Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e203633303233.roa
File:                     34352e3135302e35322e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          4AEfwRTByEAprI/pg2o9jzPauU8+8Qq8fKIrqAjv720=
Subject key identifier:   75:DC:44:12:44:08:38:8E:B0:B9:44:F3:D0:95:0B:5B:B1:19:4D:BC
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       6A1F7AEA4CE9DC1CEC4B02D0B52678C9FE8C5D0D
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e203633303233.roa
Signing time:             Wed 23 Apr 2025 05:57:12 +0000
ROA not before:           Wed 23 Apr 2025 05:52:12 +0000
ROA not after:            Wed 22 Apr 2026 05:57:12 +0000
asID:                     63023
IP address blocks:        45.150.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1f:7a:ea:4c:e9:dc:1c:ec:4b:02:d0:b5:26:78:c9:fe:8c:5d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:52:12 2025 GMT
            Not After : Apr 22 05:57:12 2026 GMT
        Subject: CN=75DC44124408388EB0B944F3D0950B5BB1194DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:5a:d3:55:34:45:e7:0f:b6:d8:b5:6c:bc:
                    8f:6d:22:75:f3:0a:ae:0d:e6:4b:69:48:f2:72:35:
                    1d:da:84:48:2e:dc:d9:51:59:83:96:bf:13:c7:aa:
                    98:95:20:07:dc:3c:e7:6b:78:e5:7b:b8:09:dd:88:
                    ea:d0:7d:6f:53:f0:c4:38:25:5c:d1:31:16:b4:a0:
                    8f:7f:fc:08:0f:75:67:73:9f:13:11:90:15:1b:26:
                    a6:ab:61:67:ad:f4:90:d9:be:d3:99:a4:6a:66:38:
                    3e:b5:70:0c:3c:98:8d:7b:58:36:14:ae:be:49:65:
                    a4:6d:5d:a7:6a:54:ea:2e:f0:a4:11:4e:7e:52:48:
                    a7:5a:f9:4d:47:78:4e:1c:23:af:a6:73:ff:2f:0b:
                    2a:4a:ad:01:e2:e9:2e:8c:95:41:fd:3e:e1:6c:36:
                    e8:7b:79:25:78:b5:1d:c1:28:ad:a4:f3:9d:2c:48:
                    0e:0e:62:d0:cf:7c:35:9c:d2:b5:0c:f1:73:f9:a3:
                    b8:d2:d3:5d:dd:95:38:6e:83:7a:26:08:c1:c8:0b:
                    81:f8:48:40:9d:a6:e4:9e:77:0e:02:75:0b:23:05:
                    bc:81:32:56:05:ff:2b:b4:7a:2a:93:00:a6:74:6e:
                    a1:a6:58:0c:e2:01:a8:a8:9d:2a:a5:d5:97:11:78:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DC:44:12:44:08:38:8E:B0:B9:44:F3:D0:95:0B:5B:B1:19:4D:BC
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35322e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:4d:ec:23:09:2c:ea:ef:2b:c4:b4:80:fe:cd:a9:ce:90:
         10:2b:56:26:1c:7d:9b:b2:b9:1d:f5:e7:d5:cc:8a:b4:39:01:
         79:c5:21:4f:5d:8f:7a:b3:fe:68:0a:5e:bf:9a:41:63:e9:55:
         51:c5:18:6b:3a:11:df:a0:05:7e:65:e4:e5:3c:84:05:4a:7a:
         41:43:c6:3e:8f:ac:64:b1:d6:fa:67:67:61:51:29:76:af:25:
         94:20:94:21:ba:a3:e0:1f:ea:d9:57:44:d8:a7:0e:df:8e:7f:
         63:7d:32:b6:c2:82:0f:06:b8:28:fa:56:d7:4b:08:fd:24:6d:
         2a:4f:fd:1e:9f:50:17:98:98:77:4a:cf:e1:74:f7:2e:45:f3:
         02:db:fd:fd:84:bb:d6:8f:97:16:0f:d6:52:47:bf:6f:b6:1f:
         49:d6:75:69:c6:55:e9:d8:2f:f5:e0:0f:de:06:23:2b:98:5a:
         8c:3d:f4:74:82:f0:0b:5c:95:9d:3e:da:dc:01:1f:86:ca:2f:
         d2:6e:5d:b1:76:6d:87:e0:0c:64:3b:e3:df:cb:9b:e0:8f:7c:
         f2:6b:2b:7d:92:eb:25:13:c9:04:7b:a4:2a:4f:c4:53:f5:b6:
         f6:7c:ec:af:14:a4:7d:71:91:d1:49:b1:01:92:7f:02:ec:87:
         e9:24:43:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:31:23 2025 by rpki-client