Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e20333936393832.roa
File:                     34352e3135302e35332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          qTOxhNSAWnchwcWFSgDtm8M0LYW0THb1WeRzSKqXeLU=
Subject key identifier:   AA:7B:2D:D1:F2:4D:F1:23:70:EB:64:72:F3:25:0D:88:7A:41:92:5B
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       490C2919C23414319CB35CBE7994C89607924556
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e20333936393832.roa
Signing time:             Wed 23 Apr 2025 16:45:22 +0000
ROA not before:           Wed 23 Apr 2025 16:40:22 +0000
ROA not after:            Wed 22 Apr 2026 16:45:22 +0000
asID:                     396982
IP address blocks:        45.150.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0c:29:19:c2:34:14:31:9c:b3:5c:be:79:94:c8:96:07:92:45:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 16:40:22 2025 GMT
            Not After : Apr 22 16:45:22 2026 GMT
        Subject: CN=AA7B2DD1F24DF12370EB6472F3250D887A41925B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:41:73:19:99:e3:0b:2a:25:63:5c:b4:1a:22:
                    ec:dd:12:c2:1c:87:00:3f:01:64:80:89:cd:1b:cf:
                    58:ef:30:d3:08:e5:e6:16:15:8f:5d:f9:24:43:1d:
                    b9:d8:ff:d8:f2:99:77:9c:f3:c8:01:2a:e2:16:7e:
                    37:1f:75:fa:63:77:16:21:75:c2:7f:d3:3c:10:fa:
                    c2:54:63:21:bf:3d:7a:ea:9c:42:00:af:4e:66:98:
                    85:d2:26:b5:4c:f4:bc:81:10:80:f7:ff:b0:e5:3c:
                    33:c7:5e:99:ed:89:de:a8:12:b6:f3:ef:67:da:80:
                    6a:99:ee:d2:17:01:21:92:4d:f2:0d:8a:8b:ba:83:
                    40:0e:d7:ae:07:57:c5:79:ff:64:04:30:cc:42:7c:
                    d6:c4:00:31:84:01:29:4e:fe:bb:a5:5a:71:58:6a:
                    cf:f7:04:93:b8:c8:54:4c:ed:9d:6f:69:80:06:55:
                    1f:b5:84:b5:f4:89:e2:01:80:b1:e3:47:bf:5c:3d:
                    81:bf:42:17:75:61:c6:23:e4:e8:67:a8:80:fc:53:
                    66:4a:f8:23:15:dc:ae:16:27:c9:53:fd:9b:63:a4:
                    8c:9b:5a:67:9d:0d:d5:ba:cc:10:96:50:2e:f8:7d:
                    8f:fd:69:0b:a3:a0:b1:b4:4a:8a:2d:aa:83:cb:ca:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7B:2D:D1:F2:4D:F1:23:70:EB:64:72:F3:25:0D:88:7A:41:92:5B
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35332e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:c2:7d:75:85:93:c6:7a:ae:12:37:68:82:ee:9d:78:71:
         41:94:ca:76:db:d6:38:bc:d1:67:b0:0a:86:b1:a4:f0:47:aa:
         0d:fb:d6:60:d8:0e:f3:dd:40:1c:97:7a:73:c9:a5:60:6b:76:
         e2:74:21:59:5b:80:03:f5:9e:5b:42:da:35:e8:2c:7b:0a:7c:
         90:b6:9c:64:ec:4f:84:b5:dc:16:cb:12:d5:93:00:fc:95:3b:
         40:11:34:5f:d9:b2:33:c4:f7:6e:d1:ee:dd:81:3a:c8:e1:62:
         30:6a:0a:d5:d1:85:3b:9c:2a:01:86:15:6a:2a:8c:fb:37:70:
         f6:db:ef:0d:0c:a8:39:29:a1:63:84:cb:48:a3:c2:a4:77:a1:
         21:f7:8e:67:af:ca:8a:99:f2:98:6d:eb:be:26:56:ee:2a:6f:
         64:c9:14:c8:52:1c:70:9c:5d:82:8c:26:dc:63:20:58:f2:9f:
         14:6e:0f:ee:83:16:10:ec:7e:05:f0:1d:c6:69:5c:4b:c9:70:
         65:87:21:a2:57:96:ba:20:9f:04:3a:b4:e5:93:1f:ae:b2:c6:
         93:70:a8:00:6b:1b:01:57:b8:a0:51:26:65:25:86:19:c9:0c:
         c2:b3:7b:56:63:33:ff:8d:18:57:f2:12:07:40:35:f4:ab:6e:
         fa:db:37:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:01:02 2025 by rpki-client