Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          z2V2/mIJ5s2EAVRhBg104pi5h2GxU75+HCg+nnI3wtM=
Subject key identifier:   2F:F2:2A:92:1D:77:7E:B3:38:FD:CE:C0:E1:B7:5F:7A:83:12:3F:FF
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       117275D2BE7D550094D4AD08B89A198FD1E48E00
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        172.108.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:72:75:d2:be:7d:55:00:94:d4:ad:08:b8:9a:19:8f:d1:e4:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=2FF22A921D777EB338FDCEC0E1B75F7A83123FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:66:db:a2:01:5f:a4:af:fa:a1:1b:f3:27:
                    44:ba:ef:9f:73:dc:5d:dc:92:a5:e7:95:45:9d:7c:
                    71:60:ab:1c:08:96:13:e4:cb:5a:fa:4f:40:2a:9f:
                    25:e7:72:1d:e1:71:e3:6e:17:c0:1a:34:fb:95:88:
                    a5:57:86:c5:d1:80:50:5d:c0:9c:76:e2:10:29:49:
                    af:a3:db:a7:e2:e3:cc:9e:83:35:04:c2:63:c1:5a:
                    cf:30:ef:e5:d3:18:17:22:5d:b7:96:e7:6f:19:db:
                    ab:96:91:5a:eb:a8:6d:a6:5b:99:d2:3a:f3:14:cf:
                    ae:1c:09:86:eb:64:10:2f:24:6a:75:62:80:25:a4:
                    af:d8:61:75:76:5e:b6:40:0d:b7:02:fc:c1:46:a6:
                    85:ee:48:dd:b2:21:7b:02:44:d1:29:2a:4f:70:06:
                    57:0f:5d:da:9b:8d:e2:c3:11:e2:0f:6c:4f:4e:f6:
                    4e:ec:5b:9e:73:3a:da:23:26:d9:2c:23:71:ee:64:
                    9b:15:99:53:d4:aa:30:dc:bc:e6:8f:37:db:d2:85:
                    a5:88:66:1a:bd:3a:fe:3f:50:63:ab:7d:d3:6b:5b:
                    35:9f:02:e1:b1:0f:fe:23:78:dc:15:65:ff:fc:15:
                    23:8c:f6:6e:47:21:8c:c5:14:8b:6a:88:a4:7f:53:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F2:2A:92:1D:77:7E:B3:38:FD:CE:C0:E1:B7:5F:7A:83:12:3F:FF
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130372e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:2e:c6:08:c2:a7:19:39:e2:fa:66:69:38:fe:ec:ec:de:13:
         15:ba:7d:67:e8:22:0a:a3:74:4e:93:f9:71:85:8a:41:c8:9d:
         b5:5b:f2:d5:16:f4:80:71:c0:c1:3e:d3:e1:cd:36:f8:7c:2a:
         b8:97:b6:3c:ac:fd:9c:35:cf:0f:25:43:3d:78:b3:26:10:92:
         95:b3:9c:68:89:31:42:af:7f:66:96:2e:8e:30:a7:7d:a3:a3:
         41:60:84:f6:be:f8:37:63:06:a8:8a:c2:68:10:5f:ad:ec:3e:
         1e:08:68:f2:e1:24:1c:d6:25:28:e2:e0:37:bd:ef:bf:b1:ec:
         0b:f6:62:6c:6c:f7:93:67:99:fe:81:08:29:ef:c6:0e:1e:b1:
         2c:5e:06:be:d5:e5:5a:6a:84:cf:2e:9d:24:de:b7:0d:e2:ba:
         48:42:a7:a7:1c:a5:b7:21:40:18:60:e4:00:ef:36:90:a3:25:
         6f:30:f7:c6:b3:af:7a:07:0b:b8:7f:4b:72:ff:d8:72:d7:37:
         4d:b2:ca:d5:18:78:7d:7d:bd:dc:22:cd:a6:c7:85:99:f5:6c:
         ab:b0:29:cf:76:19:39:69:fa:03:90:06:cd:d5:3e:b6:5a:6d:
         bf:1b:1b:ac:c4:01:f5:78:ad:30:db:88:99:8d:73:8c:7c:46:
         de:72:cf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:57 2026 by rpki-client