Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235322e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3235322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          LeJUIXMEVJqOeKbu3MimF+99YLiRMG1AR2HCAYnoTL4=
Subject key identifier:   E4:08:B4:EE:69:CB:11:DD:57:D8:06:31:2B:5A:3E:03:79:C4:10:2D
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       667409EDE232540C9FC47440D6F54CAE24B6FF64
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235322e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        47.182.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:74:09:ed:e2:32:54:0c:9f:c4:74:40:d6:f5:4c:ae:24:b6:ff:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=E408B4EE69CB11DD57D806312B5A3E0379C4102D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:96:df:c7:ca:3c:58:cf:4c:4d:f7:9d:07:
                    49:21:c2:11:01:fb:fb:cd:4f:66:ea:32:c9:20:02:
                    58:68:b0:d3:ad:18:92:30:1d:58:c3:e1:85:9c:9c:
                    be:08:b1:69:1f:4f:4b:23:39:61:21:23:5a:a0:ce:
                    33:52:a8:5d:99:02:ca:92:b0:85:10:78:19:ff:fb:
                    64:b6:fd:13:fb:8a:eb:36:84:8b:f7:b1:a4:d7:56:
                    a3:b7:c1:9c:71:19:0e:e4:06:22:04:50:47:b5:53:
                    28:60:2d:4e:a2:8c:05:0e:80:24:45:cd:65:5b:22:
                    62:eb:78:f9:c4:3d:0c:35:81:7d:a1:4c:46:69:56:
                    a2:37:4c:34:02:5b:c2:39:86:ed:5e:e9:b4:6f:7a:
                    a2:34:c9:ad:25:84:8f:31:83:71:32:b1:12:30:d2:
                    d3:17:90:ca:c1:99:50:a4:ce:30:6c:40:1e:78:b2:
                    90:cb:72:63:cb:f2:aa:24:4c:3f:05:c6:29:be:92:
                    06:d6:02:fc:d4:7e:41:ba:01:33:db:25:1d:08:1b:
                    71:59:88:bd:f7:06:e9:52:fc:bf:05:86:c8:d2:d9:
                    b2:28:95:94:d6:6b:e5:0a:ba:0d:6e:81:c1:5e:cb:
                    4e:fb:ff:96:ba:3a:e6:89:27:46:ba:47:eb:0f:fd:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:08:B4:EE:69:CB:11:DD:57:D8:06:31:2B:5A:3E:03:79:C4:10:2D
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:41:64:2e:dd:4a:66:40:6d:30:93:1b:e7:4f:95:f2:3f:0f:
         ea:6f:6d:7f:21:55:63:ee:32:20:17:b1:64:5b:bb:e1:04:83:
         13:91:b0:60:1a:da:f8:7a:55:c8:77:46:0d:72:73:b0:07:96:
         e7:7e:8d:de:2f:22:bb:04:bd:8d:2a:c4:fd:81:59:e4:76:fa:
         2a:16:05:3f:fb:d6:b1:b4:c0:8a:3b:c2:f4:f5:b0:74:33:79:
         fd:6e:95:60:30:c2:f8:df:07:4b:2e:4e:c4:ee:36:1c:7f:ad:
         ed:45:f7:67:aa:cb:87:9e:c0:ba:ed:01:2d:0e:b8:8c:7e:67:
         09:11:bc:90:f5:58:e3:24:f9:16:9e:7d:6c:36:45:b5:13:00:
         26:81:90:3c:0f:42:48:a2:b8:ad:22:c1:54:11:e9:9b:ca:91:
         96:c7:5c:e4:bb:cf:0e:58:ea:10:1f:1a:a4:1d:0d:79:86:a5:
         89:5f:6a:9a:d8:7a:b6:dd:1c:61:57:92:40:4b:df:ed:2a:8f:
         e3:51:d7:19:bc:3e:94:55:10:01:74:74:4b:d1:fb:7a:1d:0c:
         63:51:15:82:46:3e:8b:2b:10:71:82:be:df:cb:54:a3:fa:8e:
         95:89:44:06:f7:f8:6b:9f:70:b1:a4:14:09:95:5a:d4:a8:de:
         13:08:69:b5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUZnQJ7eIyVAyfxHRA1vVMriS2/2QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTEwWhcNMjcwNDMwMDIyNjEw
WjAzMTEwLwYDVQQDEyhFNDA4QjRFRTY5Q0IxMURENTdEODA2MzEyQjVBM0UwMzc5
QzQxMDJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnSW38fKPFjP
TE33nQdJIcIRAfv7zU9m6jLJIAJYaLDTrRiSMB1Yw+GFnJy+CLFpH09LIzlhISNa
oM4zUqhdmQLKkrCFEHgZ//tktv0T+4rrNoSL97Gk11ajt8GccRkO5AYiBFBHtVMo
YC1OoowFDoAkRc1lWyJi63j5xD0MNYF9oUxGaVaiN0w0AlvCOYbtXum0b3qiNMmt
JYSPMYNxMrESMNLTF5DKwZlQpM4wbEAeeLKQy3Jjy/KqJEw/BcYpvpIG1gL81H5B
ugEz2yUdCBtxWYi99wbpUvy/BYbI0tmyKJWU1mvlCroNboHBXstO+/+WujrmiSdG
ukfrD/2AowIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOQItO5pyxHdV9gGMStaPgN5
xBAtMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzIzNTMyMmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtvwwDQYJKoZIhvcNAQELBQAD
ggEBAJRBZC7dSmZAbTCTG+dPlfI/D+pvbX8hVWPuMiAXsWRbu+EEgxORsGAa2vh6
Vch3Rg1yc7AHlud+jd4vIrsEvY0qxP2BWeR2+ioWBT/71rG0wIo7wvT1sHQzef1u
lWAwwvjfB0suTsTuNhx/re1F92eqy4eewLrtAS0OuIx+ZwkRvJD1WOMk+RaefWw2
RbUTACaBkDwPQkiiuK0iwVQR6ZvKkZbHXOS7zw5Y6hAfGqQdDXmGpYlfaprYerbd
HGFXkkBL3+0qj+NR1xm8PpRVEAF0dEvR+3odDGNRFYJGPosrEHGCvt/LVKP6jpWJ
RAb3+GufcLGkFAmVWtSo3hMIabU=
-----END CERTIFICATE-----
Generated at Wed May 13 00:56:25 2026 by rpki-client