Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35342e302f32342d3234203d3e203633393032.roa
File:                     34352e3135302e35342e302f32342d3234203d3e203633393032.roa (raw, json)
Hash identifier:          87yOJaeqRmIN9f8rwNfJmQCWNrgquYA+1sdmc5Kf3w8=
Subject key identifier:   6D:3E:0D:A9:07:3E:1F:13:EF:50:B7:F5:4A:AC:06:AE:04:63:B3:4A
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       18EBC15B0DB34D5152BEDDEFE1E9021289B9839F
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35342e302f32342d3234203d3e203633393032.roa
Signing time:             Wed 23 Apr 2025 05:39:08 +0000
ROA not before:           Wed 23 Apr 2025 05:34:08 +0000
ROA not after:            Wed 22 Apr 2026 05:39:08 +0000
asID:                     63902
IP address blocks:        45.150.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:eb:c1:5b:0d:b3:4d:51:52:be:dd:ef:e1:e9:02:12:89:b9:83:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:08 2025 GMT
            Not After : Apr 22 05:39:08 2026 GMT
        Subject: CN=6D3E0DA9073E1F13EF50B7F54AAC06AE0463B34A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:23:e8:62:9e:87:cb:88:3d:3c:8e:1a:a7:
                    a0:06:8a:91:b2:2b:4e:df:da:78:9e:ad:49:05:84:
                    22:c6:8e:3d:a5:9f:44:4c:ee:24:06:cd:84:a7:81:
                    b1:d0:ab:96:92:28:68:7a:cc:9c:db:12:31:8d:48:
                    84:9f:0e:54:8f:11:e6:4b:de:8f:30:3a:b5:67:c2:
                    f5:9c:a9:3a:e8:25:6b:05:a6:17:f0:b6:fd:38:c0:
                    ba:0d:8a:bb:a4:5b:3d:d6:eb:bf:75:51:1d:9e:19:
                    0d:0b:48:54:b3:4f:96:80:d3:f1:e1:10:83:6c:48:
                    68:32:69:29:c3:08:d1:f0:8f:07:01:30:f4:ae:01:
                    ba:21:2d:97:f8:90:13:f4:d0:26:2d:0a:ff:b2:27:
                    89:e3:9f:ca:15:19:be:89:43:28:91:56:7d:88:87:
                    30:c5:9e:6b:4d:0f:3c:bc:07:69:02:9d:cc:67:2e:
                    b6:6b:b9:26:90:53:6d:36:94:76:39:30:2f:bf:79:
                    c5:e9:d1:03:76:0c:12:91:5b:81:a3:bc:d3:5b:3d:
                    06:2d:30:e5:55:a9:63:52:f6:eb:cc:2c:1b:8b:20:
                    69:95:b7:60:db:62:02:83:a7:3f:da:fa:19:c9:e2:
                    04:0d:7d:49:15:93:76:b8:04:d9:2f:52:b6:93:57:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:0D:A9:07:3E:1F:13:EF:50:B7:F5:4A:AC:06:AE:04:63:B3:4A
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35342e302f32342d3234203d3e203633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:e4:0e:dd:b7:39:75:48:39:93:9a:1d:f6:42:47:ef:5b:d1:
         cf:7e:d7:60:69:37:e3:9b:b2:bb:0b:32:ff:a0:2a:c6:1f:53:
         a7:ed:25:42:04:b4:23:75:9b:60:0e:45:7f:e4:af:ec:2c:a2:
         31:4e:15:99:a8:2b:e2:4c:fc:ef:c3:64:b4:a1:7f:c7:e3:32:
         f7:51:7d:8d:29:38:8c:22:f0:aa:a4:a4:bc:c1:ae:98:2f:12:
         ab:6c:e5:dc:e9:31:26:64:c2:76:c0:5e:bd:56:bc:8c:36:0b:
         43:aa:63:5f:e6:a3:41:db:18:d7:84:ca:3d:c5:5b:df:b1:81:
         f7:55:4f:fa:7d:de:f1:fd:99:6a:47:92:81:e9:f8:d0:e8:85:
         ae:48:15:e9:40:01:cf:05:51:72:ce:8e:67:9d:54:77:9d:14:
         65:8a:53:94:46:e0:5b:67:f4:fb:ff:11:10:99:33:39:89:a4:
         c0:57:45:24:17:15:d1:52:09:4f:79:5e:6f:ec:cb:f2:2d:7d:
         a6:a2:6c:b6:d0:dd:58:04:86:a1:98:9b:5d:b8:a7:98:1d:07:
         40:cf:6f:58:8e:76:c8:c5:b0:a2:4b:3c:53:1e:28:cc:26:bd:
         8d:4f:f5:13:61:75:80:c4:7e:2d:de:8c:2f:23:a1:0e:b9:61:
         dc:9e:a4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:01:24 2025 by rpki-client