:b7:cd:0f:e8:ac:bc:64:23:ff:
         ff:c1:f0:66:78:60:a4:7a:91:49:02:62:f7:de:6a:cf:db:73:
         a3:67:0f:c1:0f:08:ed:7e:d5:b9:07:a3:ca:30:3e:66:00:6e:
         28:46:86:be:5a:f3:ab:4e:11:79:5f:78:13:c3:a2:a3:83:9c:
         68:85:86:ac:b5:f5:69:0f:46:40:95:ef:64:08:b0:5a:3f:94:
         47:50:0b:d0:01:eb:05:b6:d8:bd:22:ef:a2:50:e6:2e:a0:a0:
         ff:bd:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:56:02 2026 by rpki-client