Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232392e302f32342d3234203d3e2035363530.roa
File:                     34372e3138322e3232392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          dpHyByM6+Sqd9Rd5f5Y9U5msDln4MmVH6x4MFJq+8SE=
Subject key identifier:   6E:7D:FD:63:AD:0D:36:5D:3D:B0:F8:5C:CB:66:8E:D7:52:61:96:A6
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7895CA0A2DB182A6C3345A53C6E555ACA3007387
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232392e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        47.182.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:95:ca:0a:2d:b1:82:a6:c3:34:5a:53:c6:e5:55:ac:a3:00:73:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=6E7DFD63AD0D365D3DB0F85CCB668ED7526196A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:bc:38:ab:db:80:b9:6d:5b:31:24:d1:fa:
                    06:12:20:2d:95:49:b0:e3:6e:f2:4d:ef:dd:da:46:
                    1c:e4:e0:19:69:36:21:f4:25:ca:bd:f5:ee:5e:d1:
                    cf:16:85:bc:14:fa:5e:9d:db:e4:2e:8f:64:9d:d0:
                    60:bb:87:00:43:24:e5:41:04:49:1d:df:90:fc:37:
                    15:aa:f7:47:26:4a:fd:69:08:ef:94:ba:ae:04:1b:
                    d0:c2:61:cd:32:d1:07:c1:b9:f4:53:99:48:70:10:
                    98:80:35:37:f0:6e:72:3b:1d:62:68:38:88:43:b0:
                    64:a6:27:a6:d9:bb:8a:17:bc:e4:1e:6f:7b:7c:f4:
                    07:51:d7:d3:a9:7c:ff:5a:98:7e:27:f0:f7:13:13:
                    d5:1b:b5:67:d3:b2:3e:b9:d6:20:05:65:7f:3c:fa:
                    6b:c2:2b:b6:ed:5d:01:c0:3f:b1:ce:5b:bc:b1:c8:
                    ca:43:32:2c:1c:6c:de:01:03:0f:c5:72:bc:49:f7:
                    8a:53:c3:b1:e3:5c:cf:99:1b:6b:b8:3f:81:ff:49:
                    61:0d:22:da:45:4b:65:f8:0d:8b:c5:06:c1:d3:7d:
                    e9:77:68:e1:b9:6c:10:8d:ce:75:d2:29:27:82:a0:
                    7e:30:80:11:5e:ea:d6:a8:e6:e1:7e:92:f6:21:5d:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7D:FD:63:AD:0D:36:5D:3D:B0:F8:5C:CB:66:8E:D7:52:61:96:A6
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3232392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:b8:e5:73:c8:39:6a:f9:42:f5:af:22:a4:29:d2:ca:9d:6e:
         4b:bc:a3:e0:10:8b:df:1b:82:53:aa:df:16:1a:fc:81:86:c9:
         a9:4d:73:99:ac:ae:a5:8f:13:b9:c8:96:66:cc:7e:e5:f8:f2:
         62:be:69:c7:01:0d:ba:87:84:03:85:4c:9d:5f:6f:7b:d3:a3:
         a4:8b:63:34:ce:9d:9f:47:c4:2e:9f:fa:57:d9:6d:b3:8f:da:
         2e:f4:20:5d:fe:b5:e0:ff:0d:30:ea:7c:55:4f:b5:27:b2:e1:
         75:ef:38:0d:5a:a2:9d:8f:a8:b4:fd:87:f1:ee:94:30:d2:dc:
         e3:ef:ec:bf:24:62:90:e9:fe:49:a7:a2:d1:ab:0f:6f:d4:ff:
         71:7f:64:30:3f:a0:a5:55:b4:e5:45:95:fc:20:cc:97:4b:a5:
         61:05:54:36:64:04:60:73:ca:d0:29:00:12:63:13:52:51:2c:
         43:06:c5:02:ba:51:75:63:ae:7e:41:9c:de:c1:0e:19:11:2f:
         86:ba:f5:75:22:8d:73:d8:ce:4f:6e:fe:37:a7:d1:ee:49:97:
         03:f3:75:78:f2:e4:a6:63:48:ac:c0:84:c9:0e:83:27:48:30:
         ee:9f:21:4a:77:c5:a8:96:3f:e4:ab:a8:86:59:72:2f:4a:23:
         83:ef:a0:1c
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUeJXKCi2xgqbDNFpTxuVVrKMAc4cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTEwWhcNMjcwNDMwMDIyNjEw
WjAzMTEwLwYDVQQDEyg2RTdERkQ2M0FEMEQzNjVEM0RCMEY4NUNDQjY2OEVENzUy
NjE5NkE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA28OKvbgLlt
WzEk0foGEiAtlUmw427yTe/d2kYc5OAZaTYh9CXKvfXuXtHPFoW8FPpendvkLo9k
ndBgu4cAQyTlQQRJHd+Q/DcVqvdHJkr9aQjvlLquBBvQwmHNMtEHwbn0U5lIcBCY
gDU38G5yOx1iaDiIQ7Bkpiem2buKF7zkHm97fPQHUdfTqXz/Wph+J/D3ExPVG7Vn
07I+udYgBWV/PPprwiu27V0BwD+xzlu8scjKQzIsHGzeAQMPxXK8SfeKU8Ox41zP
mRtruD+B/0lhDSLaRUtl+A2LxQbB033pd2jhuWwQjc510ikngqB+MIARXurWqObh
fpL2IV2KRQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFG59/WOtDTZdPbD4XMtmjtdS
YZamMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzIzMjM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAvtuUwDQYJKoZIhvcNAQELBQAD
ggEBAKC45XPIOWr5QvWvIqQp0sqdbku8o+AQi98bglOq3xYa/IGGyalNc5msrqWP
E7nIlmbMfuX48mK+accBDbqHhAOFTJ1fb3vTo6SLYzTOnZ9HxC6f+lfZbbOP2i70
IF3+teD/DTDqfFVPtSey4XXvOA1aop2PqLT9h/HulDDS3OPv7L8kYpDp/kmnotGr
D2/U/3F/ZDA/oKVVtOVFlfwgzJdLpWEFVDZkBGBzytApABJjE1JRLEMGxQK6UXVj
rn5BnN7BDhkRL4a69XUijXPYzk9u/jen0e5JlwPzdXjy5KZjSKzAhMkOgydIMO6f
IUp3xaiWP+SrqIZZci9KI4PvoBw=
-----END CERTIFICATE-----
Generated at Wed May 13 02:24:48 2026 by rpki-client