Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3131322e302f32322d3232203d3e2035363530.roa
File:                     34372e3138332e3131322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          c9TLNH6J6icrbtXBFBpgnywB9zQ9fQINE4kC9SzIdXs=
Subject key identifier:   FD:85:98:A4:9C:1E:29:57:40:52:DC:EF:3A:50:AA:A5:FE:14:4D:54
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       55CF80B9ABC47B29B65C85F36A3285D8FD0D3F79
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3131322e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        47.183.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cf:80:b9:ab:c4:7b:29:b6:5c:85:f3:6a:32:85:d8:fd:0d:3f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=FD8598A49C1E29574052DCEF3A50AAA5FE144D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:90:39:04:71:6e:6b:1d:88:b7:7e:4d:7d:
                    b9:17:67:6b:a9:38:48:49:15:f7:4d:18:03:bd:69:
                    e8:74:ba:e2:ef:6c:a4:38:c6:fb:b6:13:e2:6d:90:
                    72:74:95:9b:22:2b:6a:7d:52:8c:6a:3c:1d:63:cc:
                    ee:87:1d:cf:af:b1:bc:37:a2:5d:81:12:ec:81:4d:
                    07:0c:8e:21:ec:e8:4b:2b:df:2a:48:49:15:08:2a:
                    ab:10:87:cf:7c:04:c3:bc:c8:ad:50:9e:d5:4b:17:
                    b8:4f:16:e1:06:54:84:77:cd:31:85:a8:d6:34:e4:
                    75:e0:09:d7:b4:bd:60:84:64:2c:eb:11:d3:ca:be:
                    a5:44:3f:3c:ea:ba:07:4a:3e:0e:bc:cc:5c:25:e2:
                    9f:04:4c:ac:78:e4:ab:1b:24:e2:37:9a:3d:a2:67:
                    9f:b9:4d:e8:38:0f:c4:a1:a3:ff:48:73:4a:9d:69:
                    95:6e:4b:e2:38:c1:c2:2b:29:2b:d3:07:45:c6:15:
                    ef:d7:26:90:b1:a8:86:6c:b2:61:d2:e1:f1:e0:1b:
                    7d:8d:f2:c2:0f:90:3e:f7:45:3f:53:62:65:fa:6a:
                    bb:da:52:92:96:2f:4a:c9:06:b2:a3:33:98:b1:a0:
                    a4:f2:9e:5c:9c:6f:53:4a:01:20:c2:08:7c:3e:ee:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:98:A4:9C:1E:29:57:40:52:DC:EF:3A:50:AA:A5:FE:14:4D:54
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3131322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.183.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:04:17:e5:2e:6a:0b:35:9b:24:c6:e8:07:76:74:b2:6b:
         a5:77:7d:6e:02:69:8f:65:7e:97:ca:8d:6e:65:58:bc:79:27:
         df:e2:c3:a4:eb:97:ea:5f:85:bc:a3:fd:bf:56:f7:cb:d7:38:
         05:70:87:c2:b3:7c:6c:c6:4b:90:ab:62:d8:51:4c:73:5d:08:
         1a:c9:a3:09:08:1c:b6:bc:bb:38:2c:f5:88:1b:b4:c5:8e:f8:
         85:a7:4e:3b:f4:a3:2c:db:d9:61:79:eb:45:7d:00:f1:05:17:
         ef:42:d6:17:7d:62:fe:eb:f3:8c:f5:b0:06:dd:5f:16:29:c0:
         ad:fb:bb:96:f6:4e:65:7e:81:f7:9b:b5:89:99:f7:3e:c0:b8:
         16:29:b8:2c:7b:8e:15:dc:cb:9a:f9:e3:5e:36:bf:5d:b9:59:
         73:0c:c1:c7:db:46:2f:a5:72:38:99:8d:bd:58:5a:ca:be:b5:
         f0:57:d0:d9:b6:83:56:62:b1:4f:18:b9:72:12:05:65:08:67:
         99:29:a9:12:80:5c:b4:ee:c6:57:ef:89:66:3f:86:d8:a5:cf:
         47:b2:af:98:2b:a6:d7:5b:4d:85:f3:ca:7d:67:e3:b3:89:92:
         df:0c:9f:db:1c:4a:0a:e2:bf:7e:4b:4a:e0:4b:98:53:2f:60:
         dc:53:07:78
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUVc+AuavEeym2XIXzajKF2P0NP3kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTExWhcNMjcwNDMwMDIyNjEx
WjAzMTEwLwYDVQQDEyhGRDg1OThBNDlDMUUyOTU3NDA1MkRDRUYzQTUwQUFBNUZF
MTQ0RDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGqQOQRxbmsd
iLd+TX25F2drqThISRX3TRgDvWnodLri72ykOMb7thPibZBydJWbIitqfVKMajwd
Y8zuhx3Pr7G8N6JdgRLsgU0HDI4h7OhLK98qSEkVCCqrEIfPfATDvMitUJ7VSxe4
TxbhBlSEd80xhajWNOR14AnXtL1ghGQs6xHTyr6lRD886roHSj4OvMxcJeKfBEys
eOSrGyTiN5o9omefuU3oOA/EoaP/SHNKnWmVbkviOMHCKykr0wdFxhXv1yaQsaiG
bLJh0uHx4Bt9jfLCD5A+90U/U2Jl+mq72lKSli9KyQayozOYsaCk8p5cnG9TSgEg
wgh8Pu4GWwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFP2FmKScHilXQFLc7zpQqqX+
FE1UMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMzJlMzEzMTMyMmUzMDJmMzIzMjJkMzIz
MjIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIvt3AwDQYJKoZIhvcNAQELBQAD
ggEBACmmBBflLmoLNZskxugHdnSya6V3fW4CaY9lfpfKjW5lWLx5J9/iw6Trl+pf
hbyj/b9W98vXOAVwh8KzfGzGS5CrYthRTHNdCBrJowkIHLa8uzgs9YgbtMWO+IWn
Tjv0oyzb2WF560V9APEFF+9C1hd9Yv7r84z1sAbdXxYpwK37u5b2TmV+gfebtYmZ
9z7AuBYpuCx7jhXcy5r54142v125WXMMwcfbRi+lcjiZjb1YWsq+tfBX0Nm2g1Zi
sU8YuXISBWUIZ5kpqRKAXLTuxlfviWY/htilz0eyr5grptdbTYXzyn1n47OJkt8M
n9scSgriv35LSuBLmFMvYNxTB3g=
-----END CERTIFICATE-----
Generated at Wed May 13 00:54:32 2026 by rpki-client