Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e302e302f31352d3135203d3e2035363530.roa
File:                     34372e3138382e302e302f31352d3135203d3e2035363530.roa (raw, json)
Hash identifier:          95mimKwWxHuNDYafozcGODaFMccwXQFNznrOs6y3yd0=
Subject key identifier:   75:A3:32:F9:32:D3:30:2D:12:63:2B:1A:DD:A2:79:08:0B:E4:D7:3E
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2DD05E2DDBC840FBC1C5E76A4C36423CDA32D9C2
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e302e302f31352d3135203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        47.188.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d0:5e:2d:db:c8:40:fb:c1:c5:e7:6a:4c:36:42:3c:da:32:d9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=75A332F932D3302D12632B1ADDA279080BE4D73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:68:17:59:cf:86:72:28:4e:82:a2:66:31:
                    20:f9:34:b3:01:e7:9a:13:1c:21:54:f8:ce:c0:ad:
                    a5:32:c2:a7:1d:be:fa:f5:ea:db:7c:6f:e8:b7:51:
                    2b:f0:d0:0d:08:6b:ad:8a:38:53:01:35:c1:56:97:
                    bf:de:36:e6:b2:4b:74:ca:a1:40:64:cc:27:e3:c7:
                    20:b3:c8:7d:ab:d7:e2:49:21:1a:77:dc:b7:8f:4f:
                    ab:b6:39:dd:c3:be:03:f1:57:68:5f:cd:59:2f:e2:
                    33:c8:5d:1b:6a:62:bd:c7:56:74:c9:f3:55:dd:2e:
                    0e:e2:d3:bb:da:fe:46:80:0f:91:b3:ab:18:23:e0:
                    05:2b:bc:b1:79:34:cb:c5:03:b8:2b:bf:7b:0a:7d:
                    1a:be:14:a4:69:38:7b:76:ea:f8:6f:76:f6:00:0b:
                    03:b6:dd:2f:0d:97:c0:64:c7:5c:1d:03:8a:f4:92:
                    e0:f4:ce:6d:36:fe:3f:08:c8:c3:6f:bd:a9:69:f8:
                    40:ce:da:8c:6a:c0:88:fb:9a:03:14:44:81:d7:eb:
                    24:ff:85:cd:98:92:73:2d:5f:28:5e:fb:6a:24:5e:
                    da:99:49:f6:a0:2b:5e:df:8e:14:e1:70:7e:eb:22:
                    28:f8:2c:58:b4:eb:a5:f8:aa:c9:b0:4e:48:7f:3b:
                    84:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:32:F9:32:D3:30:2D:12:63:2B:1A:DD:A2:79:08:0B:E4:D7:3E
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e302e302f31352d3135203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.188.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         23:00:f6:4c:40:37:fe:b3:25:47:dc:7b:94:91:54:a1:ea:44:
         ec:5a:4e:29:04:9f:2c:62:69:fa:57:86:39:80:6e:db:f0:6a:
         9a:c7:a3:57:39:32:36:70:ce:9b:18:0a:d5:da:ad:d3:5d:ed:
         34:99:e0:9d:f2:30:3c:c3:d2:69:d7:13:e4:5d:fa:ce:09:b9:
         23:c4:69:e1:8c:15:b6:80:e0:b2:3a:17:fb:90:2b:a0:13:64:
         0b:55:3d:2e:1e:dd:71:b1:20:0e:ed:2c:9e:fd:21:fe:d0:26:
         69:31:5b:7e:03:7b:6f:b1:72:74:ea:58:e0:24:82:e5:57:7e:
         6d:9d:63:48:a8:57:07:e8:aa:92:72:e8:77:4e:32:8c:66:e8:
         54:1f:31:55:30:2e:c5:c8:c3:05:85:a8:cb:40:0a:08:e6:4d:
         d7:6f:f3:9b:37:bb:1b:b6:1d:60:dd:29:29:ba:cc:7b:0e:80:
         69:24:d8:e3:22:ef:e8:61:68:05:3d:69:12:fd:65:0a:7a:28:
         08:ac:e9:f6:07:f6:94:48:2d:5e:68:49:cb:2a:2d:a1:35:19:
         f8:6d:d1:2e:24:1c:6e:5e:33:bb:a4:cd:cd:79:5c:75:d2:cc:
         b9:2f:4a:46:e4:94:d1:4d:3b:9c:5c:6d:86:3d:b7:e4:2e:e8:
         d5:23:83:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:12 2026 by rpki-client