Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3139322e302f31382d3138203d3e2035363530.roa
File:                     34372e3138332e3139322e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          P8l/sfYY4uJFK51z+rmbTedJ/8jsd3MpNVPDHBUOMUI=
Subject key identifier:   26:CF:5A:8B:5C:8C:E1:06:F9:47:0E:A3:74:69:EE:10:6A:CF:35:F2
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7C3FD211A3E71D53A965B0C10B7231B07A97E0BF
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3139322e302f31382d3138203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        47.183.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:3f:d2:11:a3:e7:1d:53:a9:65:b0:c1:0b:72:31:b0:7a:97:e0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=26CF5A8B5C8CE106F9470EA37469EE106ACF35F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:3b:3a:9a:9c:2c:7c:2f:1c:e4:48:e4:2a:
                    00:9b:10:f2:2a:8b:1f:d5:28:41:ec:78:3a:ca:cb:
                    f3:58:e1:eb:b9:51:2b:70:f7:07:92:1a:6e:4c:d3:
                    3a:ba:d0:15:d7:6a:75:6d:f3:ab:6e:9a:38:88:01:
                    75:80:da:cb:a1:e1:c9:fe:c9:08:9e:0c:ad:d2:07:
                    7d:85:c4:bf:fc:d8:e3:02:2f:33:d9:b6:75:a3:2f:
                    b6:66:9b:bd:ba:15:21:6b:cc:b9:fb:00:59:94:f9:
                    da:56:c7:15:a7:1a:d9:9d:dc:fb:cc:a3:e1:9d:9c:
                    13:1c:93:eb:fd:3d:93:1b:ec:9e:7f:7a:68:73:47:
                    e3:96:a8:2d:0d:da:47:30:d7:5c:11:63:da:67:e7:
                    18:52:da:a0:19:1b:de:63:9a:ba:f3:2f:7c:48:5d:
                    cd:66:65:5c:5b:dc:0b:c2:83:29:6f:0c:b0:07:5c:
                    43:76:45:b5:6f:12:0d:a7:4f:31:66:43:93:f5:e3:
                    15:dd:77:5b:ee:73:7f:1b:9b:10:d6:be:6a:3d:3d:
                    40:6b:00:ff:38:83:25:ac:cf:6b:10:71:15:54:52:
                    9e:45:b8:8c:02:eb:35:df:b7:81:37:de:7f:ce:d3:
                    53:9c:ec:77:fd:0e:86:5d:8f:98:33:c2:aa:8f:78:
                    64:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CF:5A:8B:5C:8C:E1:06:F9:47:0E:A3:74:69:EE:10:6A:CF:35:F2
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138332e3139322e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.183.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:9d:0c:c5:82:3e:93:7e:36:45:38:60:44:ae:12:de:39:
         55:4c:ae:cc:c2:e5:cb:8a:0a:9a:94:bf:61:64:6e:e5:09:c0:
         66:30:aa:5a:64:da:45:f4:79:7b:b6:c5:fc:47:71:21:59:b1:
         a5:2d:30:6f:17:d7:ea:ad:1b:f8:44:0d:e2:5f:a6:63:3a:03:
         6b:29:3e:97:18:cd:82:fd:f1:8d:2f:82:9b:3b:9a:05:ea:b3:
         b7:c8:41:eb:83:3f:5a:78:b2:33:88:b9:56:93:06:d9:ce:63:
         8d:27:a0:a4:50:4f:da:c3:56:bb:13:17:05:6b:ec:ce:4e:b2:
         36:c4:74:61:23:8c:01:6c:0c:46:ae:23:4a:28:31:cd:7a:aa:
         6a:f9:d3:16:27:01:56:61:d6:27:32:bd:63:24:bb:29:72:aa:
         84:7d:e8:08:a9:39:51:95:af:28:59:d3:86:11:06:07:91:8a:
         5c:c9:ec:a2:e5:b7:d7:31:4a:cd:9f:3c:0a:6d:3d:8b:15:cc:
         cf:cd:8a:82:af:c7:8d:cc:c2:3b:49:f6:ce:d2:5d:ec:f1:5a:
         e2:32:a3:f7:39:8f:12:0a:97:e6:80:d1:84:e1:84:eb:95:e8:
         ad:0d:af:35:b3:f3:9b:37:15:82:ad:a1:92:0e:c2:1f:1b:7d:
         f4:d7:98:de
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfD/SEaPnHVOpZbDBC3IxsHqX4L8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTEyWhcNMjcwNDMwMDIyNjEy
WjAzMTEwLwYDVQQDEygyNkNGNUE4QjVDOENFMTA2Rjk0NzBFQTM3NDY5RUUxMDZB
Q0YzNUYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJE7OpqcLHwv
HORI5CoAmxDyKosf1ShB7Hg6ysvzWOHruVErcPcHkhpuTNM6utAV12p1bfOrbpo4
iAF1gNrLoeHJ/skIngyt0gd9hcS//NjjAi8z2bZ1oy+2Zpu9uhUha8y5+wBZlPna
VscVpxrZndz7zKPhnZwTHJPr/T2TG+yef3poc0fjlqgtDdpHMNdcEWPaZ+cYUtqg
GRveY5q68y98SF3NZmVcW9wLwoMpbwywB1xDdkW1bxINp08xZkOT9eMV3Xdb7nN/
G5sQ1r5qPT1AawD/OIMlrM9rEHEVVFKeRbiMAus137eBN95/ztNTnOx3/Q6GXY+Y
M8Kqj3hkewIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCbPWotcjOEG+UcOo3Rp7hBq
zzXyMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzM0MzcyZTMxMzgzMzJlMzEzOTMyMmUzMDJmMzEzODJkMzEz
ODIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYvt8AwDQYJKoZIhvcNAQELBQAD
ggEBADNOnQzFgj6TfjZFOGBErhLeOVVMrszC5cuKCpqUv2FkbuUJwGYwqlpk2kX0
eXu2xfxHcSFZsaUtMG8X1+qtG/hEDeJfpmM6A2spPpcYzYL98Y0vgps7mgXqs7fI
QeuDP1p4sjOIuVaTBtnOY40noKRQT9rDVrsTFwVr7M5OsjbEdGEjjAFsDEauI0oo
Mc16qmr50xYnAVZh1icyvWMkuylyqoR96AipOVGVryhZ04YRBgeRilzJ7KLlt9cx
Ss2fPAptPYsVzM/NioKvx43MwjtJ9s7SXezxWuIyo/c5jxIKl+aA0YThhOuV6K0N
rzWz85s3FYKtoZIOwh8bffTXmN4=
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:02 2026 by rpki-client