Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
File:                     34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa (raw, json)
Hash identifier:          mk1cNxY0GKlh2QiYaCHaVUMrCQeiEjB9dYU8oTtpeA4=
Subject key identifier:   71:7B:AD:33:1D:4A:DA:19:3B:2E:1C:54:C3:51:30:0B:96:5E:49:01
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       11F859E3BA1D1C0BCB18649BA2E2DD463F1F2ECD
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa
Signing time:             Fri 25 Jul 2025 15:29:44 +0000
ROA not before:           Fri 25 Jul 2025 15:24:44 +0000
ROA not after:            Fri 24 Jul 2026 15:29:44 +0000
asID:                     400175
IP address blocks:        45.135.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f8:59:e3:ba:1d:1c:0b:cb:18:64:9b:a2:e2:dd:46:3f:1f:2e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul 25 15:24:44 2025 GMT
            Not After : Jul 24 15:29:44 2026 GMT
        Subject: CN=717BAD331D4ADA193B2E1C54C351300B965E4901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:0e:6d:c7:41:f0:70:08:21:f6:35:9d:77:
                    81:23:3d:71:22:c4:94:29:aa:73:ba:56:7b:b1:5a:
                    30:65:de:ae:d7:04:52:59:9b:81:c5:35:fd:77:b9:
                    80:34:df:cb:fe:6e:7f:56:55:31:c9:48:80:7b:a5:
                    50:7c:1e:21:c3:f5:46:91:1d:84:93:53:d8:eb:ca:
                    64:20:c7:27:a2:a2:25:b1:2b:e3:7d:df:80:f0:cb:
                    fe:24:d1:87:21:96:07:ee:c8:58:38:f2:c1:bf:99:
                    b0:62:49:07:4f:45:79:c4:09:5e:53:3c:90:92:53:
                    57:f4:74:16:59:21:df:6e:2e:35:de:b0:55:90:05:
                    cd:69:c1:53:19:1a:42:a9:7e:33:0b:78:1f:ed:8e:
                    23:54:f3:ff:79:ec:4a:d8:ec:84:f8:44:7e:15:2e:
                    af:a0:0f:4c:ba:ba:1f:3a:b2:77:f8:53:24:99:0e:
                    63:ca:89:95:1a:14:f0:9f:47:22:1e:39:2d:01:d4:
                    5d:4f:9d:f8:b2:3c:97:61:27:ac:70:5d:60:22:8b:
                    9c:1f:8b:4d:cc:bd:33:2f:cc:33:52:c9:02:ad:9a:
                    e5:ab:4d:00:6e:6b:c7:77:9e:38:55:62:ab:6b:a2:
                    98:bc:09:00:d1:ca:58:0b:4f:21:4f:9f:96:4a:f0:
                    82:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7B:AD:33:1D:4A:DA:19:3B:2E:1C:54:C3:51:30:0B:96:5E:49:01
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/34352e3133352e3136332e302f32342d3234203d3e20343030313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:94:ee:02:64:8c:e2:05:04:ed:d5:86:07:78:3f:b5:e5:7f:
         30:82:f8:de:96:fb:b6:03:ec:27:e7:a5:cc:41:d9:58:5d:63:
         d0:fe:12:6f:74:e2:68:36:e8:7a:c2:e6:fd:ed:c7:44:34:5a:
         d1:29:f9:db:15:78:e8:e6:a8:df:87:23:b7:ae:6c:86:18:6a:
         44:e8:cb:59:5a:4a:8a:4b:d2:08:a0:70:a7:42:29:57:59:68:
         25:15:6d:87:67:08:80:e0:d9:91:77:f9:56:0f:78:46:a3:11:
         f4:f2:1e:ed:76:33:a1:47:87:78:c1:5f:07:dd:0c:f1:ef:04:
         ac:65:d1:02:e0:30:b6:8c:d2:69:6f:0a:92:5a:8e:20:5b:b3:
         8f:8b:7b:d9:7f:cd:e8:4e:92:61:d8:9c:a2:47:15:f8:69:88:
         08:de:23:c5:af:32:d3:e0:e3:a3:25:20:cf:4c:20:a7:f0:f4:
         20:48:89:8f:f1:de:c0:e6:e2:48:1a:b9:66:71:54:91:48:0b:
         c2:8e:63:b5:c4:ff:ad:4e:81:64:fd:2d:1a:92:11:bd:08:27:
         57:0c:72:90:29:45:66:07:4b:65:c7:91:51:76:30:2d:58:a7:
         84:72:6b:24:8a:f0:20:70:58:b3:0b:a4:4a:6c:06:bc:a9:a1:
         c4:cf:75:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:03 2025 by rpki-client