Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
File:                     34352e34322e34362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9z+Je22TEfglKbEof4rn2J0DBv7X/+h12Rd8RGVi1+A=
Subject key identifier:   1B:AD:64:DB:E6:C1:49:3D:07:AE:0F:1A:EC:99:DB:9E:85:4B:21:F1
Certificate issuer:       /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial:       2DE1224D1A7BB293B1F94351EB224D4250D21AA7
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 08 Jun 2026 07:06:40 +0000
ROA not before:           Mon 08 Jun 2026 07:01:40 +0000
ROA not after:            Mon 07 Jun 2027 07:06:40 +0000
asID:                     834
IP address blocks:        45.42.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 22:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e1:22:4d:1a:7b:b2:93:b1:f9:43:51:eb:22:4d:42:50:d2:1a:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
        Validity
            Not Before: Jun  8 07:01:40 2026 GMT
            Not After : Jun  7 07:06:40 2027 GMT
        Subject: CN=1BAD64DBE6C1493D07AE0F1AEC99DB9E854B21F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1a:50:d8:a1:4e:62:21:d2:33:2c:18:d9:67:
                    8d:4a:ef:73:2b:a1:a6:43:e0:58:65:ee:be:26:37:
                    59:3f:e4:d0:57:f5:ae:3a:15:f5:cd:e7:0f:4a:41:
                    39:17:74:0d:b0:41:c2:f6:d6:85:06:2d:12:59:1a:
                    ad:ff:26:eb:7d:dc:e1:69:41:aa:31:6d:99:13:b2:
                    84:24:68:27:13:0a:ed:ef:e8:e6:1b:36:3f:ec:8d:
                    dc:12:78:b1:50:38:a2:f1:54:2b:8c:95:3a:2b:10:
                    7e:37:dd:c0:d2:ee:f6:c1:ea:46:64:f7:ff:45:78:
                    a7:40:d4:3d:e6:c1:e3:1a:83:ac:24:87:4f:ae:06:
                    00:4b:a6:b0:73:8f:5e:10:68:22:92:f5:b3:96:8c:
                    e0:40:81:ca:4b:05:e6:92:98:aa:43:2a:2e:45:a4:
                    bf:ed:0e:a5:09:66:39:b5:6e:c3:8c:f0:cf:ff:fe:
                    10:6f:d2:c7:26:ba:4e:1f:38:09:de:50:cf:03:7d:
                    a8:46:bd:46:94:5c:57:09:4e:5c:27:b3:ae:63:7b:
                    b4:e4:97:26:81:ce:58:03:00:22:0d:d0:a1:db:9a:
                    3f:12:ab:aa:fe:b5:62:c6:24:32:bd:06:21:b2:28:
                    b6:44:30:8f:bf:23:68:c3:65:80:52:8e:94:e8:79:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AD:64:DB:E6:C1:49:3D:07:AE:0F:1A:EC:99:DB:9E:85:4B:21:F1
            X509v3 Authority Key Identifier:
                keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:1a:77:5e:73:f5:f0:09:1e:ad:e5:d9:e1:a5:e1:6f:00:22:
         6b:a0:cc:1c:83:fe:1e:0e:70:df:17:b1:9f:71:53:68:43:32:
         e4:22:9b:f9:76:34:81:a4:cc:a2:0f:01:ed:6f:2e:a2:d9:5e:
         eb:7e:80:b5:87:84:c5:29:5c:fe:ff:8a:34:53:40:ba:0a:da:
         7f:f0:34:e6:af:ce:66:5f:cd:12:e8:53:86:33:6f:0f:15:5e:
         8f:4d:9c:e6:80:f3:96:f8:29:c3:29:5e:a2:6f:90:4f:d5:18:
         65:dc:6f:e1:c6:04:8c:6e:58:d6:e1:22:e3:5b:72:d5:4d:fe:
         7b:9e:7e:83:a8:4c:11:4c:21:77:ef:7f:c0:80:5d:42:0b:9d:
         50:e0:17:1d:84:e1:0b:c8:04:3c:fe:db:24:eb:08:7c:50:35:
         72:be:d8:b0:97:67:e5:ef:46:fd:24:cb:0e:53:b0:a9:41:5a:
         0e:ce:4d:79:7b:b3:75:b6:97:4b:ed:3f:ac:bc:4b:7d:a3:27:
         9e:7f:81:4e:5e:e5:38:4f:37:03:82:c5:55:84:5a:f6:d0:9a:
         91:bb:52:e0:68:e4:59:7e:f6:df:38:2f:20:c1:63:f9:26:e6:
         77:ca:3c:93:98:ce:30:92:36:9a:63:fb:20:28:50:51:e1:89:
         bf:f6:0f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:14 2026 by rpki-client