Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e302e302f31372d3137203d3e2035363530.roa
File:                     34372e3138322e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          baS1J0jCfQCXef0gZnyHcoS74T90kR7off/LlsRoNno=
Subject key identifier:   E2:FC:AC:44:65:10:C6:26:F6:26:36:58:5A:AA:BE:92:8F:E0:62:27
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       1240670556BE887B20C709606943AB19F621FA1C
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e302e302f31372d3137203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        47.182.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:40:67:05:56:be:88:7b:20:c7:09:60:69:43:ab:19:f6:21:fa:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=E2FCAC446510C626F62636585AAABE928FE06227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:8a:d6:21:df:e4:b1:a5:a5:02:ab:ec:10:
                    f8:c6:ad:57:96:ad:d7:2a:4a:71:ce:4d:68:7e:96:
                    63:7e:d9:d6:f0:4e:98:14:68:78:32:d2:c5:12:3d:
                    4a:c9:80:8e:b8:a0:34:9a:f3:8c:53:6c:d6:b0:ca:
                    a4:c2:19:61:2b:b0:20:75:50:7f:7d:8c:ae:6f:14:
                    cd:74:59:d4:99:a8:04:09:04:3d:b8:e4:35:25:80:
                    0c:f0:6c:63:e6:53:5c:a3:48:e5:bc:7e:54:e0:d6:
                    74:a7:bc:cb:bb:b1:ef:fc:1c:05:85:53:55:40:67:
                    1f:d2:c1:14:f4:0b:d7:db:df:7b:6d:f0:6c:14:6a:
                    f1:b5:2f:f8:96:5e:7c:5f:ea:6e:10:3a:e5:d2:83:
                    40:9c:14:64:37:0d:80:bf:e4:74:78:94:e1:e0:43:
                    83:34:18:3c:fb:b5:ea:b2:90:18:8a:d0:b6:ac:f4:
                    94:34:12:0a:b2:33:46:37:2a:45:a0:13:1f:55:89:
                    ef:7d:50:7b:65:51:61:33:17:a7:bb:b7:ae:f9:e9:
                    98:a4:be:bc:87:b4:1d:55:71:e0:8d:67:c1:5c:07:
                    49:ba:67:02:01:c9:d1:27:3a:69:ec:17:57:55:b7:
                    40:19:0c:ba:96:e8:bd:25:00:33:4b:41:2a:75:0d:
                    5d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FC:AC:44:65:10:C6:26:F6:26:36:58:5A:AA:BE:92:8F:E0:62:27
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e302e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         74:5f:53:1b:9e:42:b2:b6:76:d1:e4:8c:a8:60:88:1e:94:16:
         37:3e:b1:c0:ce:bf:6d:a6:27:be:18:ec:ab:47:24:1c:0f:fd:
         7c:3b:46:1f:14:da:31:56:2e:2d:71:a8:11:4f:da:78:63:ec:
         96:67:48:91:d8:30:98:4d:57:45:5b:fb:fe:bd:b8:35:f8:02:
         51:98:1b:5a:50:5c:fa:b7:a7:fb:cc:d2:5c:81:a9:28:00:26:
         35:0b:59:9d:e0:2c:8a:aa:89:e8:a1:c7:23:7f:ca:e3:a4:c1:
         f5:a9:7d:1f:14:93:1c:0f:61:f1:c9:db:da:2c:d2:1d:ee:00:
         4b:ad:6c:a2:d2:79:af:0d:11:a0:2e:99:e8:31:74:83:5f:85:
         51:39:03:ee:82:8b:5e:50:6b:11:a6:a4:c9:d2:f3:8a:98:aa:
         f5:55:82:04:63:82:11:32:ad:c6:0d:93:1a:d5:36:5b:ad:bb:
         4a:a8:7e:90:52:5e:90:ba:aa:6f:a2:64:7d:da:53:ae:87:c6:
         1f:d3:00:37:69:4e:86:c3:4d:06:e7:3f:1f:eb:82:6f:30:f4:
         28:20:fd:a6:d8:1c:b9:da:94:6b:e0:a8:b7:eb:f6:bc:d0:ce:
         43:3f:2d:e3:a7:52:1b:28:95:3b:6f:7e:5e:29:43:af:57:b6:
         0a:f6:ba:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:59 2026 by rpki-client