Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3132322e302f32332d3233203d3e2035363530.roa
File:                     34372e3138332e3132322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          knhlq31/V6X6FxPv+b7c5lA3q/kJRq3C2ScDwhkseFw=
Subject key identifier:   9F:47:71:B1:7E:9A:8A:67:05:B8:83:ED:36:EF:DA:1E:08:72:65:C5
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       78D727C1827B9DD3206623DF17844DEF39859322
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3132322e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        47.183.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d7:27:c1:82:7b:9d:d3:20:66:23:df:17:84:4d:ef:39:85:93:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=9F4771B17E9A8A6705B883ED36EFDA1E087265C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5e:e3:4b:92:3d:5d:f2:39:12:0b:96:5a:8d:
                    e0:57:1b:85:cf:99:a3:e1:c7:fb:60:95:c3:37:ae:
                    92:fe:1f:6d:08:f7:0d:48:30:0c:49:61:3e:f9:1e:
                    f7:23:f9:8e:cd:1f:be:2f:ba:64:55:e2:84:11:3b:
                    09:9d:11:8b:01:29:76:71:d2:bb:20:a1:c1:c4:48:
                    e0:20:ad:77:d4:dc:b4:9e:99:19:a8:bd:41:fd:70:
                    12:48:20:dc:3e:7a:5f:ff:f6:ba:1c:cf:93:5e:ef:
                    1f:6a:7a:df:bd:04:97:17:dc:67:e1:3d:63:df:52:
                    94:5e:57:24:30:12:44:e0:7e:54:f8:79:73:e5:79:
                    bf:d4:03:eb:d5:c3:fc:e6:77:89:04:e5:21:9f:26:
                    ac:7b:b3:58:09:9f:a4:22:01:a1:82:08:37:e8:52:
                    d2:73:7d:21:b8:c0:0e:73:1f:fb:fb:df:f8:0d:12:
                    30:a2:d6:ac:d5:37:0f:14:ed:b2:54:f0:21:35:a5:
                    b7:55:d8:3f:c3:b8:30:fa:19:84:f0:90:a4:18:e0:
                    e8:fc:52:14:48:60:20:bb:7a:83:2a:22:60:0c:59:
                    50:fc:8f:76:d6:b1:24:31:3f:34:dd:3b:f2:94:59:
                    c0:ad:98:fe:ee:ff:e9:2b:f6:fe:95:e9:46:17:9d:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:47:71:B1:7E:9A:8A:67:05:B8:83:ED:36:EF:DA:1E:08:72:65:C5
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3132322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.183.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:11:eb:7b:a7:e5:6f:a7:4a:06:7a:50:51:ef:12:72:c0:08:
         b9:af:7a:18:e7:b2:07:c6:d1:2e:1e:d0:ce:17:c0:69:06:bc:
         5f:3c:f9:44:6c:fa:54:73:6f:d9:44:3d:dd:93:54:f7:5b:62:
         12:c9:3b:a0:e1:49:3b:f2:5b:d9:ca:4b:a9:e1:fb:58:74:42:
         06:69:88:6b:f4:aa:9a:4c:04:5f:a5:98:da:9e:8a:1b:8f:1f:
         f7:12:4d:8d:24:b1:f1:22:e5:24:31:0c:e0:46:e3:4b:dd:d4:
         0b:99:c4:36:d1:93:49:c8:69:4a:7f:5a:22:f7:a1:2f:fc:af:
         33:56:93:5d:ac:94:6f:d7:dc:67:6c:09:ab:69:01:95:4e:19:
         13:13:cc:30:ed:12:7b:a5:8b:b6:d0:a6:ab:c7:cd:ce:d9:b0:
         bb:51:b5:3a:09:72:7a:62:cb:b0:94:6f:01:4f:e6:78:aa:4c:
         42:39:a0:09:ee:d4:8a:b8:04:11:3e:3b:5e:e0:06:71:bf:26:
         9d:70:13:0e:2e:f9:db:c9:c3:1f:8d:97:cd:a2:99:cc:16:9e:
         56:77:d0:c4:a0:27:80:95:e8:7a:14:40:e7:2f:72:c4:ea:af:
         98:27:3f:f1:87:ae:01:a8:b9:02:5c:28:ad:9f:27:2d:e2:b1:
         51:66:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:30 2026 by rpki-client