Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138362e3135322e302f32322d3232203d3e2035363530.roa
File:                     34372e3138362e3135322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          X/q9Cs/aVYsDvONECuowVop6/qzQ/SAwk95aKLZWBvs=
Subject key identifier:   81:41:8E:E6:CF:98:16:97:B4:4A:44:CF:F8:B6:4F:E5:E8:00:54:DB
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       683E2D83A50720583FD32D79FFF2FFC3D219609F
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138362e3135322e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        47.186.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3e:2d:83:a5:07:20:58:3f:d3:2d:79:ff:f2:ff:c3:d2:19:60:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=81418EE6CF981697B44A44CFF8B64FE5E80054DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ce:5c:e3:d4:75:d5:73:b0:a9:7a:3d:07:43:
                    73:f0:72:c5:bb:db:f5:46:fe:bb:12:8d:e5:37:31:
                    b6:e8:75:3f:39:7c:80:f4:d2:36:4b:2d:ac:ee:52:
                    09:bd:28:e2:9a:da:f4:f8:c1:ca:c2:0a:d4:82:13:
                    08:78:74:e2:b2:1a:f5:26:91:f4:e9:c0:8c:59:dc:
                    0f:8f:06:3f:c9:c6:26:30:26:82:71:32:b6:56:1c:
                    15:26:57:aa:d2:d4:71:c9:c6:37:c2:f2:48:2a:35:
                    0e:ef:a5:8a:bc:46:e6:8f:ab:52:4b:85:79:2c:d6:
                    e8:19:32:4b:fc:59:b1:18:6e:c4:aa:99:41:27:95:
                    6a:d1:35:58:99:dd:d8:14:ea:ad:b4:81:2b:ff:16:
                    46:2f:bb:bf:b4:c9:72:fe:13:67:5e:e6:74:c8:04:
                    5e:7b:7b:a9:36:bf:a6:2d:38:98:ce:e5:23:fb:c3:
                    5c:cd:83:ba:d7:b1:94:79:3b:4a:56:66:9b:d7:2e:
                    fa:60:e8:cc:f2:c6:05:1b:26:bd:03:b4:18:7f:0e:
                    9c:83:4e:0f:7a:f5:b9:7f:88:15:02:4a:39:5a:47:
                    36:e8:c3:a8:0c:71:1b:3c:39:11:05:15:ec:7e:55:
                    75:a4:17:58:bb:ec:58:c1:4b:82:d5:f1:5c:23:cb:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:41:8E:E6:CF:98:16:97:B4:4A:44:CF:F8:B6:4F:E5:E8:00:54:DB
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138362e3135322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.186.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:3c:f1:c9:1e:5e:c8:95:d1:b3:ae:27:80:2f:44:de:92:f7:
         fb:84:d1:29:73:a7:0a:86:6a:18:04:f6:c4:6d:43:ff:ec:8d:
         07:20:c5:3e:83:91:d3:62:c6:56:b3:d5:d2:1c:66:b7:d9:98:
         ab:f4:26:7d:b3:b5:77:46:7b:0b:31:6b:de:bb:24:17:1b:14:
         9d:aa:c7:29:20:df:22:f3:68:9f:f5:87:23:fb:9c:4d:bf:16:
         31:48:0a:db:65:c1:ba:3b:34:ce:41:a9:1b:7d:94:62:34:10:
         63:75:e8:cd:53:c6:8a:6b:64:95:a1:42:b8:05:c1:26:44:5f:
         93:f9:f5:2a:3f:7b:57:f9:8b:b4:10:09:9f:20:58:9a:5d:07:
         11:9e:13:8b:e1:d7:86:a5:8c:80:4b:fc:21:bf:98:fa:b7:7d:
         b3:e7:11:59:e2:47:2d:42:14:92:ee:0e:40:0e:3a:48:d6:68:
         5e:7c:72:59:8f:6d:08:5b:66:6d:da:55:f0:4f:f5:cd:63:fa:
         d0:c1:d6:85:0d:6a:e8:bb:35:23:ac:64:12:2f:95:58:09:2c:
         6b:6d:9f:62:33:88:89:27:03:cb:25:78:d4:fd:29:65:55:f5:
         ef:ac:a4:1c:c8:67:0d:ec:02:27:b9:01:a9:f3:7d:a0:fe:cd:
         21:26:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:53 2026 by rpki-client