Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          dR3PpIS64DkQYh4GafdHXnDUVS2TGqfO1ULIvOJUcuI=
Subject key identifier:   D1:42:FF:21:58:CB:E8:46:E0:66:49:B3:67:3E:C0:29:88:DE:20:D1
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       4250B857411E0B0D96FBD2C121B10E62EFC18B8C
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        172.108.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:50:b8:57:41:1e:0b:0d:96:fb:d2:c1:21:b1:0e:62:ef:c1:8b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=D142FF2158CBE846E06649B3673EC02988DE20D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:66:a3:8d:cf:58:22:8c:06:6d:06:3f:b8:
                    86:f1:0b:34:7b:ca:0f:26:2d:9d:f2:50:c8:04:01:
                    60:64:e4:8a:b3:78:9b:ef:83:64:e6:c9:cd:5b:b3:
                    62:34:66:ce:28:a6:05:13:fd:e3:4a:bb:9e:63:f4:
                    65:25:c2:21:8f:fd:5f:b9:af:b8:d3:62:81:01:4f:
                    c8:88:9c:1f:5c:7a:3a:78:ec:e3:65:13:a5:c6:f6:
                    23:31:d9:38:8d:93:bb:15:ab:47:d2:f8:b9:a2:03:
                    ac:91:fc:d9:f2:38:f8:e2:84:3f:fc:6a:08:62:b5:
                    6b:2a:2d:9b:42:a2:42:c8:ce:1a:8b:dd:be:4e:d6:
                    69:12:27:07:b6:46:39:c4:21:87:88:aa:d3:a3:f6:
                    74:54:d5:43:3e:cf:48:27:53:0b:7c:02:71:28:57:
                    45:f7:a4:65:cf:84:46:de:30:5f:57:83:d4:94:c7:
                    9c:5e:f3:a2:ee:a8:07:e1:c5:9f:e1:40:bc:59:0e:
                    d2:b6:9f:08:8c:ec:27:5d:81:cb:65:89:0e:94:a3:
                    cc:e0:09:97:27:f2:ed:bb:57:6c:c9:6b:a9:c6:e9:
                    8d:a7:4a:51:b0:49:0c:9c:98:1e:ce:ac:7c:ed:cd:
                    48:f9:d6:99:b9:19:ae:2c:f4:9a:41:89:e0:37:d7:
                    d3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:42:FF:21:58:CB:E8:46:E0:66:49:B3:67:3E:C0:29:88:DE:20:D1
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131342e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:2b:b7:59:7c:a2:eb:ba:f4:46:41:5b:15:c1:a6:9d:fc:5e:
         10:f9:c9:52:02:db:ac:38:28:0a:00:3d:9a:2e:d9:c1:d8:8f:
         69:03:93:4e:b3:69:4e:d3:66:df:df:17:58:67:67:01:02:b6:
         d6:4d:e9:fb:c9:9d:c3:1d:b3:33:24:71:20:59:dd:3c:11:a9:
         cf:a2:8b:f0:b6:9f:a8:78:13:a9:cc:a6:95:72:3b:be:3c:92:
         d6:8d:67:b3:1f:5f:8a:30:3d:06:fe:e9:25:8a:07:72:8a:97:
         d9:96:b0:bd:24:b1:32:29:aa:9d:54:60:cf:d9:d9:68:53:a7:
         30:f4:8e:a8:4d:31:fa:f2:cb:7b:b9:86:b6:7d:71:ff:9b:2d:
         a3:5a:ae:4f:dd:51:b5:4e:8f:59:27:7d:b3:62:d8:81:24:fb:
         28:8d:60:47:c8:67:65:80:7d:be:c0:69:de:d5:f9:99:30:d7:
         8f:4b:1c:c9:a8:c3:13:e8:fb:a2:1c:00:79:55:7f:9c:4c:a7:
         e0:7f:db:55:36:16:a7:ee:dd:a1:3b:60:4d:10:7d:91:2f:58:
         54:e7:c4:e4:96:db:07:c3:ed:48:60:75:d5:74:b1:10:bb:41:
         12:4e:e2:05:2a:55:00:44:ec:06:8d:3a:54:46:e2:93:9b:34:
         46:36:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:21:50 2026 by rpki-client