Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38312e302f32342d3234203d3e20383334.roa
File:                     34352e3133322e38312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LoYr5BDXAmfLTvlBPV/lZ8ppcTv1rRjigZ5T4xH2rr0=
Subject key identifier:   D9:87:26:E3:35:DA:26:53:C6:1B:52:BC:5F:9F:A3:BF:85:6A:58:B2
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       35D161FBDAC50F02A34B14D67D45C3063B6D7B2F
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38312e302f32342d3234203d3e20383334.roa
Signing time:             Sun 20 Sep 2026 06:33:39 +0000
ROA not before:           Sun 20 Sep 2026 06:28:39 +0000
ROA not after:            Sun 19 Sep 2027 06:33:39 +0000
asID:                     834
IP address blocks:        45.132.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d1:61:fb:da:c5:0f:02:a3:4b:14:d6:7d:45:c3:06:3b:6d:7b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep 20 06:28:39 2026 GMT
            Not After : Sep 19 06:33:39 2027 GMT
        Subject: CN=D98726E335DA2653C61B52BC5F9FA3BF856A58B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:8f:21:8a:63:64:ee:ca:b4:51:59:7b:78:
                    a3:c2:2a:51:4a:41:3c:d4:ca:14:6f:5e:6c:23:38:
                    8b:ec:ae:bb:e8:47:f4:4a:c3:d1:21:b2:6a:8d:df:
                    c1:f1:1d:ce:cf:45:be:83:16:94:ed:83:ad:8c:76:
                    42:20:3f:e8:38:c4:70:7b:85:6b:3e:e1:73:e6:25:
                    b5:ae:05:88:ae:26:d0:24:9f:da:93:48:c6:da:74:
                    bb:1f:b4:3e:3d:4d:50:2a:77:7d:02:55:cb:f2:08:
                    d0:24:be:c4:d6:4e:8f:32:ce:49:c7:24:f9:b0:55:
                    e3:23:d9:18:1e:6d:5f:47:39:65:bc:20:f1:ef:5b:
                    7f:e6:16:9a:c7:a5:55:4d:ce:58:bb:d6:3f:76:d1:
                    79:41:97:cb:bb:01:31:9c:94:a0:17:8c:bb:ee:45:
                    db:b4:d4:35:68:d3:c2:09:61:bc:81:31:c5:0a:3e:
                    46:28:4f:7f:05:a1:57:03:59:40:5d:d9:46:72:c7:
                    29:96:7a:56:a1:4b:59:8e:05:e0:46:7b:72:df:ef:
                    05:d8:08:49:ae:df:60:ca:8e:db:87:ec:3d:f2:41:
                    43:af:74:a5:f9:4c:6e:89:e4:d8:28:22:11:5d:bd:
                    05:93:b7:37:65:8e:0a:73:4a:2b:3d:60:8e:03:ac:
                    e1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:87:26:E3:35:DA:26:53:C6:1B:52:BC:5F:9F:A3:BF:85:6A:58:B2
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3133322e38312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.132.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:7a:cd:b9:42:fb:df:05:15:c2:07:2e:23:95:88:1a:0c:
         0b:03:46:93:20:75:c1:0e:06:40:7b:bc:0c:f8:3f:59:4b:4e:
         a3:99:bc:81:52:66:0a:e1:82:7d:ef:f6:a9:35:77:07:87:aa:
         4a:c0:70:f7:4a:a5:a3:96:65:e7:26:a5:5d:46:fc:9e:88:bb:
         0a:43:53:07:06:3c:31:22:62:14:82:37:fe:db:4b:5a:d5:1b:
         a9:93:95:b3:63:54:c7:0f:29:e2:ce:4a:cc:cf:b4:cf:29:47:
         05:f9:6b:11:50:14:6f:08:c3:c5:fa:3c:6f:48:cf:a4:42:b7:
         8e:a1:0c:b9:58:31:47:22:34:7c:04:c8:77:9f:0b:92:2a:32:
         e7:db:28:9a:7f:1e:75:63:3a:30:3e:0a:c2:6b:fe:a2:20:d9:
         7d:07:29:2c:78:82:2d:00:ee:ea:3a:39:72:e2:81:ee:9e:f5:
         e7:94:ff:9a:07:cf:1e:4c:76:c5:13:e4:d2:08:78:fe:96:64:
         f1:ec:1c:53:fa:a6:b8:1f:2a:61:13:b9:4e:57:c6:ae:37:dc:
         e7:ed:2d:ca:d2:9d:2c:c2:31:4c:fe:e3:dd:4d:3b:c3:6a:da:
         20:51:b1:ea:09:3d:50:f3:3a:d8:a6:5f:5f:01:ad:f2:08:fa:
         23:dd:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:48:12 2026 by rpki-client