Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e34302e302f32312d3231203d3e2035363530.roa
File:                     3137322e3130382e34302e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          T0dDjgOyDWzWd76gTWEXNOmD8v20RFq4MTsjCNjUCuc=
Subject key identifier:   4D:62:2E:2E:89:2C:08:0B:88:D2:03:42:6F:FB:7C:F5:4B:F7:37:3D
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       06CC46282DB57E984B8937D90C8166631994D22F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e34302e302f32312d3231203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        172.108.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:cc:46:28:2d:b5:7e:98:4b:89:37:d9:0c:81:66:63:19:94:d2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=4D622E2E892C080B88D203426FFB7CF54BF7373D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:9c:15:a4:12:42:16:14:eb:5d:9c:b4:60:
                    b1:1c:3a:78:b6:e4:69:f7:01:05:56:94:cd:02:99:
                    aa:16:4c:26:d9:c2:88:d7:c0:06:02:23:54:52:25:
                    8c:da:66:93:f5:bf:d8:11:a0:f3:0b:36:84:ef:23:
                    e7:73:28:0a:bd:1b:96:62:2f:b6:bc:87:b1:8c:21:
                    f0:76:bb:ac:a3:4c:15:ed:93:58:04:07:ed:df:1e:
                    9c:e3:e5:4c:78:ce:e1:7f:17:de:b3:e0:ec:fb:f4:
                    43:67:c2:d3:75:be:f4:bc:58:68:44:51:52:de:29:
                    fd:4e:19:09:95:af:76:64:63:67:80:d5:12:33:23:
                    4c:b8:d7:7d:64:c2:ea:b0:a3:71:a4:f0:a6:ef:2e:
                    d6:86:82:e4:64:82:42:46:b4:7e:fe:b2:c1:08:9d:
                    f1:cb:f2:73:0c:67:fc:af:8d:d4:de:45:fa:03:05:
                    c8:33:11:8c:a9:7d:c7:e4:35:ea:77:b4:b3:4a:92:
                    64:e9:ef:11:00:34:38:d1:8d:9f:da:05:b9:a4:ba:
                    1a:f6:93:2a:92:0a:3a:4a:cc:4c:bf:8e:ef:95:24:
                    16:38:56:a0:0f:cd:b9:46:c8:14:9d:c8:d4:58:ba:
                    fa:fd:de:47:6f:ee:d2:4c:d7:37:07:df:23:cb:58:
                    72:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:62:2E:2E:89:2C:08:0B:88:D2:03:42:6F:FB:7C:F5:4B:F7:37:3D
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e34302e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:12:96:d1:f6:2f:0e:4f:df:ed:3c:8f:6d:ad:80:34:13:09:
         0a:7f:cf:54:47:90:95:cc:b6:3a:f2:e4:36:6d:c0:0f:2a:ca:
         aa:9a:22:2e:45:12:f2:04:b6:13:6e:c0:cd:19:8e:11:05:78:
         b7:03:54:33:38:0a:9c:93:9c:04:2d:ba:1d:8d:bb:ff:cd:fc:
         88:de:d6:b3:2e:e1:cf:59:ba:55:ff:61:76:78:30:8f:9c:49:
         a9:61:b6:1b:12:e5:5e:e3:a7:59:05:03:f2:34:16:f5:0e:cc:
         75:ba:0b:0a:1c:d8:8e:b7:e0:b5:43:d0:c9:4a:4c:62:59:ba:
         d5:ce:2a:79:f2:b6:2a:68:c6:30:dd:b9:bf:56:86:4c:00:6e:
         1d:19:de:e2:bc:25:09:04:8a:de:4f:39:ca:e1:39:96:03:a2:
         0b:58:f5:b0:30:26:f6:df:db:fa:8c:8f:ee:56:c7:6e:1c:f0:
         74:79:99:ec:69:2b:a8:6d:6e:51:1c:22:a1:de:41:fb:5d:47:
         b7:61:47:3a:b0:0f:14:e1:05:ec:77:b3:8a:5e:a7:be:8e:60:
         58:f3:7c:58:af:9b:c5:c2:54:3d:fa:0a:82:f7:8a:e0:45:7c:
         01:0c:5a:cc:7b:44:3a:fc:c1:13:a8:06:7f:81:bb:a6:ab:71:
         d5:41:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:00 2026 by rpki-client