Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
File:                     3137322e3130322e39362e302f32302d3230203d3e2035363530.roa (raw, json)
Hash identifier:          ZSnL5UmJ6GUY6WMO+R/WDOPLVQVRTH+SEx1NdTAjxww=
Subject key identifier:   38:B9:9E:D0:72:6E:C5:E8:58:87:70:C4:4C:EB:68:BD:9C:C8:D5:CB
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       0DD5AF1359F6B1AEF6CD8FCFEA89DCD908BD5333
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        172.102.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:d5:af:13:59:f6:b1:ae:f6:cd:8f:cf:ea:89:dc:d9:08:bd:53:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=38B99ED0726EC5E8588770C44CEB68BD9CC8D5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e6:6e:7f:cc:1b:a4:40:f6:41:6c:54:df:82:
                    ed:65:dd:16:79:0f:93:04:bc:79:44:be:a8:e7:e4:
                    5e:80:59:5e:02:3c:e0:8a:1c:eb:ce:f6:f9:40:32:
                    77:cb:25:71:be:8c:39:a2:23:de:5a:0b:a9:7c:7b:
                    75:db:9a:04:1f:22:5b:4c:40:60:86:c7:52:71:17:
                    37:25:79:8f:2a:14:b6:51:42:a3:82:6c:64:2a:62:
                    43:dd:1f:4e:37:90:ad:79:15:84:b1:d1:e0:78:25:
                    f8:06:16:db:5e:8b:2c:cb:11:57:d1:aa:cf:27:28:
                    6d:e3:bc:06:b8:d8:38:30:24:00:9b:fc:7d:b0:0b:
                    3f:a9:e8:d2:7a:ff:b2:91:be:c8:91:b3:91:38:f1:
                    6e:ff:85:20:0a:e8:35:be:eb:30:0a:10:0c:94:93:
                    39:95:9a:d7:0f:31:94:2e:d7:db:86:e4:0f:82:fe:
                    a3:d8:64:ab:b1:43:ad:28:de:3f:d8:cb:8b:7b:ae:
                    f3:15:9d:47:73:20:ba:66:5c:66:65:08:f0:02:96:
                    e8:38:cb:bd:11:46:b5:ba:5d:ee:ec:36:13:47:75:
                    50:11:4c:73:3c:5b:33:d6:d1:0a:94:91:12:f4:be:
                    9d:88:2c:59:fa:0e:9d:e8:ac:57:03:3d:52:f7:2a:
                    95:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B9:9E:D0:72:6E:C5:E8:58:87:70:C4:4C:EB:68:BD:9C:C8:D5:CB
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e3130322e39362e302f32302d3230203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4a:9c:10:89:98:27:89:b3:bc:43:c2:d0:f6:65:80:24:e4:3a:
         a0:18:81:9f:f7:76:9b:da:f8:02:f3:c0:d9:0f:46:a4:cf:07:
         e9:e2:76:f2:03:c0:fa:c9:ad:9c:c7:53:ea:43:8b:83:02:02:
         d8:3e:4d:b3:02:f0:5a:3d:cb:1b:72:d7:b4:52:4b:9d:ee:fb:
         de:4e:9d:96:e3:9d:c1:df:76:69:a9:ac:85:85:82:dc:f6:0e:
         71:dd:a3:76:20:97:82:b9:18:18:23:9f:05:d7:68:48:7f:07:
         23:23:b2:b5:f4:b9:e4:61:a9:a1:66:19:59:fe:8b:f0:a0:24:
         a3:7f:13:3d:2b:d2:d1:fd:e6:8d:cc:77:d3:71:b1:f1:bc:61:
         b6:da:a7:3b:6d:82:b9:6d:a1:fd:e2:09:bb:7b:f1:a2:c0:51:
         70:e5:e3:72:b9:58:d6:bc:40:8b:ab:41:3c:8e:5d:64:f9:46:
         7c:e4:d8:5c:ae:45:1b:e7:44:6f:79:51:c1:14:73:0c:49:cf:
         49:f2:eb:44:4a:cc:83:67:37:80:8e:ec:e0:4c:c1:b2:0a:85:
         a2:f2:84:3d:1b:72:c9:a9:5e:18:31:9b:87:b2:3e:b4:a6:82:
         06:77:c4:dc:b2:08:e8:d8:8d:53:36:56:d7:71:1a:f4:2c:0c:
         44:d4:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:51 2026 by rpki-client