Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32332d3233203d3e2032393134.roa
File:                     34352e3135302e35322e302f32332d3233203d3e2032393134.roa (raw, json)
Hash identifier:          EJFMg2RNaUiz1E7GgCqi8Pmf7jNs5THhdRlTSa+6Y6o=
Subject key identifier:   E6:14:E1:05:5B:67:47:D2:CF:B7:34:CC:8E:E7:E6:6C:02:E7:E3:D5
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3346005C0C723BB6465870C3324FCDBA28BD1DF7
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32332d3233203d3e2032393134.roa
Signing time:             Fri 24 Apr 2026 11:08:35 +0000
ROA not before:           Fri 24 Apr 2026 11:03:35 +0000
ROA not after:            Fri 23 Apr 2027 11:08:35 +0000
asID:                     2914
IP address blocks:        45.150.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 11:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:00:5c:0c:72:3b:b6:46:58:70:c3:32:4f:cd:ba:28:bd:1d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 24 11:03:35 2026 GMT
            Not After : Apr 23 11:08:35 2027 GMT
        Subject: CN=E614E1055B6747D2CFB734CC8EE7E66C02E7E3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6c:de:bd:de:4f:26:09:08:eb:95:c7:56:1e:
                    3a:63:26:ec:e2:27:af:e8:69:db:b2:16:7f:8b:f3:
                    da:5a:69:a1:81:d6:03:c7:99:4b:bd:fa:f6:e2:7c:
                    38:4f:25:c8:81:cf:60:11:98:39:a4:af:54:f2:6f:
                    bf:c7:b9:c2:65:f4:eb:6c:05:99:6e:99:d3:8c:6f:
                    42:37:2f:dd:16:31:65:79:9b:34:d3:a4:4f:93:04:
                    0a:bc:08:18:6d:d2:2e:b3:7b:b0:3a:ce:ab:17:ac:
                    cd:3e:fa:b6:ba:bd:5c:bd:e8:06:d4:02:6b:00:b3:
                    8c:18:50:69:2d:ee:44:79:6b:90:a0:62:47:ac:9d:
                    c7:29:56:3f:45:7c:2d:7d:bb:11:86:50:9f:a9:00:
                    8e:3e:b7:cf:cc:21:ba:7b:04:a3:48:1f:3a:d4:05:
                    7a:b2:c4:30:19:95:1c:42:ea:6c:c6:4c:96:94:82:
                    3d:b4:5d:0e:26:f3:e1:60:bd:5d:ca:d8:39:65:61:
                    e6:5c:2a:b9:d2:80:30:ca:0a:0d:8d:7c:ec:5c:90:
                    c8:be:0d:31:af:fb:16:68:88:0c:34:04:27:19:6b:
                    01:9e:b4:be:c7:c0:67:86:39:94:38:69:d1:99:a7:
                    9e:f8:02:71:8b:78:96:49:20:cd:52:4f:d4:bc:01:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:E1:05:5B:67:47:D2:CF:B7:34:CC:8E:E7:E6:6C:02:E7:E3:D5
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32332d3233203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:53:40:7f:ef:14:44:ef:48:0f:ee:e8:27:25:1d:33:b8:
         fe:91:78:44:e9:89:1d:f1:ff:9b:b8:6b:de:00:51:8d:9b:04:
         84:96:aa:b3:fe:97:c0:53:f7:3d:c6:38:0f:8d:e1:ca:01:eb:
         3c:5c:95:8d:f6:ee:4e:69:19:2a:b8:8d:da:00:9c:c7:9e:07:
         4b:9a:3b:bf:28:68:92:b0:dc:71:24:e4:59:c2:50:f5:f0:fd:
         04:c1:ad:8a:4b:d3:f0:55:9f:4e:af:cd:59:1a:77:b3:4f:7a:
         dd:b6:5c:f4:93:da:5b:4c:4a:a8:22:47:c9:26:05:7d:72:19:
         1a:03:a7:09:6a:de:46:e0:22:41:60:05:c7:f0:6f:6c:f9:c2:
         83:be:59:90:10:de:70:bd:f0:fb:8c:49:be:80:31:13:f6:dc:
         4a:28:e0:05:40:90:74:25:b3:8d:13:48:01:cb:50:e4:8b:03:
         97:09:6d:1c:68:c3:72:31:5c:f5:c2:81:e8:69:a5:2a:9c:07:
         e8:d5:2d:44:4c:2d:b0:20:d9:2a:c6:d9:8e:25:e7:5d:a8:da:
         6e:4a:20:c2:61:55:ce:a6:63:2a:ee:78:9a:eb:52:37:12:7c:
         c5:4b:16:c0:8b:df:3d:0c:1d:c9:7a:a3:b5:bf:da:27:fe:d1:
         f0:a1:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:00 2026 by rpki-client