Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3232342e302f32322d3232203d3e2035363530.roa
File:                     34372e3138382e3232342e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          DeTQ/ZI8N9N3U1rvCE1kVMQxJJPunQMNeBIZ+6K5AY0=
Subject key identifier:   44:19:45:0F:6B:C0:C2:38:82:F1:B2:7F:DD:8B:0E:EF:5C:90:E5:D1
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       20F3C641CEE4336076C907EF589F9B99D6C59C24
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3232342e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        47.188.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f3:c6:41:ce:e4:33:60:76:c9:07:ef:58:9f:9b:99:d6:c5:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=4419450F6BC0C23882F1B27FDD8B0EEF5C90E5D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:95:70:ac:6f:55:a8:3e:1f:18:6b:76:34:42:
                    a1:fe:06:13:c5:64:f5:5d:f7:f5:2d:4a:21:4e:71:
                    72:f5:7e:29:c1:2e:25:96:c1:56:1b:c2:96:b8:a5:
                    0c:bb:de:b9:81:6d:7c:ee:a0:ae:2b:39:c2:e5:91:
                    67:e5:32:cc:65:15:2e:9e:de:c9:05:58:49:c6:a2:
                    65:03:7c:35:20:50:01:f7:86:9b:f3:ed:2c:a5:c1:
                    f2:c9:a2:ce:97:d5:de:f8:47:fb:16:34:5d:83:af:
                    fb:f7:76:31:a7:b2:6d:88:21:f2:c7:d5:b6:f8:0b:
                    db:28:19:ba:6d:20:3a:dc:94:7f:72:56:db:8a:71:
                    61:10:6f:e1:28:bb:d3:cc:1b:2f:03:f2:a6:fe:cd:
                    60:b1:dc:01:30:02:a5:3a:a8:c8:39:37:63:56:a9:
                    98:96:19:48:b6:52:59:01:b4:5f:7f:9a:73:a6:02:
                    51:f0:46:e0:3a:a1:68:8a:30:26:8c:bb:1e:99:9e:
                    1a:32:07:b9:16:f2:b8:7d:6b:b4:12:6d:9e:8d:cf:
                    ba:49:27:12:dd:87:33:e5:45:22:f8:f8:fd:1a:04:
                    de:de:8e:e3:28:8e:cd:1d:30:f5:80:54:ea:3c:61:
                    3c:16:a1:66:18:1a:ed:bc:30:f1:27:9c:c4:2f:ff:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:19:45:0F:6B:C0:C2:38:82:F1:B2:7F:DD:8B:0E:EF:5C:90:E5:D1
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3138382e3232342e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.188.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:9f:6d:4d:ff:77:2a:0a:34:1b:76:ae:a1:e0:6b:d9:e4:
         f9:e9:3c:7a:67:fd:24:d1:9d:2a:0f:43:88:92:f5:0e:71:b7:
         e2:88:4a:34:c3:7f:0a:d3:e0:1d:f1:d8:c9:62:3a:ff:d8:e1:
         0a:8a:2f:2e:3e:5f:4e:5e:a5:80:b0:8e:40:25:e9:50:0a:12:
         65:a2:5c:aa:34:20:4a:3d:ff:ad:5d:54:7e:f7:7a:58:65:e8:
         79:e1:e6:c4:63:37:f9:d2:d9:ed:dd:9f:b0:4c:fc:76:31:4a:
         09:33:c1:39:b1:38:32:bf:45:9d:bd:3e:97:c3:cf:76:9c:68:
         a6:b9:86:d8:9b:35:9e:98:ed:cd:37:f7:65:d5:c2:36:18:9d:
         2e:79:22:5e:b1:33:79:f9:b5:70:99:5e:9a:55:b8:4d:98:4a:
         e1:dc:21:e9:db:03:a2:3c:0b:39:ab:91:fb:30:2b:2a:05:79:
         5e:e1:e7:1d:7d:3a:14:3d:26:34:f2:d3:d1:06:4b:e8:99:6a:
         08:d6:6a:68:9f:8b:e6:75:ff:ed:09:b2:05:1d:bc:eb:d8:7d:
         f4:9e:29:46:f0:03:b4:9b:f8:5c:5b:78:29:4a:51:1d:46:2d:
         e0:31:2f:db:c0:d1:8e:2a:56:67:96:e6:fd:07:78:3c:f1:36:
         4e:a3:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:39 2026 by rpki-client