Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3135362e302f32322d3232203d3e2035363530.roa
File:                     34372e3139302e3135362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          0Sw3gT6/vO5m5RtpGKMQakzT5uJovW3K08NXoJPa2Is=
Subject key identifier:   9E:F4:98:90:D9:40:BA:DB:14:13:63:A7:7B:C1:1C:D2:D5:A8:32:2F
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       4D11A4C020AC03677E722425EBC9E3DC8D77B8CB
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3135362e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        47.190.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:11:a4:c0:20:ac:03:67:7e:72:24:25:eb:c9:e3:dc:8d:77:b8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=9EF49890D940BADB141363A77BC11CD2D5A8322F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:97:66:af:7d:00:2b:e6:51:d4:9d:d4:03:
                    ae:91:c7:b6:b9:15:a5:42:bf:7a:bd:9f:3e:c8:64:
                    bb:28:5c:49:4f:f9:cd:f3:a9:63:ab:a0:ac:60:57:
                    8d:c6:a1:54:7c:a3:ad:d9:67:53:99:91:43:52:0a:
                    ab:9e:b9:0f:cd:0f:12:82:a8:0d:1c:00:e6:fd:1a:
                    5c:8d:5a:1a:ee:40:ed:fb:5b:23:8b:44:9f:21:3e:
                    df:40:e3:ca:10:bb:78:eb:d4:de:b0:a4:53:83:71:
                    c0:54:82:09:8b:9f:f5:a0:d7:72:ff:0d:82:1b:f4:
                    5c:02:3a:58:ae:f4:7b:32:7b:8e:23:25:1f:91:fe:
                    f2:dd:6e:a0:70:e1:df:8d:32:a1:23:a8:f2:cd:68:
                    7b:ec:1c:ce:35:5c:85:6d:9d:36:17:5d:35:7c:21:
                    55:bd:6c:cd:9e:7f:0c:f5:4b:58:25:6d:d8:29:ee:
                    9e:cd:26:7b:2f:da:d9:7b:86:49:d3:0f:a4:65:b3:
                    21:44:15:7f:35:42:e5:0a:5d:71:48:96:f8:21:c3:
                    25:79:9b:d8:0b:f5:fa:67:ce:57:20:de:ae:4d:10:
                    aa:1c:e3:b9:be:4e:e2:1c:2e:0a:3a:b5:31:eb:2f:
                    b3:7d:58:d7:29:b6:55:90:8a:8b:d1:bd:6d:02:1b:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F4:98:90:D9:40:BA:DB:14:13:63:A7:7B:C1:1C:D2:D5:A8:32:2F
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3135362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.190.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:9d:d1:de:ab:c0:e6:ba:94:e4:7d:a6:57:aa:56:f7:56:
         59:85:09:40:8c:cf:c2:22:08:e1:c5:19:4d:b2:8a:87:d7:9d:
         0a:62:19:6d:93:e2:89:bf:79:c6:7e:3e:b9:fc:dc:65:85:39:
         83:0e:bc:8c:a0:1a:23:13:57:aa:95:fb:01:9f:4a:ca:61:d0:
         4c:d8:fc:c1:9b:be:e4:bc:e4:4b:a4:4d:cf:1b:e0:1c:a5:f6:
         c3:31:38:56:4e:66:6b:d7:c1:6f:7a:1e:09:e6:1d:26:71:3f:
         a8:c8:98:3b:a5:70:0e:5f:f7:38:0c:04:be:1a:c1:95:51:3b:
         05:e8:54:cc:1c:47:3b:ce:e6:f6:47:21:54:d8:c6:25:8e:6f:
         56:38:9e:44:c5:f4:20:b4:0a:b3:68:c4:75:40:2d:c9:f2:e5:
         bb:bb:03:c5:6b:5a:c3:d6:63:11:1d:c5:50:12:0c:3a:8f:b4:
         d9:c3:c9:8c:c4:19:a8:b7:08:36:f6:49:61:28:7c:d4:56:fb:
         07:68:da:91:37:5f:85:b1:18:5a:fa:f8:8c:c5:bd:a5:53:6b:
         74:81:4c:37:00:10:13:dd:96:9f:9c:0a:99:06:92:08:b4:ff:
         52:69:b8:c3:93:c2:8e:1f:5a:ae:ea:b6:ac:d5:fb:22:ba:92:
         98:f7:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:13 2026 by rpki-client