Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3138382e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          aIcD57FTFMKsC809O5G9zotWYJ3/SvzqclxwZR/xwCY=
Subject key identifier:   67:27:EF:5B:8D:7B:18:2A:C1:F3:A4:9D:8C:2C:FD:E0:64:6D:77:6F
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       3A24532854AB490EA75D24A4455B9A8B0A75633E
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e302e302f31362d3136203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        47.188.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:24:53:28:54:ab:49:0e:a7:5d:24:a4:45:5b:9a:8b:0a:75:63:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=6727EF5B8D7B182AC1F3A49D8C2CFDE0646D776F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:1e:38:56:b9:cf:87:09:6a:10:f7:26:bf:
                    e6:f0:ac:f5:74:ec:1f:03:5f:51:82:c4:81:6f:ea:
                    62:24:12:ad:dc:a3:77:9f:28:f1:75:dc:b4:28:d2:
                    28:ae:51:b0:2f:94:7e:2c:a8:2a:5d:35:62:12:19:
                    73:b6:b6:fc:f7:c7:6f:56:4c:ee:b5:d9:9d:66:d9:
                    66:13:c4:30:19:0c:be:ff:67:98:a1:b5:7b:2e:05:
                    78:de:bf:ef:8a:1e:98:6d:b4:f9:21:98:d5:be:fb:
                    26:56:1b:7b:27:5e:8e:9b:9a:48:08:4a:52:65:73:
                    75:df:5a:b5:c6:6d:c7:6c:aa:8b:e5:e9:30:3d:fd:
                    38:3f:93:05:f5:0e:cd:85:0d:d6:73:e8:1b:fe:84:
                    d8:e3:98:d1:9d:4f:dd:55:63:2a:80:ad:ca:62:23:
                    c1:fb:29:5c:2a:cf:bd:b2:50:29:b3:6b:82:e5:dc:
                    c8:a2:dc:b7:40:58:4b:97:e1:8d:c4:f4:07:13:67:
                    a0:4d:70:91:03:48:bb:a6:b4:e4:ab:7e:9f:e3:0a:
                    5a:5c:14:fa:da:a7:56:7d:b9:7a:23:2c:ca:5c:05:
                    13:f5:ac:df:0e:9d:af:79:01:ef:de:f0:09:4c:36:
                    ae:0e:be:ed:db:3f:fd:b4:b5:82:76:c5:3a:86:08:
                    4b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:27:EF:5B:8D:7B:18:2A:C1:F3:A4:9D:8C:2C:FD:E0:64:6D:77:6F
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:d0:43:20:98:2d:8c:0a:bb:92:43:ad:d3:cb:07:c4:00:d4:
         75:06:12:a4:0d:19:3b:5a:5d:59:a5:bb:1f:3b:2a:ee:5b:cd:
         48:4c:4d:ea:8b:01:ef:b9:0d:b2:3d:6b:a1:1a:3c:1e:68:59:
         76:d7:33:cf:0d:8d:d4:88:8b:76:87:9c:20:5a:9f:ac:31:00:
         b3:76:25:94:76:09:ed:38:20:2e:0d:84:58:bc:6f:1f:bc:3a:
         33:eb:81:33:5a:db:f2:e3:bd:41:6b:75:77:c8:ff:df:3f:eb:
         29:29:ce:d3:54:63:0e:1f:fb:25:91:ce:04:5e:96:47:f1:1f:
         fa:fd:28:a7:1f:84:65:4d:77:b5:db:b1:17:5f:43:da:d9:ff:
         ce:11:ba:4d:43:f9:e4:73:7c:52:51:5b:4a:60:4a:03:d2:b2:
         f8:8e:30:df:e5:fa:dc:94:9d:80:96:6e:71:37:c7:4a:3f:3a:
         87:34:bb:7e:91:f4:ac:04:30:7f:6c:55:9a:72:4d:08:e2:48:
         6d:00:97:67:4f:0d:3b:89:c2:72:9f:f1:f6:0d:2b:2c:7f:23:
         06:c0:f7:0a:e0:a6:de:89:4f:1c:8a:c8:d6:98:09:be:97:cd:
         bb:77:ce:69:2c:72:57:39:03:0e:ea:ed:9a:0c:43:32:05:1f:
         a0:cb:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:09 2026 by rpki-client