Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa (raw, json)
Hash identifier:          r3XhadmNdZQ3gAL0fkPsl8FzcLm0cfeJITGjdycPlZ4=
Subject key identifier:   68:2E:77:C3:50:62:AD:1A:BC:2C:83:B3:49:A8:1A:FB:5C:06:17:A2
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       44AFE35ADF35B8D276316D3E9AA35A1FBD8F1C22
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa
Signing time:             Thu 10 Sep 2026 09:36:20 +0000
ROA not before:           Thu 10 Sep 2026 09:31:20 +0000
ROA not after:            Thu 09 Sep 2027 09:36:20 +0000
asID:                     400342
IP address blocks:        45.135.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 16:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:af:e3:5a:df:35:b8:d2:76:31:6d:3e:9a:a3:5a:1f:bd:8f:1c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep 10 09:31:20 2026 GMT
            Not After : Sep  9 09:36:20 2027 GMT
        Subject: CN=682E77C35062AD1ABC2C83B349A81AFB5C0617A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:e1:fe:6c:c2:76:00:99:50:13:6c:f4:81:
                    30:c8:40:f3:7b:47:e5:4c:fd:31:50:6a:82:96:9d:
                    bc:24:d8:79:22:36:47:37:82:9b:39:23:8e:53:1f:
                    03:1a:9b:7f:b1:c5:a8:e9:e2:38:2f:f2:4f:80:0a:
                    35:57:85:d5:b4:a2:33:b7:6d:69:48:c6:f7:6d:22:
                    d4:8c:4a:e9:3a:bf:f7:c4:10:a6:be:b8:99:9d:17:
                    76:95:5b:f8:56:85:9f:10:88:fe:df:63:6f:48:a8:
                    7c:18:4b:a9:02:02:0f:69:80:26:71:67:7c:9d:7c:
                    f8:35:c1:d3:52:00:75:3d:17:76:d5:17:82:0d:89:
                    8a:ab:04:00:86:2c:3b:83:6b:89:4f:f4:d6:45:cd:
                    d4:1c:e9:19:4b:6f:c1:d7:c0:45:ad:25:e4:a9:39:
                    a0:3f:14:0b:15:49:11:ad:f9:b5:46:ad:ad:35:86:
                    c4:4a:d0:f7:06:59:25:fa:24:e9:e9:9e:88:46:51:
                    47:75:47:cf:fd:9f:f3:ff:91:a7:57:a4:ea:e6:05:
                    a5:2b:37:d6:69:bb:45:9d:3e:ac:f5:9a:3f:50:39:
                    1c:9a:71:1b:bf:a3:32:da:e5:39:3a:62:27:75:b3:
                    dc:a0:3a:24:79:28:49:46:16:be:da:ac:88:f5:bc:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2E:77:C3:50:62:AD:1A:BC:2C:83:B3:49:A8:1A:FB:5C:06:17:A2
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136312e302f32342d3234203d3e20343030333432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:91:d7:28:9d:52:6c:7b:df:c4:fe:1a:5a:f2:c7:da:d0:
         28:0e:86:df:ca:fe:2f:c0:7f:50:e1:93:cb:52:45:14:51:2f:
         f4:ed:0b:66:17:0c:3e:c8:b6:5c:5e:22:84:4b:85:b5:87:9e:
         87:3c:5c:7b:2e:b0:31:79:da:e7:4a:72:fa:44:98:e2:78:3a:
         5c:b8:55:7a:00:1b:4d:44:42:aa:49:a2:9c:fc:8b:5a:3f:aa:
         38:52:81:0c:e3:77:85:d2:93:43:c4:46:97:f3:f0:c0:b4:52:
         a0:5a:e2:3e:95:47:08:dd:23:c1:6d:1c:f7:af:a9:d7:6e:25:
         6c:68:ca:16:5f:fa:07:10:ff:89:a0:34:f9:4f:99:9a:2d:5e:
         30:ce:20:ae:5a:31:5e:b6:f2:95:ea:87:19:31:28:37:bb:c6:
         cd:0c:18:21:3c:1f:97:44:cc:a7:31:a8:09:fd:45:83:c9:f0:
         a7:92:fe:20:7b:e0:96:10:49:6e:6c:f7:a5:e0:f9:5b:78:ad:
         1e:f8:3f:10:2b:4f:d5:56:12:51:2d:86:1c:c5:4d:ea:a5:49:
         e0:5a:aa:12:5d:ef:db:ab:c5:f2:73:fd:c6:71:48:b3:df:55:
         0a:07:35:7e:df:a5:75:53:05:1e:92:9f:03:54:f8:18:58:ff:
         d4:56:34:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:32:21 2026 by rpki-client