Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203136323736.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          G/c9HRLvfIl/hOmsy0SwsuwFrZu0qGX+1APwPK1chyo=
Subject key identifier:   6E:82:45:1D:02:79:D9:09:CB:ED:2C:29:C0:F3:40:AA:DB:16:DA:44
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6940AC3FF5650F86C62F5932FDA6EE16A9D2F438
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203136323736.roa
Signing time:             Thu 17 Apr 2025 06:02:38 +0000
ROA not before:           Thu 17 Apr 2025 05:57:38 +0000
ROA not after:            Thu 16 Apr 2026 06:02:38 +0000
asID:                     16276
IP address blocks:        45.135.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:40:ac:3f:f5:65:0f:86:c6:2f:59:32:fd:a6:ee:16:a9:d2:f4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 17 05:57:38 2025 GMT
            Not After : Apr 16 06:02:38 2026 GMT
        Subject: CN=6E82451D0279D909CBED2C29C0F340AADB16DA44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:39:93:74:5d:4b:62:f1:93:0d:1b:ba:cd:
                    2d:fe:85:74:51:1b:b9:42:dd:f3:9b:cb:d3:13:7e:
                    c1:50:1c:ed:ce:fa:13:56:79:83:ad:02:d0:47:e6:
                    11:3b:05:22:12:22:b3:b4:7c:a4:db:8c:39:6b:13:
                    1d:ed:00:0f:00:ed:7d:27:f7:58:61:1c:8d:93:9e:
                    22:b5:05:3b:ca:5d:18:cd:fb:c5:68:18:f3:a1:90:
                    70:5e:f9:c4:19:a1:80:3f:2c:a6:51:16:f2:53:d1:
                    7b:a3:f1:0c:38:8a:d0:30:ec:2e:ed:fb:4d:2e:e9:
                    69:3d:34:47:69:10:e5:4b:19:d2:f4:cc:44:ac:d2:
                    d3:ba:6e:a2:9c:e7:63:7e:b5:fb:e7:ca:59:18:11:
                    2d:a4:f8:d5:27:82:04:da:11:68:30:13:4d:b5:c2:
                    5e:a9:76:6a:79:ee:62:46:da:ac:75:d3:57:1e:61:
                    12:19:2e:ca:34:c8:05:cb:43:c0:b5:d4:c6:c0:3e:
                    86:f7:4f:9d:19:bf:7d:52:7b:82:9d:ab:08:a8:9f:
                    e3:40:54:f6:e5:67:91:38:f1:f6:83:1d:9d:e6:95:
                    fc:02:1a:e8:56:38:9a:26:44:a2:09:13:16:38:61:
                    16:73:4f:c0:03:db:c9:a4:d2:7c:a1:b1:e7:8b:eb:
                    87:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:45:1D:02:79:D9:09:CB:ED:2C:29:C0:F3:40:AA:DB:16:DA:44
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:ff:cf:02:ef:0f:c1:e9:a6:45:85:71:26:9a:a7:02:9a:
         1f:ca:8f:f9:45:ac:11:fe:ac:31:4c:97:d8:bf:8c:cb:05:d4:
         8f:69:fe:f7:b1:92:de:9c:03:d8:c2:53:81:36:83:64:ea:9f:
         85:a7:fb:58:57:c8:1b:fe:c7:ff:4f:83:6f:ef:e9:a1:37:42:
         54:62:1b:8e:da:54:31:fa:27:b9:68:05:b7:a1:22:ce:78:47:
         ea:72:3e:df:15:d4:ce:c2:c9:cc:61:ee:a1:f3:ea:9c:4f:91:
         e5:6d:23:24:80:b9:57:0c:43:68:2f:f5:8a:66:e5:a1:50:1a:
         d5:e9:48:df:83:16:9d:b7:35:69:53:fd:cc:e2:96:fa:b9:e4:
         e2:64:ff:a5:dd:38:d3:86:3c:ae:34:cc:b5:38:2d:a0:18:f5:
         90:c4:b8:85:99:7a:a6:99:27:2d:f4:d1:03:a2:05:7d:94:c6:
         f8:1d:07:8b:09:41:27:ad:a7:6b:d1:28:25:a3:e6:62:5e:90:
         b5:b4:47:58:7a:7e:65:8c:00:f5:44:e8:28:05:11:b4:70:63:
         02:61:57:1e:07:b4:26:0f:e1:4b:d3:8b:1d:fd:28:bd:b5:a1:
         80:65:f1:d6:f9:a8:f8:ef:b0:a5:ee:4a:e8:5e:8d:f2:73:eb:
         50:c9:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:33:25 2025 by rpki-client