Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138342e302e302f31342d3134203d3e2035363530.roa
File:                     34372e3138342e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier:          Mwl2DnuDA4NjDWYe/r3FoFgZW2qau46PGqiptQtF/kk=
Subject key identifier:   32:FD:A9:1E:5C:0D:64:A6:10:94:33:EF:B8:AD:C7:15:63:13:91:E9
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       78FA1FD10C8DDF9ACB772BD8727EA8A57F5E2FC0
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138342e302e302f31342d3134203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        47.184.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fa:1f:d1:0c:8d:df:9a:cb:77:2b:d8:72:7e:a8:a5:7f:5e:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=32FDA91E5C0D64A6109433EFB8ADC715631391E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0e:17:f7:09:cf:df:1c:be:ea:6b:50:73:53:
                    c5:cf:00:2c:8b:28:a8:14:99:d6:b8:79:b2:72:93:
                    82:56:87:07:5d:6f:2e:e3:b9:70:43:c5:c2:e8:0d:
                    93:3c:a8:d4:b7:4f:57:4f:a3:e8:88:ea:d3:06:5e:
                    8b:66:0e:4f:61:37:72:49:66:05:1f:9d:f3:1e:b1:
                    7e:d2:85:85:4e:97:4a:bd:d3:14:04:34:7f:60:9c:
                    f9:38:25:ed:0f:75:d9:12:e6:fd:9b:b4:37:f0:d5:
                    7c:40:5b:68:35:20:3d:4d:d0:43:3a:0a:4f:30:16:
                    74:34:df:7b:e6:c2:df:a1:20:49:76:71:71:9b:ff:
                    81:09:ce:4f:78:58:89:06:d1:26:61:60:1b:bd:e5:
                    86:10:4f:b3:54:14:96:44:4d:2f:a9:13:d5:2d:a3:
                    91:d2:f5:be:f9:7a:cb:48:12:41:cc:10:0d:f2:62:
                    7b:ac:1b:40:84:d4:af:2b:5a:90:b8:31:d8:d2:9e:
                    9c:67:8c:9a:58:1f:54:6e:29:14:d2:82:5f:42:18:
                    f9:d3:9d:65:1b:c5:f5:e0:2a:23:a8:33:12:97:28:
                    8a:a0:4d:53:82:81:6f:f7:c1:ac:da:05:6c:3c:29:
                    e5:f4:5c:c1:25:da:22:2d:43:2a:bc:8a:00:37:d2:
                    21:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FD:A9:1E:5C:0D:64:A6:10:94:33:EF:B8:AD:C7:15:63:13:91:E9
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138342e302e302f31342d3134203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.184.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         95:05:eb:a1:22:ca:e3:af:4a:ac:34:6e:9a:85:b7:96:d6:07:
         fd:37:e4:cc:cc:81:6d:e2:39:e4:88:a4:d5:62:56:da:c5:69:
         4e:1f:d2:86:9e:23:76:f3:e1:aa:26:6d:2e:4d:d8:4a:d4:19:
         41:9d:9c:23:01:95:ca:c4:78:fb:3e:a4:ba:84:bb:73:dd:14:
         69:b4:44:70:40:af:2f:6e:df:25:fc:8a:4b:9c:3a:d9:3d:a4:
         c0:7f:bc:32:8b:59:c0:58:c7:d3:dd:a9:19:09:c6:cd:ec:36:
         7e:c7:fd:cc:0a:cc:d1:85:c3:da:14:96:5b:52:3f:28:7b:db:
         86:c4:8a:85:a3:f9:b0:19:d0:3c:51:d7:38:3a:1f:4b:22:23:
         8e:9f:c4:cf:9c:bb:ef:b2:b1:01:1a:67:ed:c1:9d:07:ca:88:
         62:fe:d1:74:88:62:24:4c:10:7b:3c:04:19:2f:6b:1c:ce:ff:
         78:5c:91:ad:39:20:34:81:01:94:3a:33:12:66:05:38:20:79:
         62:ab:59:91:09:f5:24:67:33:c8:74:c3:47:69:6c:83:97:cd:
         83:a5:71:41:bb:a7:f1:e9:50:dc:a1:33:e9:dc:1c:65:89:b5:
         b2:d9:e9:f0:93:ad:72:49:b9:cc:31:da:91:09:18:0f:c9:30:
         f4:c5:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:29 2026 by rpki-client