Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          cT819DJMkexBeAi0w64AUx87Sqtj5gc6KfOU+dHJ7nI=
Subject key identifier:   67:07:E1:DF:59:10:1B:3B:EC:00:64:F1:0C:0D:50:96:82:9B:07:69
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       164002FB6BDE78CBE0D5ADD55544B84202A9A461
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 14 May 2026 11:29:01 +0000
ROA not before:           Thu 14 May 2026 11:24:01 +0000
ROA not after:            Thu 13 May 2027 11:29:01 +0000
asID:                     834
IP address blocks:        45.42.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:40:02:fb:6b:de:78:cb:e0:d5:ad:d5:55:44:b8:42:02:a9:a4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: May 14 11:24:01 2026 GMT
            Not After : May 13 11:29:01 2027 GMT
        Subject: CN=6707E1DF59101B3BEC0064F10C0D5096829B0769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cc:20:c9:ca:c2:80:5e:cb:d9:52:56:f3:99:
                    06:f3:94:29:d8:fb:8d:f3:9a:f8:a7:d8:ea:12:74:
                    5a:d6:d8:32:69:a3:68:ea:80:5d:18:bc:38:2c:c3:
                    3f:82:b9:ba:37:8f:64:24:d3:eb:96:7b:7d:db:e5:
                    bd:9e:88:a6:ed:d6:3f:3c:de:35:9d:e3:07:20:96:
                    f6:43:5a:a7:1e:6b:9c:09:24:02:09:88:62:fd:fa:
                    82:40:6d:f2:45:3d:09:d9:97:33:49:f9:61:54:72:
                    d4:c8:64:fa:51:ff:40:fd:72:7e:7d:5a:b9:46:ef:
                    6e:d5:e4:1b:af:c9:57:68:45:83:2b:eb:f6:74:8b:
                    91:37:6f:6b:87:28:a0:f1:d7:50:c8:b0:3c:00:7f:
                    f8:5d:9c:6f:00:45:f6:08:59:b0:13:08:24:04:e8:
                    13:6a:bc:95:cf:c5:79:91:5c:a1:f9:00:a0:34:fc:
                    47:d6:5c:40:4c:a8:73:3a:35:c9:2e:c1:11:1c:64:
                    4e:05:59:a9:99:37:eb:14:a8:53:f7:6c:89:18:5f:
                    a0:12:5c:ad:fd:db:c9:71:62:a9:4d:f1:a5:26:31:
                    17:b6:0b:62:7a:6c:30:8a:f3:00:5d:ff:56:22:6e:
                    85:f2:59:d3:f4:3c:9e:63:92:80:42:15:f1:b7:0d:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:07:E1:DF:59:10:1B:3B:EC:00:64:F1:0C:0D:50:96:82:9B:07:69
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:29:90:7f:31:58:ac:7b:82:06:1c:e2:e1:48:96:cd:9f:68:
         09:67:a3:ac:93:8b:6c:35:65:91:f0:c1:c7:f2:f0:52:96:f9:
         69:b1:23:67:50:d5:99:9a:86:86:1c:24:3d:45:04:65:56:cf:
         93:22:ea:c6:47:b6:02:f0:0d:dc:94:96:2f:54:50:c1:c2:88:
         be:46:68:72:dc:ed:17:7c:1e:77:23:17:19:e2:45:dc:4a:9b:
         0e:9d:89:49:81:d0:57:ba:af:a2:da:2e:9d:04:03:08:57:66:
         cf:6f:00:81:ee:da:fa:d2:aa:57:2c:0d:88:d7:dc:40:74:4f:
         81:44:7c:17:b1:2f:ff:59:8b:7f:18:d9:c3:47:a8:0f:c6:c8:
         da:c4:ea:bb:3f:6b:ea:a7:a0:60:b1:7c:de:71:61:0a:36:ea:
         bf:ae:66:3f:60:dd:01:8a:70:e3:8d:38:0c:c4:8f:15:94:c3:
         72:d2:47:3d:c8:bc:f5:e4:8f:5c:84:87:fc:00:5e:cd:d8:ea:
         5f:53:9d:dc:04:44:4e:c9:ee:ad:f6:09:13:44:0c:e3:77:ff:
         ca:b7:6a:dd:4c:11:f0:c1:0a:22:f5:f8:c9:07:73:eb:7f:a3:
         11:0a:57:75:5f:4a:b4:3a:77:88:dd:98:bc:f2:ef:35:90:a7:
         f7:b8:c2:df
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUFkAC+2veeMvg1a3VVUS4QgKppGEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk
NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjYwNTE0MTEyNDAxWhcNMjcwNTEzMTEyOTAx
WjAzMTEwLwYDVQQDEyg2NzA3RTFERjU5MTAxQjNCRUMwMDY0RjEwQzBENTA5Njgy
OUIwNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8wgycrCgF7L
2VJW85kG85Qp2PuN85r4p9jqEnRa1tgyaaNo6oBdGLw4LMM/grm6N49kJNPrlnt9
2+W9noim7dY/PN41neMHIJb2Q1qnHmucCSQCCYhi/fqCQG3yRT0J2ZczSflhVHLU
yGT6Uf9A/XJ+fVq5Ru9u1eQbr8lXaEWDK+v2dIuRN29rhyig8ddQyLA8AH/4XZxv
AEX2CFmwEwgkBOgTaryVz8V5kVyh+QCgNPxH1lxATKhzOjXJLsERHGROBVmpmTfr
FKhT92yJGF+gElyt/dvJcWKpTfGlJjEXtgtiemwwivMAXf9WIm6F8lnT9DyeY5KA
QhXxtw0TLwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFGcH4d9ZEBs77ABk8QwNUJaC
mwdpMB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv
NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky
N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj
ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0qKjANBgkqhkiG9w0BAQsFAAOCAQEAmSmQ
fzFYrHuCBhzi4UiWzZ9oCWejrJOLbDVlkfDBx/LwUpb5abEjZ1DVmZqGhhwkPUUE
ZVbPkyLqxke2AvAN3JSWL1RQwcKIvkZoctztF3wedyMXGeJF3EqbDp2JSYHQV7qv
otounQQDCFdmz28Age7a+tKqVywNiNfcQHRPgUR8F7Ev/1mLfxjZw0eoD8bI2sTq
uz9r6qegYLF83nFhCjbqv65mP2DdAYpw4404DMSPFZTDctJHPci89eSPXISH/ABe
zdjqX1Od3ARETsnurfYJE0QM43f/yrdq3UwR8MEKIvX4yQdz63+jEQpXdV9KtDp3
iN2YvPLvNZCn97jC3w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:26 2026 by rpki-client