Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e302e302f31372d3137203d3e2035363530.roa
File:                     34372e3139302e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          JDHPegoX2xF34oMITuFfbDwRCwL1JtmMIe0b5p84y5o=
Subject key identifier:   4C:72:67:60:6C:2C:01:71:E7:20:2A:6A:2D:8D:BB:BC:18:13:2E:ED
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       5DB26C03FF16AF92D1423EEA51E57E4407F5413D
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e302e302f31372d3137203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        47.190.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b2:6c:03:ff:16:af:92:d1:42:3e:ea:51:e5:7e:44:07:f5:41:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=4C7267606C2C0171E7202A6A2D8DBBBC18132EED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:84:93:cb:6b:97:6e:00:e5:59:34:9d:bc:
                    6e:eb:26:94:2d:73:c4:bd:73:e5:3a:93:f5:53:1d:
                    ab:66:5f:ed:0b:09:49:ed:10:5a:10:86:46:8f:82:
                    a8:77:4a:d7:14:06:78:dc:37:1a:01:6a:47:57:18:
                    c4:27:bf:09:f6:58:f5:dc:5c:13:8a:7f:ee:d6:4e:
                    23:2d:70:8b:a2:cf:a1:f8:77:b5:27:22:57:72:90:
                    46:18:96:a1:e2:40:7e:07:3c:86:27:c9:a7:4d:91:
                    85:3d:8c:73:08:17:b6:e5:94:18:fa:81:40:7a:9e:
                    06:3a:21:86:1a:b8:91:97:e7:6d:9a:b7:31:e0:e9:
                    12:0b:52:c1:fe:bb:71:06:c6:df:18:e4:18:21:2f:
                    4f:5d:31:70:6a:7a:8e:e0:8d:de:88:11:41:6e:92:
                    23:11:98:40:10:64:ae:2c:a1:d5:60:f3:9d:91:cf:
                    cd:e7:1d:c9:c0:12:ca:ea:b2:71:63:bc:fa:4f:31:
                    f5:33:e1:c5:fa:63:9b:60:54:75:90:a4:76:b7:9f:
                    ad:07:ab:fd:88:52:87:92:19:57:07:e0:ae:cc:55:
                    4c:6f:b9:2e:32:33:94:6b:72:df:d7:17:f5:5a:ef:
                    44:6d:11:cf:94:87:2d:f8:4a:d6:c2:b2:10:89:a3:
                    0e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:72:67:60:6C:2C:01:71:E7:20:2A:6A:2D:8D:BB:BC:18:13:2E:ED
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e302e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.190.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:9c:fe:ac:70:f6:ba:91:79:5c:3f:bb:40:c2:73:b8:b0:
         4e:4b:99:00:0b:a9:c9:00:1b:38:b6:21:3e:89:cd:e7:fc:e6:
         95:f9:21:47:ac:b6:19:65:9c:98:c4:ce:8d:a3:5b:11:7e:7d:
         32:d5:03:62:60:3e:0d:76:99:fb:af:af:67:b5:4c:19:5c:72:
         7e:ac:57:f0:4b:2e:a9:cc:19:23:3c:49:9d:a1:d8:0a:64:6e:
         79:1e:63:09:08:bd:e8:3b:1d:b5:4b:c0:a7:28:80:1b:62:d8:
         85:8e:a7:a2:85:58:08:29:53:0f:98:ec:7d:3a:5f:c1:63:41:
         6e:97:5b:90:e3:ef:1c:9b:07:34:81:b9:cc:dc:cb:4d:a6:85:
         d9:7e:bb:4f:09:70:66:fc:e3:3b:33:20:bb:06:c4:b5:56:ce:
         b4:f8:3f:26:0a:34:63:6b:d4:a4:ec:58:72:06:13:31:2c:98:
         35:c5:4f:1a:60:dc:44:a3:8d:ae:25:e1:45:3c:55:56:eb:8c:
         eb:80:7c:01:4c:ae:5e:45:95:d2:88:3b:15:5f:16:bf:e0:e1:
         60:6d:6a:e5:d5:93:36:5d:88:76:1a:3c:7a:05:1f:26:21:96:
         ad:2c:37:d4:27:50:26:38:31:4b:4b:ec:c3:87:38:b0:c1:da:
         3d:54:2b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:13 2026 by rpki-client