Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          2gbBfLAk7GPRBJVzBXHtOMqRGdU+PqyDe+pqtlqT7zk=
Subject key identifier:   3B:91:40:6F:75:8C:C7:BD:E5:BB:01:51:BF:F6:E9:68:7A:9E:AB:D6
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       57AA15C1D8C477C6CB4881BAF11A23670CD43879
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        172.108.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:aa:15:c1:d8:c4:77:c6:cb:48:81:ba:f1:1a:23:67:0c:d4:38:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=3B91406F758CC7BDE5BB0151BFF6E9687A9EABD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:87:dc:6a:9b:90:02:fb:42:19:76:7c:5f:
                    6e:51:82:ec:9a:6b:30:b1:48:1c:7e:a9:e0:ac:1c:
                    66:b3:47:02:6b:88:4a:ab:22:54:df:3c:ba:3f:c6:
                    18:a6:88:b6:b6:3e:6b:c4:29:85:1c:b2:ec:09:76:
                    42:ee:6f:51:6f:1b:d4:95:6a:4c:cc:28:49:0a:0c:
                    78:fb:91:23:91:23:49:08:ae:47:1e:28:5b:41:4f:
                    da:34:39:b5:b5:65:45:02:38:00:ce:80:8a:2b:8b:
                    10:34:94:9a:e1:50:45:c7:fa:a5:ca:34:9b:54:b7:
                    7d:ee:37:46:09:e4:f8:33:91:c5:0d:a2:65:11:4b:
                    a6:3f:d5:65:93:f6:4e:6e:7f:af:a3:dd:6e:18:be:
                    6a:81:8c:82:75:da:67:fc:e5:38:f6:0b:1f:fc:cb:
                    69:13:70:29:d4:a8:95:11:83:96:10:74:e6:1e:f0:
                    b6:16:46:49:c0:c2:f2:ff:ba:2e:bd:db:c1:7b:a3:
                    55:de:d1:9e:56:15:40:5c:6a:39:29:3a:c4:78:a6:
                    04:bc:a3:9e:26:7c:ad:6f:25:ad:b3:3b:93:fd:72:
                    7e:76:65:aa:a4:af:29:52:50:b0:08:94:12:30:88:
                    9c:60:49:67:27:f1:ff:ae:d4:fe:d9:14:d3:69:23:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:91:40:6F:75:8C:C7:BD:E5:BB:01:51:BF:F6:E9:68:7A:9E:AB:D6
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:02:b0:4b:46:65:15:8e:60:b9:0f:ad:8e:02:cb:40:33:9b:
         82:12:ae:d7:4a:2c:61:27:80:4d:c5:59:c8:63:5d:9b:16:ef:
         2b:f0:70:58:b3:a1:c4:43:16:1e:d5:df:5f:d9:d9:93:94:9b:
         79:d0:22:c8:f6:bb:a2:06:0f:eb:60:e0:db:e8:db:93:8b:e2:
         ec:79:04:31:24:89:89:d0:58:64:66:8e:a7:8b:79:93:11:f7:
         bd:0e:65:c1:54:ff:bf:96:c3:e1:e7:5d:28:bc:8a:dc:81:81:
         66:36:2d:29:a0:80:e0:6d:0d:43:73:e6:fc:c3:76:2f:1b:96:
         36:6c:4e:0a:36:0d:61:35:5c:e3:98:cd:96:ad:77:89:6e:42:
         d9:6f:52:ff:47:54:9a:25:90:dc:0f:91:ec:c1:5a:aa:a7:ed:
         1d:90:90:a7:71:45:64:1f:62:82:68:91:87:5d:cd:c0:b7:51:
         a8:2f:74:6c:b9:4e:21:3b:3f:e7:9e:4f:de:d2:25:92:36:ff:
         de:f9:8f:42:55:52:ed:52:55:1a:69:32:4c:8a:96:92:25:59:
         30:53:71:5e:6e:15:c4:1c:82:1c:50:5d:a2:99:8c:f1:2a:76:
         86:4d:71:2e:a0:e4:c5:79:ed:c3:98:6b:f9:5a:f5:f4:4b:c7:
         5c:36:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:33 2026 by rpki-client