Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e33362e302f32322d3232203d3e2035363530.roa
File:                     3137322e3130382e33362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          dclEvicMxVoCCumadDPZGEZ7LfKTUjMn4kavP3bMPB8=
Subject key identifier:   D4:3E:A1:18:5B:59:EB:39:23:CA:EC:4B:0B:D5:47:6A:7C:03:08:90
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       6A25AB76D48C17530C92ABF6256C6F640E5E2E6B
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e33362e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        172.108.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:25:ab:76:d4:8c:17:53:0c:92:ab:f6:25:6c:6f:64:0e:5e:2e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=D43EA1185B59EB3923CAEC4B0BD5476A7C030890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:92:20:b8:23:01:fb:86:5a:ac:6c:2b:26:20:
                    7c:a3:54:1d:27:f9:da:38:c7:ea:48:02:cb:db:26:
                    7b:81:70:3d:49:94:7d:46:00:15:01:f4:e4:c3:54:
                    29:45:d9:bb:ea:75:d7:c9:72:3a:fc:3f:46:d6:27:
                    bf:8d:87:9c:ed:95:ba:6e:3f:3b:9e:83:e9:37:ad:
                    7c:05:72:1b:53:d3:5b:ef:94:0e:28:a0:bc:a7:47:
                    62:e5:15:8e:89:12:fd:10:c3:c9:54:3e:db:fa:af:
                    a5:23:54:68:a2:5c:b9:b1:45:44:19:0b:2a:a5:a6:
                    4e:e6:67:1c:31:72:76:3f:38:08:88:45:36:3d:8b:
                    77:a9:35:77:42:d2:81:76:e5:ec:a6:dd:29:28:f7:
                    c1:f2:c3:43:77:17:a7:a9:65:ca:8c:9b:e5:44:4a:
                    de:d2:5f:fa:23:a6:ee:7a:1a:ef:27:ab:fa:21:c0:
                    72:32:db:29:82:46:66:c5:8e:dc:95:ae:01:49:a1:
                    ce:6f:7a:b1:21:9c:42:75:e6:83:af:bf:0e:02:81:
                    80:97:f4:c8:7c:37:18:2b:e3:44:1b:2f:40:b7:c8:
                    e2:32:03:f7:69:86:e9:7c:c6:14:2d:32:f0:44:95:
                    fc:25:f8:47:df:1b:e0:ba:73:c6:be:16:a7:f4:e7:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:A1:18:5B:59:EB:39:23:CA:EC:4B:0B:D5:47:6A:7C:03:08:90
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e33362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:ed:c0:60:a5:c5:58:48:45:5a:f7:fc:a9:70:dc:4d:f5:57:
         cf:99:61:32:68:7f:5e:bf:60:58:35:77:1e:9c:99:25:d4:af:
         0e:aa:f2:f7:8d:40:9d:ba:cf:38:01:76:bb:39:15:5d:bf:fd:
         0e:c4:22:1d:3c:d4:63:ce:4b:10:1f:00:a7:cc:98:c2:3f:fa:
         9c:a6:ff:23:a5:47:17:29:16:ea:02:f2:ec:c6:c8:7b:eb:dc:
         13:b1:ab:4e:b7:a5:dd:70:d1:96:dc:04:40:4e:48:d4:28:6c:
         bf:b6:ba:86:c9:59:b4:a9:3d:4d:79:0c:c3:33:be:99:ce:c1:
         c0:44:db:5e:69:f8:a6:be:bd:29:f2:59:0e:97:9c:1c:8e:73:
         32:ef:f0:ae:85:ec:d4:7c:9e:b4:a7:eb:01:be:c0:e3:11:30:
         42:f2:66:51:86:8d:3f:72:ad:0c:09:be:ab:18:8e:f6:9e:e9:
         f5:64:48:86:93:44:62:9a:1c:3f:55:92:87:65:fd:87:32:fc:
         f4:88:77:89:db:d2:30:62:77:ac:cb:97:a4:d4:ad:ce:ac:83:
         6e:1b:a1:1b:08:c3:2c:02:a4:ba:6a:56:f5:aa:be:ea:99:93:
         63:08:f9:0d:ae:32:15:05:a0:54:af:5b:87:05:4f:75:e6:d8:
         4f:fa:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:53 2026 by rpki-client