Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35352e302f32342d3234203d3e203633393032.roa
File:                     34352e3135302e35352e302f32342d3234203d3e203633393032.roa (raw, json)
Hash identifier:          U7zFRYw4ZRDtVdJ7PJmO2mTvhNAjK/QEA7diJSMJbj8=
Subject key identifier:   4B:1C:31:AD:CA:CA:7F:90:DD:96:51:D6:B9:C2:5D:D6:D7:E3:B6:42
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       63621DDBBA194B4DC20162B46E41DE1F77921234
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35352e302f32342d3234203d3e203633393032.roa
Signing time:             Wed 23 Apr 2025 05:39:05 +0000
ROA not before:           Wed 23 Apr 2025 05:34:05 +0000
ROA not after:            Wed 22 Apr 2026 05:39:05 +0000
asID:                     63902
IP address blocks:        45.150.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:62:1d:db:ba:19:4b:4d:c2:01:62:b4:6e:41:de:1f:77:92:12:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:05 2025 GMT
            Not After : Apr 22 05:39:05 2026 GMT
        Subject: CN=4B1C31ADCACA7F90DD9651D6B9C25DD6D7E3B642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:83:cb:cf:8a:9b:9c:79:b3:a1:ef:e0:b1:
                    8d:d4:03:b4:f8:09:bc:13:1e:20:96:1f:b8:f6:d6:
                    46:d5:4e:7e:bb:bd:1b:ed:50:94:ce:5f:62:70:f6:
                    85:28:c4:8f:94:0c:0a:7a:32:3d:49:5c:6b:b7:32:
                    b8:b4:9e:79:13:0f:db:61:09:53:eb:39:78:d9:8e:
                    a3:f2:04:d1:65:a1:56:c9:a6:59:40:ff:f1:2b:c3:
                    05:da:ee:38:52:4f:38:61:5d:66:be:e2:15:87:f7:
                    23:2f:f9:d8:7b:7e:09:9d:f4:b9:f2:38:20:88:f5:
                    d5:1d:1a:c7:f7:73:22:f7:10:b2:e5:02:a9:54:70:
                    7b:e5:44:c3:03:81:31:bd:61:12:fe:c9:d1:27:3f:
                    3f:37:6c:a1:78:8e:ef:4a:16:4f:25:df:51:99:bd:
                    37:6e:e1:64:6f:12:96:98:67:3a:32:80:15:81:35:
                    bc:a0:86:e1:15:dc:ac:85:b1:66:90:fc:81:b6:10:
                    5e:30:5d:bf:38:bf:50:ba:62:03:47:3b:2c:fe:6f:
                    0a:95:aa:db:47:5c:53:da:0b:db:a0:d3:f5:cf:58:
                    73:b7:12:a5:0e:77:25:1d:f1:d0:07:2c:f2:ea:01:
                    28:d5:a6:6a:ea:f4:c6:a8:4b:7c:5b:d3:0a:78:87:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1C:31:AD:CA:CA:7F:90:DD:96:51:D6:B9:C2:5D:D6:D7:E3:B6:42
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/34352e3135302e35352e302f32342d3234203d3e203633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:4d:10:71:a6:46:9b:25:b9:ec:9e:71:e9:65:ef:b0:a3:6f:
         5c:92:a8:f9:82:21:67:40:d9:a3:83:95:47:2d:8a:72:bb:ac:
         5c:66:47:e6:d4:89:e9:8f:12:59:a1:62:e2:b4:64:e6:d1:96:
         51:d8:56:b4:33:9a:fd:ff:be:10:83:87:81:50:8d:c0:de:b4:
         93:5a:b4:66:42:eb:73:1e:71:ae:fc:b3:22:af:a9:f3:58:3a:
         28:6c:1e:88:55:33:00:45:7b:05:2f:c1:a9:44:fa:dc:78:8a:
         96:75:e8:a9:40:0c:fe:14:db:aa:13:16:2b:c5:5a:9e:3e:0b:
         1d:01:da:42:60:9d:aa:42:9c:ad:ec:c1:19:e6:1f:c3:c3:1c:
         61:b6:2e:49:de:f8:03:85:1d:f2:d9:cb:c1:99:7b:7c:f6:18:
         eb:34:35:3f:d6:ed:86:41:28:81:4b:a6:8c:29:89:c0:77:a7:
         a2:d0:47:0d:94:e7:f2:16:28:6c:7a:09:73:6d:57:af:43:6e:
         f6:6b:5f:95:9c:09:14:9d:aa:2b:ed:08:33:8e:7b:6b:48:0d:
         65:60:c0:35:d1:a1:5a:34:0f:df:90:e2:64:48:83:fd:d6:65:
         d0:f8:db:3d:91:2e:c0:c5:1e:da:3a:07:37:cf:ee:cb:98:04:
         1a:a7:bb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:07:52 2025 by rpki-client