Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3137362e302f32302d3230203d3e2035363530.roa
File:                     34372e3138322e3137362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier:          nNICydG/2EFRZhIg4NjZfq6cXTkKJ2a7rPS4NE+4VV8=
Subject key identifier:   96:95:CA:79:2B:75:4E:2E:BE:C4:F0:7E:F0:94:26:9D:46:52:04:2B
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       1D775AC697C8BE01BC8CED984746E28BBD081975
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3137362e302f32302d3230203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        47.182.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:77:5a:c6:97:c8:be:01:bc:8c:ed:98:47:46:e2:8b:bd:08:19:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=9695CA792B754E2EBEC4F07EF094269D4652042B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:92:c2:3e:b4:d2:45:09:0b:66:cb:1a:18:
                    73:71:33:64:03:1b:5c:94:df:fd:c8:3e:1f:0f:aa:
                    2d:5e:75:9c:e3:08:24:00:0d:78:1c:07:f2:08:2e:
                    89:e9:05:95:bc:57:23:5e:a8:17:ad:fc:94:05:2e:
                    eb:d9:86:e9:9a:2d:61:94:ab:dc:e6:55:51:96:87:
                    0a:f1:71:25:d0:1b:c0:1d:3a:2f:1a:51:10:86:54:
                    e7:a3:de:fe:08:fb:fa:99:54:51:3b:4c:ec:d7:74:
                    73:a2:5e:e7:c1:3e:43:9a:58:71:4e:51:d3:0c:34:
                    2b:da:7b:59:66:0c:bc:76:fc:e6:4a:3e:63:73:5e:
                    1b:bc:68:6a:b6:50:1b:6a:cf:af:0c:4c:91:a4:19:
                    2e:a6:59:fc:0e:00:79:a1:7b:8d:df:b3:ee:06:a6:
                    3e:16:7b:81:e1:75:95:2c:81:4f:c4:65:95:7b:9d:
                    04:84:14:ea:2a:90:fb:0e:4d:14:67:6f:8f:1a:03:
                    6a:c8:96:f6:0e:12:f0:96:5c:21:46:2d:33:e1:f3:
                    bc:7c:4e:c7:e7:32:d5:5a:17:5c:d7:25:d0:a6:d4:
                    8e:8d:71:42:0f:ba:dc:76:fa:06:90:fa:87:41:1f:
                    50:a5:56:88:66:35:a2:16:bf:a5:fb:62:32:ad:31:
                    49:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:CA:79:2B:75:4E:2E:BE:C4:F0:7E:F0:94:26:9D:46:52:04:2B
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3137362e302f32302d3230203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:ce:6b:0c:4c:d6:6c:a9:f6:37:52:e0:58:ab:ec:2b:8b:85:
         21:22:3d:4a:51:d5:41:fd:46:75:35:b8:87:aa:0d:c6:7b:ff:
         6e:11:f7:94:dd:84:6d:55:bc:db:33:4f:63:bf:b2:25:46:d5:
         75:4d:8c:8f:ff:45:ba:70:9c:7d:35:89:4a:2a:16:ff:da:63:
         bf:10:39:91:cd:98:b5:2b:29:24:e3:1b:47:a5:63:54:fa:f6:
         e8:69:1e:df:cc:d2:ad:8d:c9:0f:a6:12:a8:9d:9a:d2:a4:e8:
         cf:14:49:48:7d:32:ab:fe:61:2e:35:8d:fd:0b:d6:a9:da:f9:
         b6:e3:c3:39:f5:b8:5e:37:2e:4d:1c:91:df:e7:33:49:c0:68:
         50:e5:0c:87:5a:10:d6:2c:9e:8b:82:85:60:ff:6d:3b:dc:20:
         11:8b:8c:66:69:d9:70:cd:15:7b:7d:c7:ed:cd:69:e7:49:f1:
         7f:af:7d:60:ee:21:cf:74:50:3b:9d:fb:cc:7c:9e:f3:d9:a5:
         1d:4f:0d:3c:02:52:63:8e:b8:3a:df:27:66:dd:e6:ff:df:5a:
         cc:72:25:0e:95:b9:80:c0:19:40:7a:c9:4f:16:5e:ba:64:8f:
         fd:80:0f:11:a3:5b:6b:2f:f5:22:a1:aa:31:c9:0c:fb:91:d8:
         40:bc:29:b0
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUHXdaxpfIvgG8jO2YR0bii70IGXUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTExWhcNMjcwNDMwMDIyNjEx
WjAzMTEwLwYDVQQDEyg5Njk1Q0E3OTJCNzU0RTJFQkVDNEYwN0VGMDk0MjY5RDQ2
NTIwNDJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4CSwj600kUJ
C2bLGhhzcTNkAxtclN/9yD4fD6otXnWc4wgkAA14HAfyCC6J6QWVvFcjXqgXrfyU
BS7r2Ybpmi1hlKvc5lVRlocK8XEl0BvAHTovGlEQhlTno97+CPv6mVRRO0zs13Rz
ol7nwT5DmlhxTlHTDDQr2ntZZgy8dvzmSj5jc14bvGhqtlAbas+vDEyRpBkupln8
DgB5oXuN37PuBqY+FnuB4XWVLIFPxGWVe50EhBTqKpD7Dk0UZ2+PGgNqyJb2DhLw
llwhRi0z4fO8fE7H5zLVWhdc1yXQptSOjXFCD7rcdvoGkPqHQR9QpVaIZjWiFr+l
+2IyrTFJgQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJaVynkrdU4uvsTwfvCUJp1G
UgQrMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzEzNzM2MmUzMDJmMzIzMDJkMzIz
MDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQvtrAwDQYJKoZIhvcNAQELBQAD
ggEBAH/OawxM1myp9jdS4Fir7CuLhSEiPUpR1UH9RnU1uIeqDcZ7/24R95TdhG1V
vNszT2O/siVG1XVNjI//RbpwnH01iUoqFv/aY78QOZHNmLUrKSTjG0elY1T69uhp
Ht/M0q2NyQ+mEqidmtKk6M8USUh9Mqv+YS41jf0L1qna+bbjwzn1uF43Lk0ckd/n
M0nAaFDlDIdaENYsnouChWD/bTvcIBGLjGZp2XDNFXt9x+3NaedJ8X+vfWDuIc90
UDud+8x8nvPZpR1PDTwCUmOOuDrfJ2bd5v/fWsxyJQ6VuYDAGUB6yU8WXrpkj/2A
DxGjW2sv9SKhqjHJDPuR2EC8KbA=
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:41 2026 by rpki-client