Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          F+I5UC3dPAsC80Or6CkfXsyj0JQMgWjPJ16Z5Au3KTk=
Subject key identifier:   80:63:2D:0D:FD:3E:7E:49:6C:04:D1:4B:41:BF:99:CB:17:99:C7:83
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       54922B84C9914F105F32706F20ED30B9433C8615
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        172.108.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:92:2b:84:c9:91:4f:10:5f:32:70:6f:20:ed:30:b9:43:3c:86:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=80632D0DFD3E7E496C04D14B41BF99CB1799C783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:26:a4:8b:58:63:aa:19:36:41:86:3d:99:
                    21:0d:64:11:92:ec:3c:42:1e:b7:15:10:a4:d0:f5:
                    09:5f:58:d1:fe:b9:92:3a:25:2f:f3:96:50:94:0f:
                    62:e4:c0:a3:5a:fb:44:ce:96:27:24:dc:0a:92:a2:
                    47:d6:db:11:39:2e:3b:5e:b4:ab:b1:e1:90:17:72:
                    d7:a7:ca:9a:21:77:af:29:47:a2:a9:5e:e5:e8:6b:
                    8d:ce:8e:93:af:10:c7:44:9d:f0:a5:44:fa:a5:d5:
                    a0:ed:6d:95:79:a9:82:94:c4:0f:8e:1b:b2:1b:51:
                    a9:fc:d6:ef:68:96:8d:d0:f8:a1:fe:df:54:99:be:
                    6a:41:43:01:4b:2f:c6:be:b0:b7:e6:21:ca:fe:b7:
                    1b:64:71:20:9b:d7:9f:8d:8e:cf:d0:4f:ff:ba:ec:
                    47:ee:a0:f3:7d:69:48:3a:73:d6:7e:5a:41:a9:fc:
                    c9:5a:9a:36:af:92:aa:fa:cc:d4:47:1f:e6:1b:16:
                    54:fd:9a:02:8e:d3:86:11:1c:5e:f1:2b:d0:97:ad:
                    f9:47:b1:cd:3f:0a:68:65:bd:43:3b:84:ce:df:30:
                    ca:09:bc:8c:5a:99:88:e5:4e:b4:c0:db:99:e5:55:
                    88:bf:eb:94:ee:cc:01:23:eb:ec:3f:35:4c:7d:63:
                    4d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:2D:0D:FD:3E:7E:49:6C:04:D1:4B:41:BF:99:CB:17:99:C7:83
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132302e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:43:f0:f0:2e:4c:fe:72:07:63:01:09:98:50:f5:4d:6c:a3:
         23:8e:fc:b3:64:11:ec:0c:11:e6:22:6e:e1:c0:c4:62:ec:0c:
         b6:f2:dc:66:29:16:8f:46:58:b8:2f:cf:04:7b:fe:0e:78:15:
         73:42:0f:fc:65:ff:e8:33:f8:f2:6a:7e:92:7b:10:71:20:72:
         8a:21:67:68:63:04:58:4f:a6:45:d9:b5:e8:20:7d:c2:f6:29:
         09:35:aa:6c:92:9e:49:68:80:4e:9e:ed:23:45:4f:65:a4:3f:
         12:22:31:82:fb:c2:61:91:cc:73:9a:41:3c:bf:d9:9c:43:7c:
         a7:a3:a2:3d:78:fb:bb:f6:17:bd:28:fa:24:84:b6:41:46:f7:
         61:3c:fd:78:a1:0c:ea:de:e5:4c:3a:29:0f:d9:e8:70:88:25:
         f5:05:ae:fd:95:97:3b:45:d0:1b:f7:87:10:8e:b6:a7:d3:49:
         63:51:f2:74:22:6b:78:eb:0f:15:06:b1:f2:9c:07:80:24:e2:
         88:87:fe:fa:1e:93:1e:d2:8f:a0:28:9b:e1:3a:cc:46:6f:c5:
         a4:c8:d2:d7:5a:d2:0c:79:00:fb:ae:0d:8c:c2:6e:8a:e7:43:
         1f:7d:3f:e4:72:be:1e:7a:ae:d0:e3:53:01:06:58:b7:2e:bd:
         b1:60:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:15 2026 by rpki-client