Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa
File:                     34352e34322e34312e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          TcC2MDNE2m3r9QL6bMbCI/En74iLYLnpbSDuyQoqKBA=
Subject key identifier:   7A:AE:B2:CC:ED:4E:D8:8B:94:6C:03:6D:95:A7:58:E9:A4:5F:B9:2F
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       4312F723E9134B1470A17637693265FA318D891E
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa
Signing time:             Fri 24 Oct 2025 08:30:39 +0000
ROA not before:           Fri 24 Oct 2025 08:25:39 +0000
ROA not after:            Fri 23 Oct 2026 08:30:39 +0000
asID:                     53340
IP address blocks:        45.42.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 14:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:12:f7:23:e9:13:4b:14:70:a1:76:37:69:32:65:fa:31:8d:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Oct 24 08:25:39 2025 GMT
            Not After : Oct 23 08:30:39 2026 GMT
        Subject: CN=7AAEB2CCED4ED88B946C036D95A758E9A45FB92F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:17:12:3d:40:27:86:a6:6d:86:dd:a3:cd:
                    47:ee:cc:52:64:99:92:97:ff:8f:6d:34:a1:d1:cc:
                    31:2a:ba:bb:af:99:ff:f0:94:37:ed:b5:94:21:d6:
                    86:97:7b:d5:31:ba:f6:c2:63:82:82:ce:00:68:ea:
                    a2:09:f4:c4:b0:b9:ff:70:5e:19:3d:ab:d6:05:d8:
                    ad:e4:dc:63:18:dc:fe:7c:a7:30:96:ae:20:f3:0c:
                    d6:20:d1:cd:d8:89:0d:11:2f:44:ba:bc:52:f3:d4:
                    21:d8:b1:66:56:09:b2:71:ad:85:37:e7:b9:32:64:
                    e4:c4:fa:3d:68:99:66:46:ec:50:07:a7:1b:94:5c:
                    5d:e4:3f:49:0d:70:22:27:b1:45:bd:09:6c:e0:03:
                    10:80:06:5d:1c:fd:30:1d:1a:a9:ed:d6:0a:48:f0:
                    a5:fc:7a:2d:57:7c:cd:c8:fd:71:a9:a0:4d:a5:35:
                    d0:ae:d5:1e:29:ab:75:52:90:a2:9a:0d:1b:c5:74:
                    61:72:59:43:27:0a:70:79:56:76:eb:c0:00:94:64:
                    c8:24:98:e1:d9:28:66:c6:0f:77:0e:e1:9e:9e:89:
                    de:66:a0:43:70:eb:c7:34:69:1a:23:26:05:2f:16:
                    7e:ae:64:04:f7:c0:fd:16:22:e1:d0:62:b4:76:28:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AE:B2:CC:ED:4E:D8:8B:94:6C:03:6D:95:A7:58:E9:A4:5F:B9:2F
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34312e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c2:bb:b7:bd:19:56:a8:40:14:66:53:d9:55:a2:ff:6c:18:
         f3:fa:d9:cc:82:cf:9b:ab:e7:9a:f0:09:7e:5e:6f:01:17:4c:
         bd:f9:7a:88:75:9b:fb:85:36:be:8e:2f:f4:d6:86:10:f8:aa:
         01:d4:a1:68:25:36:9e:74:34:1b:ed:c2:39:26:31:cf:ba:09:
         eb:ee:5a:a3:10:eb:d5:1c:df:0c:b9:cb:fa:cd:4a:65:e2:42:
         4f:c1:9b:ac:76:ec:0a:68:1e:7b:78:ed:1c:b7:9c:72:94:42:
         7d:fe:7e:e9:62:d2:ac:09:b0:1a:66:80:a9:dd:80:32:38:79:
         9c:3c:33:39:c0:00:c7:4a:ac:fc:00:e9:cd:de:e5:72:9e:0f:
         06:de:42:71:6b:ad:c1:7c:22:27:d2:87:71:73:ed:cc:af:5a:
         da:9b:3c:4b:40:d6:50:14:ca:0b:9c:04:8d:96:dd:76:5c:fd:
         fd:f7:d9:19:1f:1b:79:e7:a7:ac:88:68:13:16:74:fc:87:8f:
         2c:79:01:73:22:12:80:c2:74:b6:8d:73:16:3b:6a:2b:64:cd:
         df:75:72:77:26:45:c4:72:9f:fe:2d:97:67:09:82:a7:2a:6f:
         f6:35:dd:7a:80:8b:41:52:34:4a:ed:74:cc:28:8b:81:5d:2f:
         3e:8b:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:54:11 2025 by rpki-client