Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e302e302f31352d3135203d3e2035363530.roa
File:                     34372e3138322e302e302f31352d3135203d3e2035363530.roa (raw, json)
Hash identifier:          9sIWfOihiGnWatpx2nPqLQedrRURdyxrlP4YePenLuM=
Subject key identifier:   FF:6F:B4:F5:68:AD:BE:31:52:25:82:F2:03:D5:F7:C0:CA:A4:90:44
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       5FF073A52F28E0C13B0F28E159765EB9B6B1FBD0
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e302e302f31352d3135203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        47.182.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f0:73:a5:2f:28:e0:c1:3b:0f:28:e1:59:76:5e:b9:b6:b1:fb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=FF6FB4F568ADBE31522582F203D5F7C0CAA49044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:8e:f9:9a:9e:85:57:2f:97:4b:36:64:24:
                    94:f9:f5:58:a4:65:55:0e:7b:ee:8e:42:c7:d0:7b:
                    99:6c:8c:6a:8e:a3:81:a8:00:e7:8c:1b:94:0e:ed:
                    27:85:d2:3f:a0:15:69:33:1e:a1:69:9b:0b:07:04:
                    14:9b:be:d9:d2:bb:91:a3:cd:06:6d:6e:3d:e3:40:
                    f4:b8:82:6b:9b:bf:bb:8c:b1:39:23:4d:1e:a2:da:
                    d3:ed:f0:d9:b1:fc:f8:ce:82:fa:23:45:ab:96:bd:
                    68:4e:10:25:8b:6b:7e:17:3d:d1:20:6b:07:e9:ff:
                    73:fe:a3:9b:8f:0f:f3:80:3b:45:98:df:fa:2b:87:
                    fd:24:8e:d0:14:bf:7b:b4:c1:e4:ea:92:38:d0:8e:
                    05:c5:4f:bd:e4:47:d6:48:83:c1:0b:8b:5d:b1:fd:
                    58:cb:4c:d5:e8:02:cd:b0:02:8e:e2:a1:03:46:71:
                    f4:a5:a6:27:f5:ce:43:a1:81:5b:e6:a2:65:55:df:
                    1b:06:c4:a3:42:b2:b2:b4:d1:e7:4a:7c:17:dd:2e:
                    53:d2:10:43:2a:90:73:d6:93:67:f6:6e:35:ca:1c:
                    d4:9e:39:1a:31:26:4f:76:fc:d6:cf:05:6a:c8:68:
                    3e:55:d3:75:3a:2f:40:57:fe:a9:0f:9e:6c:7e:dc:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:B4:F5:68:AD:BE:31:52:25:82:F2:03:D5:F7:C0:CA:A4:90:44
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e302e302f31352d3135203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         07:f0:30:ca:22:72:ca:46:20:43:6a:ab:c0:95:1a:0c:de:56:
         a8:aa:04:05:77:72:42:4d:d2:75:e8:71:1e:7a:0c:a5:6a:f6:
         65:85:a6:9b:4c:d7:2d:e1:28:fc:a5:94:35:d0:64:1e:30:25:
         5e:ed:4e:23:d2:81:8f:97:08:90:c7:4b:00:74:6a:a2:e6:21:
         77:e4:31:bb:2c:a0:d9:7e:80:17:6a:4a:30:51:1c:da:91:7c:
         3d:ec:5d:a9:34:49:f2:39:f9:5c:58:5c:a6:f2:0c:7e:d9:ad:
         34:6f:aa:8b:85:20:cd:14:bb:c6:3a:36:4c:cd:02:35:45:de:
         9f:db:a7:43:af:69:19:34:09:c7:dc:aa:82:84:b3:c0:39:d7:
         ce:c5:0f:d3:42:d5:3e:94:29:c9:4a:5c:be:76:98:05:5e:38:
         6d:12:26:1b:8c:2e:d9:e0:7a:c3:80:0c:0d:0f:e3:fa:3d:9d:
         17:33:98:e5:05:f9:e6:59:e1:8a:89:8a:bb:4d:4c:41:86:31:
         82:0d:25:ca:bb:8f:a2:f5:60:c5:32:aa:2a:d2:64:f5:65:f4:
         f3:92:e6:36:2f:6a:70:17:59:9c:37:5a:bf:5a:c6:80:fd:d1:
         92:44:20:23:5a:83:73:7e:28:6e:e9:9f:99:63:f0:a1:ea:9c:
         51:96:fc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:01 2026 by rpki-client