Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130322e33322e302f31392d3139203d3e2035363530.roa
File:                     3137322e3130322e33322e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier:          3kXr1mYY6Vv6Id/XpaS5fojFsE12lI7lJOK4IbgBvjw=
Subject key identifier:   5A:01:81:86:03:4C:0D:D2:A0:58:0E:64:86:67:D4:DC:BE:8B:EB:7B
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       437EAD8C14695E93A8FDEBEA45B4566486BEA8C6
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130322e33322e302f31392d3139203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        172.102.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7e:ad:8c:14:69:5e:93:a8:fd:eb:ea:45:b4:56:64:86:be:a8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=5A018186034C0DD2A0580E648667D4DCBE8BEB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:d8:e3:92:c6:e9:81:d3:0b:7c:34:e9:8b:
                    ae:80:0f:73:22:54:c2:74:9d:4d:1f:cf:86:c3:d8:
                    d0:c0:36:f9:6c:04:ec:7f:bf:68:cd:e1:b3:87:f0:
                    62:c8:63:c1:8c:79:93:3b:b0:2e:9d:e9:5d:3b:7b:
                    81:6a:f7:d2:82:b8:c2:51:6d:93:90:2f:72:f3:ac:
                    4a:24:b7:56:07:98:9a:75:b8:df:6f:af:a2:6e:bb:
                    15:69:5c:a9:c3:47:48:e6:3b:5d:91:f2:ae:6d:6a:
                    1e:61:d2:1a:cd:b0:3e:e6:ae:f9:79:d5:65:df:f3:
                    38:78:e9:e9:3f:5d:91:7e:52:12:95:76:72:27:41:
                    26:e6:31:33:fa:12:5e:3a:ff:0d:74:d4:bd:47:66:
                    70:72:b2:30:e8:d5:80:52:2a:f4:ad:6f:6d:b3:0e:
                    f3:f1:f8:59:cb:a3:dc:77:d0:fe:b6:87:e1:89:91:
                    36:e2:74:35:f4:13:fb:df:0d:ac:af:7a:a8:9f:b6:
                    ef:fd:ec:90:c8:18:2d:45:e2:29:96:35:40:e2:45:
                    d7:d0:eb:bb:b0:79:2e:40:87:87:c8:4d:ca:0a:56:
                    cb:b6:2e:51:8e:f7:43:47:c4:0e:21:4d:03:1e:48:
                    4d:62:b6:bb:09:59:3d:a0:a1:68:46:26:27:45:7b:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:01:81:86:03:4C:0D:D2:A0:58:0E:64:86:67:D4:DC:BE:8B:EB:7B
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130322e33322e302f31392d3139203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         13:00:6e:2b:be:d2:7e:fb:10:23:50:cd:bd:19:00:0f:5f:07:
         08:1e:7f:b4:bb:1c:0c:75:5d:3f:70:3b:c6:9f:10:58:51:73:
         86:1d:50:58:df:53:71:7a:26:f7:b4:81:c5:bd:1b:d2:34:e6:
         9d:27:10:5a:61:c3:ad:5c:77:ee:20:ec:c2:4a:f0:a5:ab:40:
         c4:4f:44:a3:62:28:24:23:4b:e7:d5:6b:31:7d:76:86:9b:14:
         71:8e:0c:ec:29:e3:75:e9:f3:97:01:ea:d4:0b:93:fb:dc:24:
         20:6a:08:34:2e:f0:c2:cc:69:f9:de:74:af:3a:c2:4a:1f:4a:
         13:8d:a6:6c:6b:24:ff:41:ac:d8:45:83:94:0b:80:8e:8e:3d:
         76:6c:a3:5e:43:75:b8:2d:a9:76:fd:20:1c:59:63:bf:81:fc:
         6b:3e:97:51:01:5d:77:6d:77:a4:d9:ec:0f:c1:38:23:71:63:
         bb:4f:2e:c7:aa:49:e8:58:1f:49:82:8d:09:77:b5:74:66:75:
         ae:b2:62:23:f9:65:2b:5d:cb:c3:9a:4d:69:c2:c3:39:00:59:
         15:ea:f8:35:83:04:2a:ae:29:d8:6d:a0:e6:8a:26:b6:53:e9:
         4a:9a:6d:aa:10:6d:a4:94:f2:67:23:2e:7e:6f:a2:70:cd:ae:
         15:b4:bc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:28 2026 by rpki-client