Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313937393734.roa
File:                     34352e3135302e35322e302f32342d3234203d3e20313937393734.roa (raw, json)
Hash identifier:          DuoMlOTFiPxjcuYTd0XThdOT1UZK/xMe2LjJOQC3DrE=
Subject key identifier:   52:9D:A5:F4:39:AD:88:37:39:17:40:01:19:78:9D:EC:BB:7F:81:DF
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       BFAF7D65FF4D02372672449C2932C510789A48
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313937393734.roa
Signing time:             Thu 10 Sep 2026 09:44:27 +0000
ROA not before:           Thu 10 Sep 2026 09:39:27 +0000
ROA not after:            Thu 09 Sep 2027 09:44:27 +0000
asID:                     197974
IP address blocks:        45.150.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 09:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bf:af:7d:65:ff:4d:02:37:26:72:44:9c:29:32:c5:10:78:9a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Sep 10 09:39:27 2026 GMT
            Not After : Sep  9 09:44:27 2027 GMT
        Subject: CN=529DA5F439AD88373917400119789DECBB7F81DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:1d:3e:d7:12:c9:16:05:59:cb:50:97:5a:
                    57:ed:00:75:75:25:ec:5d:1d:2d:81:36:47:e1:d3:
                    06:65:a5:f2:4e:c2:6d:63:78:16:a5:54:0a:be:d8:
                    62:4f:1a:e1:eb:fa:22:ea:58:ce:fd:a2:99:47:79:
                    eb:05:ed:18:ec:8e:b6:e5:b9:7d:5c:42:1c:57:82:
                    57:fc:58:cc:61:3b:12:8e:11:2b:30:d1:0c:29:7e:
                    8f:15:f2:2d:f3:55:80:85:86:2b:f5:ee:ff:cb:c3:
                    32:08:71:47:c2:a0:7b:c0:d4:e4:e7:18:ba:39:ed:
                    88:d0:0e:e0:9a:9e:cb:6b:6c:1d:3b:3f:f4:d5:41:
                    03:ac:1f:21:76:59:af:85:73:a7:e6:0a:6d:1d:8b:
                    de:05:5c:33:96:69:f2:07:92:2f:a8:d3:43:19:3f:
                    36:ec:d7:f4:1e:81:e4:69:26:b8:34:20:60:59:81:
                    78:f1:36:09:fb:71:54:ca:44:cf:85:41:cb:b2:fc:
                    3c:54:64:42:32:14:64:cb:35:05:24:f7:92:b0:31:
                    fb:9a:a5:0b:7d:74:36:1b:de:6e:50:44:4a:11:41:
                    b5:17:83:3b:40:1f:12:98:3e:e0:ad:02:f3:51:1d:
                    5c:13:b8:a4:09:db:e8:3f:ae:70:33:fe:58:27:26:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9D:A5:F4:39:AD:88:37:39:17:40:01:19:78:9D:EC:BB:7F:81:DF
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e20313937393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:86:af:29:86:95:e1:05:63:8c:45:94:cc:95:81:57:50:87:
         ff:a3:36:c9:c0:32:d5:30:64:36:c9:1f:35:7b:de:66:0d:8d:
         14:10:46:a6:38:a6:8e:d1:4a:07:9e:4f:7d:10:fe:6f:29:0f:
         33:6e:ad:25:7b:ee:5f:d0:54:e8:0a:81:be:65:e6:11:83:75:
         03:0a:40:bc:3b:83:61:a7:1a:46:c0:b3:5b:5c:22:d3:e7:2f:
         34:7f:21:a2:2f:e4:08:53:1a:85:db:20:d0:fa:ca:eb:94:52:
         88:8b:ae:9e:48:2f:1b:ca:a6:c1:03:21:ea:1c:88:3d:6f:b8:
         9b:45:56:23:a7:75:58:55:34:82:64:39:07:54:b7:e3:18:9b:
         f8:4d:99:48:2c:58:99:6e:b8:bb:0f:46:6e:5b:38:f3:93:d1:
         69:86:2a:17:c7:74:36:d5:0b:4c:ca:f8:af:12:bb:cc:eb:69:
         22:29:11:a4:87:79:9e:60:ea:57:b3:5a:e9:79:ad:c6:e1:64:
         31:b0:c7:79:ea:1e:ca:6c:71:d7:ac:9a:03:96:99:2a:57:d0:
         f7:31:6f:a8:f9:d3:11:bd:e9:19:74:dc:d0:e9:c5:72:32:24:
         da:13:93:cb:1c:bd:f2:76:ca:a5:58:50:e2:87:6b:be:bc:7f:
         8a:bc:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:01:54 2026 by rpki-client