Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313532363732.roa
File:                     34352e3135302e35322e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier:          pA2qUkFpqaqvqv1BURZ4BKUmGXfrVb+5G2tKGUujIfU=
Subject key identifier:   A6:A3:47:0D:A3:3D:57:A3:6B:79:DF:12:11:B7:C8:B1:52:6B:9F:E0
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6D79830F72446A6C2447A26A0783C5A062E65E84
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313532363732.roa
Signing time:             Mon 30 Jun 2025 05:54:29 +0000
ROA not before:           Mon 30 Jun 2025 05:49:29 +0000
ROA not after:            Mon 29 Jun 2026 05:54:29 +0000
asID:                     152672
IP address blocks:        45.150.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:79:83:0f:72:44:6a:6c:24:47:a2:6a:07:83:c5:a0:62:e6:5e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Jun 30 05:49:29 2025 GMT
            Not After : Jun 29 05:54:29 2026 GMT
        Subject: CN=A6A3470DA33D57A36B79DF1211B7C8B1526B9FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:df:9b:4a:bc:61:b7:5b:70:b3:69:6c:d0:2a:
                    b9:52:78:20:15:02:83:c4:1a:6e:b4:30:1f:1c:98:
                    5f:38:21:06:f4:ce:aa:a7:d3:72:dc:06:d8:70:db:
                    7b:db:d8:de:97:2a:82:a7:08:3d:59:f5:32:57:85:
                    42:55:14:9d:40:67:84:da:36:b0:be:c5:48:84:82:
                    28:7c:c8:99:fc:8f:fb:95:18:6a:c4:20:26:1c:71:
                    a1:52:ba:47:09:68:cd:87:af:5e:30:76:af:b8:0d:
                    58:eb:9b:c6:ba:e9:6b:da:cc:f8:de:61:40:fe:68:
                    48:cc:97:6d:17:6b:61:04:5e:1a:36:b8:2a:5c:08:
                    3d:dd:69:07:55:ef:e8:76:5a:e8:df:84:7d:f2:0f:
                    3d:33:9a:7e:f0:bf:31:4c:16:73:10:b3:51:40:c1:
                    03:1c:8e:b2:af:98:07:55:24:7c:ec:2f:70:a9:30:
                    92:bd:d4:c8:15:f3:8e:b0:75:9f:59:39:39:32:c5:
                    ac:73:1f:4e:41:67:62:47:2d:25:e2:fd:0d:f7:1a:
                    e6:4e:90:63:8d:f6:b2:6b:50:ed:33:c2:b9:ba:5c:
                    f6:8b:9f:55:70:0a:f0:8f:72:45:e8:66:0c:84:41:
                    59:27:87:d5:91:08:00:5e:0f:94:e8:b3:02:59:a5:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:47:0D:A3:3D:57:A3:6B:79:DF:12:11:B7:C8:B1:52:6B:9F:E0
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313532363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:50:61:b6:3b:d5:df:74:ba:2f:f2:c3:f2:da:f6:d7:5f:f5:
         ad:05:5b:f0:16:96:c5:16:ee:03:47:68:4b:9d:27:1b:3e:7b:
         20:22:6f:09:27:d2:18:18:06:3e:f4:ad:e9:0b:6b:70:01:47:
         c5:3b:21:96:81:be:d2:34:15:f1:e9:50:49:e7:e7:61:7e:82:
         3a:c5:1c:d4:69:ee:82:dc:c3:9d:e4:10:fc:3f:f2:f7:3f:99:
         45:13:25:ef:5a:d3:43:82:d0:e0:12:84:72:d8:fc:ec:ff:62:
         c9:60:2a:ed:97:e3:1e:0e:8c:5f:a3:4a:01:6d:e0:6e:3c:12:
         ab:75:5f:f2:87:0a:ab:9a:83:12:16:ae:47:16:1a:08:8a:db:
         f4:06:91:12:cf:0a:8a:f3:b0:8f:e6:41:fc:79:c8:da:36:17:
         f9:90:32:9f:ac:d2:53:84:f3:8b:80:72:9d:3b:e1:d6:cd:10:
         53:ac:20:9a:80:c0:bc:28:d9:1d:02:03:04:8f:4a:d5:a0:11:
         fb:7a:20:71:76:7f:d0:a0:0c:35:49:59:87:20:44:31:7a:e4:
         d6:c9:b2:52:76:1f:6b:fa:e5:ff:6e:a3:28:2a:59:34:1b:ef:
         77:db:58:67:c7:61:a7:a4:de:f2:96:92:14:8c:23:66:56:93:
         50:07:76:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:50:48 2025 by rpki-client