Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32342d3234203d3e2039333034.roa
File:                     34352e3133322e38302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          5hubcddW7VIjrJ6pOzizDuC4pfSKDH7GTzKI6MOqgCc=
Subject key identifier:   21:76:EA:56:7B:4B:20:B7:52:93:3D:AA:F3:7F:BA:F3:F8:BB:FA:B9
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       22FFF930A637EBE5E49274FE7C3242873977E198
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:17 +0000
ROA not before:           Tue 08 Sep 2026 06:20:17 +0000
ROA not after:            Tue 07 Sep 2027 06:25:17 +0000
asID:                     9304
IP address blocks:        45.132.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 12:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ff:f9:30:a6:37:eb:e5:e4:92:74:fe:7c:32:42:87:39:77:e1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep  8 06:20:17 2026 GMT
            Not After : Sep  7 06:25:17 2027 GMT
        Subject: CN=2176EA567B4B20B752933DAAF37FBAF3F8BBFAB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f6:f0:a2:97:14:8c:6c:98:a5:c0:4e:d7:66:
                    cd:99:6a:35:79:38:bb:83:b2:2f:d7:26:c9:f9:f2:
                    65:ab:2a:45:5f:d7:29:e6:ec:63:ae:89:bc:28:e4:
                    b2:36:cc:99:d6:84:82:96:28:1b:6a:5b:13:fb:21:
                    48:f7:8a:0d:5d:24:e5:1d:ed:39:fc:10:c9:48:47:
                    e0:62:ac:cc:a1:88:69:d5:b1:f2:5d:28:3c:58:4a:
                    98:44:49:ce:9f:31:c8:33:2c:10:d3:91:0b:57:a3:
                    20:d3:27:cc:4d:c0:9b:1a:0c:51:31:31:9c:04:fc:
                    a7:9a:e6:e2:48:cf:3d:72:0c:76:ca:cf:b6:1b:af:
                    7f:96:d9:9e:c6:0b:5a:40:85:92:4b:19:fa:8c:e0:
                    12:61:12:81:5f:b3:17:b2:77:c7:fd:3e:b0:22:04:
                    96:c2:14:e5:42:27:e3:ab:88:78:50:2a:39:dc:5b:
                    60:c9:7f:08:bf:a0:e2:6d:ce:e7:75:38:d4:b2:a5:
                    3e:61:d8:12:42:4c:f0:c2:73:fc:60:e0:18:6a:12:
                    d8:31:47:a9:ac:df:cf:9b:75:c7:e5:91:0b:a8:f4:
                    15:64:c8:fd:55:aa:a6:e0:83:8e:ac:be:4c:12:58:
                    15:2a:8a:0e:bc:bf:8a:6c:5b:5c:24:99:0e:d0:48:
                    f6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:76:EA:56:7B:4B:20:B7:52:93:3D:AA:F3:7F:BA:F3:F8:BB:FA:B9
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38302e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f3:64:8e:66:91:d7:db:f2:6a:3b:5e:f2:91:bb:8a:d9:08:
         f1:e7:d4:50:96:2e:7e:8d:49:59:0d:38:c0:21:6b:81:52:15:
         a3:d3:4d:61:15:af:c9:d0:94:44:75:3e:17:c4:1c:a0:03:c5:
         c5:b1:b6:bb:21:17:e5:62:0e:b4:57:43:01:c9:a6:85:64:46:
         0e:d8:21:21:a9:ef:51:d8:2f:a7:80:fe:c6:08:b9:be:6d:62:
         8c:02:83:df:c7:57:37:73:a8:e9:63:37:92:99:43:95:26:c5:
         07:0b:0a:a2:8c:eb:a3:3c:45:b5:38:c6:01:d2:13:7f:28:9c:
         f9:ce:5b:b1:e3:82:1f:d9:af:47:75:71:70:7d:43:09:b2:a5:
         49:5e:22:80:94:6a:f4:48:0e:80:91:59:20:1d:06:f1:8d:47:
         57:46:e2:e6:94:84:7f:3f:41:16:a0:4e:67:8d:dc:27:b3:94:
         6b:21:b6:73:68:c3:b6:c1:32:f1:b8:f5:2c:8b:17:cb:25:3d:
         58:24:08:d6:bf:1a:c7:68:3e:5e:76:62:f5:a6:0d:c9:8a:81:
         4f:98:7a:a7:2b:44:1b:15:43:61:8b:98:e7:68:6e:a1:b9:f8:
         f0:43:3a:a4:06:75:8e:2b:d3:12:59:31:37:f1:11:10:dc:09:
         d5:7c:b3:bf
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUIv/5MKY36+XkknT+fDJChzl34ZgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTVlNTUzOGEyNjk0NzIxMmJiMDkwODI4YmNlODJkNTBl
NDRhZWM4MTc0NzkyZWVjZjAwHhcNMjYwOTA4MDYyMDE3WhcNMjcwOTA3MDYyNTE3
WjAzMTEwLwYDVQQDEygyMTc2RUE1NjdCNEIyMEI3NTI5MzNEQUFGMzdGQkFGM0Y4
QkJGQUI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPbwopcUjGyY
pcBO12bNmWo1eTi7g7Iv1ybJ+fJlqypFX9cp5uxjrom8KOSyNsyZ1oSCligbalsT
+yFI94oNXSTlHe05/BDJSEfgYqzMoYhp1bHyXSg8WEqYREnOnzHIMywQ05ELV6Mg
0yfMTcCbGgxRMTGcBPynmubiSM89cgx2ys+2G69/ltmexgtaQIWSSxn6jOASYRKB
X7MXsnfH/T6wIgSWwhTlQifjq4h4UCo53FtgyX8Iv6Dibc7ndTjUsqU+YdgSQkzw
wnP8YOAYahLYMUeprN/Pm3XH5ZELqPQVZMj9Vaqm4IOOrL5MElgVKooOvL+KbFtc
JJkO0Ej27wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCF26lZ7SyC3UpM9qvN/uvP4
u/q5MB8GA1UdIwQYMBaAFD9f5uXrCT1TsaGWISzfIY0nJfEQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3YzU3MzMwNTFjLzAv
M0Y1RkU2RTVFQjA5M0Q1M0IxQTE5NjIxMkNERjIxOEQyNzI1RjExMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzQyNjUxMzFmLWYzZmUtNGJkMy05MzA5LThmMDQ4Y2MyM2I3ZS85NWU1
NTM4YTI2OTQ3MjEyYmIwOTA4MjhiY2U4MmQ1MGU0NGFlYzgxNzQ3OTJlZWNmMC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2Q1MDAxZmVkNWIzNTRhOTg5MDk5YzQ3
YzU3MzMwNTFjLzAvMzQzNTJlMzEzMzMyMmUzODMwMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthFAwDQYJKoZIhvcNAQELBQADggEB
AHPzZI5mkdfb8mo7XvKRu4rZCPHn1FCWLn6NSVkNOMAha4FSFaPTTWEVr8nQlER1
PhfEHKADxcWxtrshF+ViDrRXQwHJpoVkRg7YISGp71HYL6eA/sYIub5tYowCg9/H
VzdzqOljN5KZQ5UmxQcLCqKM66M8RbU4xgHSE38onPnOW7Hjgh/Zr0d1cXB9Qwmy
pUleIoCUavRIDoCRWSAdBvGNR1dG4uaUhH8/QRagTmeN3CezlGshtnNow7bBMvG4
9SyLF8slPVgkCNa/GsdoPl52YvWmDcmKgU+YeqcrRBsVQ2GLmOdobqG5+PBDOqQG
dY4r0xJZMTfxERDcCdV8s78=
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:13 2026 by rpki-client