Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35342e302f32332d3233203d3e203633393032.roa
File:                     34352e3135302e35342e302f32332d3233203d3e203633393032.roa (raw, json)
Hash identifier:          85SESZoRABfPahByuLrXiHpK/R2y2WkJk8nByXYH6ls=
Subject key identifier:   32:04:3C:19:9E:F8:4F:3C:49:57:91:14:BA:9C:E0:25:46:3D:2D:81
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       0BC9B70353568B8B08C4A366830CEE1CAC209715
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35342e302f32332d3233203d3e203633393032.roa
Signing time:             Wed 23 Apr 2025 05:39:06 +0000
ROA not before:           Wed 23 Apr 2025 05:34:06 +0000
ROA not after:            Wed 22 Apr 2026 05:39:06 +0000
asID:                     63902
IP address blocks:        45.150.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 09:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c9:b7:03:53:56:8b:8b:08:c4:a3:66:83:0c:ee:1c:ac:20:97:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:06 2025 GMT
            Not After : Apr 22 05:39:06 2026 GMT
        Subject: CN=32043C199EF84F3C49579114BA9CE025463D2D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:de:49:9a:d5:b3:12:6a:ba:f6:13:ff:e6:
                    a6:b2:59:bf:ea:1f:a8:93:aa:2d:49:e2:dd:f0:0d:
                    24:16:b1:8c:18:2b:a8:bc:c6:6b:6d:6d:3c:0c:7a:
                    50:68:b2:47:52:c4:e1:4a:0f:2c:2e:c4:11:0a:5e:
                    a8:ab:83:02:f4:31:79:74:15:0b:e6:b1:06:6c:5e:
                    bb:0f:f4:9a:3e:96:f1:6b:21:ca:78:43:30:f7:17:
                    1c:64:28:fa:d1:2f:9b:96:c1:5c:aa:95:26:19:4b:
                    e5:0b:85:30:83:30:31:7d:c5:d8:4c:9e:ff:92:56:
                    64:66:a1:e4:33:78:df:5f:c4:1e:9e:99:a4:94:01:
                    85:80:6f:4e:47:30:3e:92:9e:d7:52:03:05:97:72:
                    25:7b:68:16:96:c9:cf:eb:d8:25:a3:35:54:bf:56:
                    19:de:fd:78:a2:4b:9c:f0:1d:4b:cd:15:a4:f8:d8:
                    3c:e5:6a:6e:4a:0c:0d:3d:2e:2e:dd:0a:2c:03:9c:
                    cd:42:67:64:10:7e:cb:e1:8a:77:3f:ce:3e:b5:63:
                    8a:46:55:01:0e:7b:b5:79:a5:75:fd:ff:e9:3c:4b:
                    ca:42:92:80:e9:c7:7e:72:9b:f7:03:f9:18:c9:18:
                    e2:03:15:58:5d:68:c3:48:bd:fe:98:d2:06:c4:55:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:3C:19:9E:F8:4F:3C:49:57:91:14:BA:9C:E0:25:46:3D:2D:81
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35342e302f32332d3233203d3e203633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:4c:96:45:9e:94:35:8e:b0:1f:eb:0d:2f:cf:a5:78:56:3c:
         fe:57:0a:6e:50:2a:12:44:33:75:3b:6c:57:0e:f5:cf:2a:10:
         77:ee:3e:17:e7:d3:64:86:fe:a0:9f:37:3a:f5:bd:ea:ca:aa:
         be:81:b8:79:c5:3b:79:00:d8:14:89:db:c6:d2:e0:41:4d:a4:
         88:8f:fb:c4:1e:bd:f4:3c:d6:ec:ce:24:f1:ab:09:29:b6:3c:
         47:c5:70:2f:eb:d1:66:28:90:d2:24:e8:03:e6:20:e2:37:30:
         89:ae:89:f3:9a:06:0f:ef:f9:3e:9b:00:de:73:12:62:4a:71:
         a6:a2:bc:21:e0:ea:cf:35:92:32:76:88:81:fa:fa:d0:d9:58:
         1b:05:ba:ea:af:b0:e0:de:99:c3:ac:96:5b:ce:1e:1d:f6:90:
         33:f0:c1:c0:9a:7a:86:8f:4e:96:a7:eb:0b:02:64:6a:51:34:
         a8:e4:ac:d8:71:48:00:82:d1:89:2e:29:76:0f:5c:98:83:b7:
         9f:7e:64:d0:1d:03:83:ef:90:89:81:2c:a7:8e:ca:ef:ac:0b:
         7e:a6:7a:a6:49:bf:2b:c6:21:8d:ad:40:0c:df:1b:e6:25:63:
         93:d2:7c:f1:de:0d:58:70:9c:c4:c0:df:86:cb:44:f5:2c:ca:
         c3:09:47:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:17:30 2025 by rpki-client