Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138322e3235342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          cqpE3fFgwhzLJLLpW85vqwxzIeouAIHhjYFmR1LTOjs=
Subject key identifier:   65:24:E6:13:27:D4:2A:BC:E1:7C:EB:34:F4:CC:16:45:94:06:56:71
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       50A9D28A460C8EE4014E5F22D340B3E0509A9AA0
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235342e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        47.182.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a9:d2:8a:46:0c:8e:e4:01:4e:5f:22:d3:40:b3:e0:50:9a:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=6524E61327D42ABCE17CEB34F4CC164594065671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:b1:3a:17:2d:58:3a:43:3d:6d:3c:05:4c:
                    6b:cb:8d:4a:47:00:8d:06:d9:3d:de:53:df:26:98:
                    79:49:e7:8b:00:13:ee:d0:00:8c:9a:3e:87:7c:40:
                    98:d7:07:ef:ba:b5:f5:51:18:e5:63:48:8c:9b:47:
                    c0:7b:48:07:45:26:8e:11:41:7e:a3:08:44:e8:86:
                    d8:01:0f:29:24:31:ec:5d:b0:70:89:98:78:02:e9:
                    85:5f:c3:97:1d:14:cc:81:b7:a8:dd:2f:57:95:1f:
                    5c:5f:04:7c:ed:d9:b6:0f:98:67:84:0c:eb:37:36:
                    85:c9:1e:77:09:1e:88:cb:59:37:0c:c3:67:9c:34:
                    4c:ce:6c:d0:a8:b6:a7:1c:40:26:f1:c7:96:5d:c7:
                    39:f2:20:94:8f:57:2a:61:2b:5d:9d:1c:2d:77:ed:
                    c8:09:81:83:df:03:c7:e2:23:a7:c0:17:f7:1c:a0:
                    92:f7:c0:c6:04:24:c8:4d:04:6b:b0:e6:f6:82:4a:
                    b5:8e:64:50:e8:d9:e0:8c:4e:81:7f:c1:ef:02:86:
                    72:36:3b:e9:c7:25:0d:ab:6b:4d:58:16:0e:83:08:
                    74:2b:50:51:0c:61:3e:8a:17:f2:c5:ee:0a:36:8c:
                    cc:1e:39:4a:f7:39:7e:51:0e:47:3c:76:7f:9f:fe:
                    41:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:24:E6:13:27:D4:2A:BC:E1:7C:EB:34:F4:CC:16:45:94:06:56:71
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138322e3235342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:77:4d:61:2e:42:4c:b5:5c:03:4d:88:7e:42:51:23:23:43:
         16:60:db:c4:4c:2a:9c:9f:11:e5:bf:25:3b:4c:74:64:a5:f4:
         58:7c:88:81:9f:cb:0f:bf:8c:8d:02:a2:20:72:d6:76:c9:fb:
         ba:93:2d:d8:47:5b:57:56:da:ca:53:76:56:dc:d0:b2:59:af:
         fb:34:ef:f9:51:65:42:6d:5b:0b:d6:57:35:02:97:56:5f:a2:
         6a:87:e7:78:ff:07:e1:ec:12:b8:7d:70:b3:3b:2d:29:1c:e6:
         ef:52:04:29:d9:58:60:92:3d:1d:0d:eb:b5:f3:ff:33:04:c6:
         1c:7c:cd:10:15:03:a1:39:03:8b:8d:92:cf:e0:6a:6b:18:44:
         18:da:ed:a3:0f:23:cb:a5:b2:5e:df:63:69:bb:3f:79:98:55:
         dc:30:2e:47:cf:38:6a:cb:27:e6:97:9a:a2:f3:40:f9:b7:8d:
         f2:fa:f8:8a:7a:fc:67:d6:18:d7:fc:23:4f:f3:bc:eb:45:0c:
         15:42:de:ba:2a:2e:ef:70:70:1e:27:1d:6a:b7:bd:08:5f:22:
         43:68:05:87:d0:fc:6f:48:f3:f2:1b:0d:8c:df:38:02:dd:50:
         7c:35:4e:4d:47:d6:ce:99:1f:01:50:e9:45:e0:d4:78:97:2d:
         be:28:b1:9b
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUUKnSikYMjuQBTl8i00Cz4FCamqAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTEwWhcNMjcwNDMwMDIyNjEw
WjAzMTEwLwYDVQQDEyg2NTI0RTYxMzI3RDQyQUJDRTE3Q0VCMzRGNENDMTY0NTk0
MDY1NjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmxOhctWDpD
PW08BUxry41KRwCNBtk93lPfJph5SeeLABPu0ACMmj6HfECY1wfvurX1URjlY0iM
m0fAe0gHRSaOEUF+owhE6IbYAQ8pJDHsXbBwiZh4AumFX8OXHRTMgbeo3S9XlR9c
XwR87dm2D5hnhAzrNzaFyR53CR6Iy1k3DMNnnDRMzmzQqLanHEAm8ceWXcc58iCU
j1cqYStdnRwtd+3ICYGD3wPH4iOnwBf3HKCS98DGBCTITQRrsOb2gkq1jmRQ6Nng
jE6Bf8HvAoZyNjvpxyUNq2tNWBYOgwh0K1BRDGE+ihfyxe4KNozMHjlK9zl+UQ5H
PHZ/n/5B2QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGUk5hMn1Cq84XzrNPTMFkWU
BlZxMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMjJlMzIzNTM0MmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtv4wDQYJKoZIhvcNAQELBQAD
ggEBAJ93TWEuQky1XANNiH5CUSMjQxZg28RMKpyfEeW/JTtMdGSl9Fh8iIGfyw+/
jI0CoiBy1nbJ+7qTLdhHW1dW2spTdlbc0LJZr/s07/lRZUJtWwvWVzUCl1ZfomqH
53j/B+HsErh9cLM7LSkc5u9SBCnZWGCSPR0N67Xz/zMExhx8zRAVA6E5A4uNks/g
amsYRBja7aMPI8ulsl7fY2m7P3mYVdwwLkfPOGrLJ+aXmqLzQPm3jfL6+Ip6/GfW
GNf8I0/zvOtFDBVC3roqLu9wcB4nHWq3vQhfIkNoBYfQ/G9I8/IbDYzfOALdUHw1
Tk1H1s6ZHwFQ6UXg1HiXLb4osZs=
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:25 2026 by rpki-client