Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3230382e302f32312d3231203d3e2035363530.roa
File:                     34372e3138322e3230382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          QP1MLmPoV9eWi73DbHfAT6QEYUv9rSBQkPVi0/fRtvM=
Subject key identifier:   B0:BF:74:06:F9:50:E4:CE:0C:A6:C2:8C:A2:4F:EF:03:F5:31:E5:98
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       297CC1946C984F7EE7B3E38B39EAF15AE2C559D7
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3230382e302f32312d3231203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        47.182.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7c:c1:94:6c:98:4f:7e:e7:b3:e3:8b:39:ea:f1:5a:e2:c5:59:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=B0BF7406F950E4CE0CA6C28CA24FEF03F531E598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:2c:d5:1c:53:1c:6a:21:c3:c5:42:6a:e9:
                    28:10:a4:40:33:ae:4b:71:92:a5:2d:18:5c:ae:b8:
                    0c:08:82:dc:a3:7c:92:77:d1:f0:62:78:f1:30:25:
                    89:88:42:79:0e:a8:8c:a4:52:ea:e5:a6:0c:58:f6:
                    bf:23:fc:2e:bd:1a:72:1c:95:2c:8e:be:e4:4d:5c:
                    cf:62:fd:b7:5e:62:a1:a4:9b:d3:be:e7:18:0c:b2:
                    72:fe:fb:b1:82:bd:87:6a:c6:ba:66:20:d5:94:4e:
                    5c:32:6d:e6:40:d8:89:44:a4:31:3f:ac:b8:b8:23:
                    62:42:c0:08:cc:8b:28:3f:ee:f4:04:f7:82:31:ff:
                    22:6c:12:be:b8:6f:7d:42:1f:55:9a:f5:ce:10:58:
                    59:cf:49:70:26:7d:b4:0e:a9:b7:3c:3e:58:b3:ae:
                    0f:e3:2e:4e:4e:f9:54:a5:91:76:a5:86:f6:4e:82:
                    00:46:21:3c:a9:ce:7b:71:54:23:a9:d1:59:2a:5f:
                    58:82:cf:6c:11:a3:bf:a5:d9:02:05:87:be:87:8e:
                    3d:e5:79:9a:23:b7:76:33:bc:77:39:d6:c9:19:a5:
                    de:ad:ac:79:d5:98:6b:c7:52:97:b7:ca:10:a5:32:
                    cd:ca:25:75:3b:38:0e:fe:5c:cd:04:aa:18:64:76:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BF:74:06:F9:50:E4:CE:0C:A6:C2:8C:A2:4F:EF:03:F5:31:E5:98
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3230382e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:83:e7:63:26:dd:d6:2c:a2:79:94:a5:d6:17:84:73:5e:a1:
         00:d3:91:4d:ed:6a:83:44:60:cf:86:46:dd:50:15:b3:00:81:
         cd:e3:45:fe:c4:da:3e:4f:35:d9:09:01:a4:9a:c0:36:51:8c:
         e3:ff:19:1e:8a:16:84:66:7d:d8:db:27:5a:9c:9f:65:71:d0:
         bf:d1:aa:34:3b:50:c9:21:17:63:2e:67:d1:dd:10:e0:95:63:
         e6:b5:0c:1e:d0:a4:e4:6a:57:d5:b6:ac:52:35:58:70:92:4e:
         3a:5d:30:76:ad:4d:03:86:c0:ed:ed:a6:cf:3f:9f:4b:be:27:
         7c:b8:e6:2b:43:40:c7:c3:1a:83:60:27:b5:6d:d0:0b:15:dd:
         8c:3d:c3:fe:f3:33:5b:2e:72:84:d0:a4:ea:3e:01:06:82:6d:
         a4:43:29:92:cf:a3:99:fd:a4:e9:a3:b6:14:81:bb:bf:ec:90:
         73:92:3d:fe:92:af:5d:3b:2a:f3:54:43:6d:1c:31:20:17:b0:
         e0:21:49:c4:82:2a:d9:56:d2:67:67:3d:e8:b3:4c:8e:6b:da:
         99:fb:cd:ed:fe:61:cb:a9:1b:ee:0e:62:da:76:73:32:53:76:
         23:a0:dd:eb:08:74:aa:a8:8d:e6:a3:2a:b3:bf:8d:2f:de:ae:
         91:f4:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:53 2026 by rpki-client