Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203631313132.roa
File:                     34352e34322e34352e302f32342d3234203d3e203631313132.roa (raw, json)
Hash identifier:          2gaxPqFOfQRc9a9H4gRh479XlsreqQJnzxd9krsqYEM=
Subject key identifier:   49:3C:28:75:B7:E9:5A:08:51:4A:E4:8B:4F:44:D1:78:FC:44:64:3A
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       02D199B224E5B96966733F3EBDDA243E8EB278A1
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203631313132.roa
Signing time:             Wed 08 Apr 2026 14:19:08 +0000
ROA not before:           Wed 08 Apr 2026 14:14:08 +0000
ROA not after:            Wed 07 Apr 2027 14:19:08 +0000
asID:                     61112
IP address blocks:        45.42.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d1:99:b2:24:e5:b9:69:66:73:3f:3e:bd:da:24:3e:8e:b2:78:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Apr  8 14:14:08 2026 GMT
            Not After : Apr  7 14:19:08 2027 GMT
        Subject: CN=493C2875B7E95A08514AE48B4F44D178FC44643A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:25:e5:34:5c:e1:06:a9:61:2d:bd:8c:47:
                    61:11:ed:7f:09:13:c0:9f:93:83:bd:3f:27:ea:cf:
                    45:31:8e:29:13:3d:3e:63:4a:61:2c:d7:c5:db:62:
                    b5:6b:44:5b:60:77:a8:7e:6e:d7:3d:ab:a3:27:4a:
                    88:94:11:98:a2:27:49:4a:2b:6b:ef:38:83:d4:dd:
                    05:d5:5b:2a:c7:3c:f0:f4:b3:2b:37:cc:87:fb:94:
                    a3:8e:97:7d:6a:c0:16:1f:eb:83:77:db:e3:10:63:
                    ef:df:cf:7f:36:09:d5:e7:16:0c:9c:5a:60:2a:42:
                    12:d7:99:ec:06:40:f6:06:e1:ff:67:f2:e9:21:5c:
                    0e:e7:6a:d6:9c:68:ba:f4:5b:9b:5c:ed:58:81:5d:
                    ce:fb:be:4b:82:22:55:42:a0:e9:7b:59:41:8b:a9:
                    d4:01:c9:85:bc:f2:80:9f:d6:52:c9:c8:a2:b9:36:
                    b1:46:26:02:64:a9:22:04:fb:bb:32:40:a4:8a:15:
                    fb:1b:33:59:a6:23:88:dc:bd:90:7f:65:d5:2b:83:
                    cf:1d:f2:3a:07:0b:be:f1:28:85:e5:10:9d:4f:87:
                    67:3e:2d:de:c9:63:1e:f3:3b:16:f9:0c:f7:e7:d4:
                    f4:48:ab:b8:85:85:87:39:e2:d3:38:ed:32:ed:ae:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3C:28:75:B7:E9:5A:08:51:4A:E4:8B:4F:44:D1:78:FC:44:64:3A
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34352e302f32342d3234203d3e203631313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:31:ee:d4:a0:76:a5:df:3d:a0:c8:a8:16:ce:36:9a:46:ab:
         6b:0d:b5:80:6d:35:0b:d0:dd:b7:6c:76:4c:0b:34:5e:81:8d:
         69:4d:90:a1:4c:55:b9:19:30:d0:dc:69:aa:1e:2e:4b:68:5f:
         ad:a0:7c:ce:53:c3:0d:05:96:68:a6:44:b0:81:03:4f:ea:59:
         35:53:bf:99:09:6a:43:ce:e9:6e:e2:63:1a:84:fe:da:73:49:
         1d:f3:22:7b:a1:1e:5f:fc:05:ae:2f:2c:60:a2:48:72:8f:fc:
         f3:6d:10:75:1b:8b:e6:19:ac:98:15:fc:e9:4b:d9:1b:bf:9c:
         4f:3d:0f:53:78:fa:51:14:44:d1:7e:5e:f9:6c:d9:1c:35:c8:
         df:77:c0:b6:70:1c:40:2d:a3:1a:ab:da:67:b2:55:61:ec:c1:
         a2:f5:28:12:84:a1:c7:f4:16:65:41:f8:92:ad:52:6c:f5:43:
         5d:d9:be:cc:6d:97:eb:32:9a:b1:5b:71:d9:30:0c:7f:82:ae:
         4f:af:63:6a:25:2b:12:3d:7f:de:b2:f3:43:e2:06:d7:8d:35:
         d2:74:45:51:1f:77:b0:8f:75:10:a4:83:93:b7:26:9b:65:5d:
         48:b3:a0:49:9f:c2:68:93:f9:9e:b6:6c:0d:9b:d4:f4:77:7b:
         7c:34:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:12:24 2026 by rpki-client