Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133362e302f32332d3233203d3e2035363530.roa
File:                     34372e3139302e3133362e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          yeZzgE5MGNX3RurH6FrGJl1vhPL1XyxrKyI5/92Bt7M=
Subject key identifier:   7F:DA:34:84:FB:E2:DF:E3:F2:50:4F:13:4B:3E:0E:D9:25:B4:E2:1E
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       4174787525080250B14CF925BAC48E1B1F6446CE
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133362e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:13 +0000
ROA not before:           Fri 01 May 2026 02:21:13 +0000
ROA not after:            Fri 30 Apr 2027 02:26:13 +0000
asID:                     5650
IP address blocks:        47.190.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:74:78:75:25:08:02:50:b1:4c:f9:25:ba:c4:8e:1b:1f:64:46:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:13 2026 GMT
            Not After : Apr 30 02:26:13 2027 GMT
        Subject: CN=7FDA3484FBE2DFE3F2504F134B3E0ED925B4E21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:5f:5d:40:ad:ae:e6:db:03:eb:e5:29:ed:
                    24:e2:47:ce:bc:26:84:c3:6b:0f:e9:4a:cb:c0:4c:
                    e0:40:db:78:a1:e8:df:a6:f0:16:8e:a4:2b:e6:98:
                    d2:91:f9:d5:04:06:64:2d:63:8d:2b:44:db:20:d6:
                    1b:ab:21:1d:61:6e:aa:f2:06:3d:05:f4:09:f7:fa:
                    dd:07:d8:0c:b6:99:31:5e:0f:44:57:9b:d5:0e:94:
                    c5:39:31:9d:7c:80:37:60:ff:a9:c3:b3:15:d4:48:
                    3f:13:d7:fc:82:36:ca:ab:cb:40:00:11:d3:78:00:
                    a9:bf:76:db:5e:e1:b0:84:20:9d:89:7d:32:f9:eb:
                    5d:33:e8:3c:28:45:00:34:a9:0c:85:0f:f1:f6:39:
                    de:1e:81:86:34:c4:c8:ce:cc:3e:2e:50:7d:fe:fe:
                    ff:e9:c5:16:60:ae:99:ca:12:ac:c3:c9:4c:26:5e:
                    33:73:74:c5:46:26:6e:40:8f:12:70:b7:d3:a5:22:
                    f5:99:21:28:ef:49:45:30:95:4b:a4:be:ff:95:aa:
                    95:ea:d3:8f:85:6d:ac:71:65:a2:83:74:cb:43:6e:
                    b6:0a:97:08:b7:7f:a6:12:0e:ca:a2:69:a8:9e:1d:
                    27:18:68:35:28:38:04:b7:e7:d0:a8:70:e3:eb:2d:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DA:34:84:FB:E2:DF:E3:F2:50:4F:13:4B:3E:0E:D9:25:B4:E2:1E
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3133362e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.190.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:22:5e:08:6c:9a:00:6a:46:77:4e:fd:f1:9f:f9:3a:8d:
         aa:c6:c3:7c:a8:74:cc:79:6e:0c:fd:96:2c:bb:4e:3c:61:35:
         63:ba:84:54:0c:87:3b:99:8a:c5:20:ed:12:9d:6e:e5:18:7f:
         b7:b8:6d:e4:dd:69:ae:6a:6f:05:28:51:48:33:1a:f0:7d:7b:
         ad:a4:0b:81:55:9a:68:1e:f2:67:94:ce:47:8f:14:69:4d:a9:
         8b:84:e8:81:2b:06:2b:cd:da:33:64:60:94:08:e4:e8:81:3e:
         44:bc:51:40:64:7c:3e:41:36:64:ac:f7:86:2b:fd:03:0f:ef:
         a7:78:93:38:41:d0:11:d9:26:a4:94:8f:94:d9:0c:2d:88:6b:
         45:c5:c7:c2:23:9e:c8:ae:11:e3:79:40:6d:14:e3:c9:f3:94:
         10:e6:fd:8a:13:9f:bd:43:c0:6c:21:d7:50:40:97:b0:9c:a0:
         f2:dc:75:e4:fe:6f:5f:b4:0f:06:76:39:38:f7:08:37:5e:5a:
         6b:66:f4:58:94:db:17:46:48:f4:5d:11:21:42:95:2b:47:66:
         3e:0a:51:84:9a:b8:04:5c:61:7c:c1:f2:61:55:d1:c8:74:83:
         f0:c2:dc:0d:5e:d9:88:cc:8c:a8:41:c2:12:7d:9b:ff:c2:21:
         52:5f:9c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:20:45 2026 by rpki-client