Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3139322e302f32332d3233203d3e2035363530.roa
File:                     34372e3139302e3139322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          Cx6RIRocVMLWVEvmGX3VQBlm8UMg950nMHHQhsApkN0=
Subject key identifier:   EE:87:2E:B0:4E:6B:E4:31:A9:E0:76:19:50:03:F5:1D:D4:28:07:D4
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       351DE8B3EAFFDE349FF0547AEAD2635BCA335D87
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3139322e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:13 +0000
ROA not before:           Fri 01 May 2026 02:21:13 +0000
ROA not after:            Fri 30 Apr 2027 02:26:13 +0000
asID:                     5650
IP address blocks:        47.190.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:1d:e8:b3:ea:ff:de:34:9f:f0:54:7a:ea:d2:63:5b:ca:33:5d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:13 2026 GMT
            Not After : Apr 30 02:26:13 2027 GMT
        Subject: CN=EE872EB04E6BE431A9E076195003F51DD42807D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:01:72:4c:66:1e:cf:d0:a1:78:73:3a:a9:
                    eb:6e:60:78:0c:a6:79:98:ee:69:b3:5a:6d:90:d3:
                    47:ee:11:31:63:9b:c7:d9:88:dd:cc:50:03:3c:d2:
                    b5:51:ae:f3:98:10:a0:94:df:37:78:c7:96:48:3d:
                    be:68:b7:17:80:80:01:5e:71:35:88:16:90:c9:05:
                    92:8a:9d:75:48:00:b7:d7:e7:4b:7c:ff:1d:26:de:
                    cb:a3:c5:dc:0a:f0:b8:b5:bb:78:56:8a:9c:56:3a:
                    bc:4f:36:19:fd:20:7b:d4:82:c0:d2:43:0f:3f:a5:
                    2e:1e:47:65:b0:9b:44:ac:bd:95:09:41:94:d5:f8:
                    e8:b8:04:2c:bd:b9:78:e7:ba:54:a3:35:68:63:a6:
                    aa:b8:40:c1:7a:a2:e7:20:18:60:85:4c:d7:82:6c:
                    62:ac:8d:e1:f4:38:17:8b:da:80:79:04:77:0a:c7:
                    f8:10:ad:7c:64:ed:5a:e6:aa:3b:49:c3:fb:33:65:
                    a9:8c:ed:3d:9a:38:38:be:e3:6d:66:08:07:68:3a:
                    47:92:ab:51:7c:a8:b1:9c:ca:36:d2:70:10:2f:31:
                    dd:28:7a:5e:82:c9:e5:44:35:34:33:32:a7:8c:1d:
                    75:ad:09:70:a7:dc:f9:fd:22:8d:8d:c5:53:fc:b5:
                    2d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:87:2E:B0:4E:6B:E4:31:A9:E0:76:19:50:03:F5:1D:D4:28:07:D4
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/34372e3139302e3139322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.190.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:d5:7f:5b:80:99:c3:c5:6c:26:36:07:64:00:7f:78:e2:1a:
         f3:a7:f9:fe:6e:1b:01:0c:7f:d2:21:3c:3f:a4:82:23:ab:31:
         1a:e1:84:a3:21:ed:43:e8:66:df:24:6f:7a:b7:51:f4:5c:24:
         a0:3e:20:5b:c9:c3:91:3b:d2:04:bf:9b:fc:18:67:ef:a8:68:
         4f:dc:b3:71:7d:bf:f5:13:ca:d6:56:c9:29:20:63:26:f1:bf:
         6f:d3:9b:af:80:7a:7c:5e:58:90:11:04:bb:8d:6a:98:10:57:
         3a:28:c6:3a:f6:ec:64:a3:ac:11:f7:2a:42:bf:23:7b:56:06:
         e7:22:39:d7:05:09:ac:00:fc:f8:38:1a:3a:c7:40:62:56:fd:
         49:c0:24:9e:f8:40:6c:56:f5:c0:2d:2e:b0:9e:31:71:8f:24:
         5b:87:f5:10:df:14:9f:a6:ee:3d:ea:4d:e7:73:b3:64:6b:94:
         91:34:57:e9:d9:16:cd:96:99:57:4a:cc:03:5b:ec:f8:4d:25:
         03:2f:97:0f:b9:1b:cf:1e:70:88:7a:73:a8:d3:6c:fa:49:d1:
         f0:c2:2c:38:37:42:be:ae:77:56:10:b3:3c:d0:82:6e:ea:3f:
         75:47:5d:fe:a4:38:b8:4e:e2:7e:47:99:a4:09:25:20:f3:97:
         48:8a:40:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:58 2026 by rpki-client