Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e302e302f31362d3136203d3e2035363530.roa
File:                     3137322e39352e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          rVZo7m+fgguaLS57OLnoloipj4zb6Q0FLM1A24QnUhA=
Subject key identifier:   60:25:A3:A8:C6:0C:32:DB:F8:0B:9E:23:AC:40:28:B4:9F:AB:E7:46
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4212A5C10F3A0082AFA0000EBAB1C191730C6978
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e302e302f31362d3136203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        172.95.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:12:a5:c1:0f:3a:00:82:af:a0:00:0e:ba:b1:c1:91:73:0c:69:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=6025A3A8C60C32DBF80B9E23AC4028B49FABE746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:b4:7a:42:40:38:30:d4:99:2c:3e:22:f2:
                    de:95:ea:00:3b:25:1d:d0:dd:e6:4a:59:dc:e0:d0:
                    7c:5f:e9:a8:79:ac:77:fb:27:13:4f:1d:cc:0a:0a:
                    c8:40:05:51:3d:73:8d:10:c0:c1:f7:b6:c0:7a:46:
                    cd:3c:91:2c:3f:58:7e:48:62:d3:bf:95:fe:40:ef:
                    28:9a:4d:18:44:fd:86:a2:90:c0:84:ef:f2:65:0b:
                    5a:c4:d4:88:37:de:41:a7:1b:20:65:b1:57:1f:d5:
                    7b:52:bf:20:28:8f:cd:1c:00:4e:35:be:ac:55:8b:
                    d2:5b:fe:62:49:61:73:28:50:8a:46:a6:d3:e2:bc:
                    3d:38:b9:34:84:16:65:dd:67:5c:1e:75:58:70:93:
                    0d:84:a3:1a:e8:51:8b:38:fe:b4:f6:2f:1c:55:bf:
                    5d:f2:a5:f7:f9:78:4f:e3:ab:3e:f0:16:53:45:cf:
                    fb:3b:99:32:1b:98:be:67:9a:f8:75:03:3a:13:ed:
                    b0:4b:13:2b:56:40:b1:cc:36:4c:6c:dc:f2:63:b2:
                    c4:1c:81:17:e6:06:de:35:32:7f:ab:96:a9:e8:38:
                    ac:9b:87:7a:b3:7b:5d:61:7c:2d:1e:54:c0:8b:7a:
                    3d:8a:04:4b:45:b8:3b:ad:34:5e:df:79:3e:9d:dd:
                    3a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:25:A3:A8:C6:0C:32:DB:F8:0B:9E:23:AC:40:28:B4:9F:AB:E7:46
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:d6:f1:4e:d5:a5:d7:70:cc:06:74:4d:70:11:37:08:bd:
         06:1e:62:95:e8:bd:26:d2:57:c0:2b:b3:b8:f4:0d:53:af:25:
         03:af:b9:e8:c9:75:b9:b8:9f:ee:da:22:b1:73:eb:6d:42:2f:
         fb:a5:97:88:36:be:95:ba:2a:a4:43:73:b8:50:30:1a:2b:c3:
         1b:e8:5d:49:db:05:6d:e2:d3:12:57:41:7d:63:58:66:11:42:
         36:ee:57:10:e8:2c:c7:ea:fe:44:df:02:a3:15:d1:db:15:a2:
         0b:a6:c9:ba:8f:1c:f3:e8:af:56:df:db:10:2e:89:f4:e0:7c:
         88:5b:e6:9d:67:7b:75:c2:1c:5a:76:07:18:9f:09:8d:89:a7:
         b7:20:53:a5:16:f4:c8:bc:9a:b5:0d:f8:3e:3c:87:a8:25:2f:
         a1:ea:a8:b0:da:d4:56:18:f8:ae:65:b3:98:91:0d:04:1d:ad:
         6e:ee:12:75:95:11:19:ce:2a:86:8c:ee:29:08:20:30:85:c5:
         c4:dd:37:60:73:37:bb:2c:1b:c6:40:f3:fd:ba:7c:e0:f4:63:
         68:10:70:74:74:e2:ca:81:ee:07:ba:0f:92:69:58:37:8a:04:
         8b:cf:15:c3:c1:77:2c:81:f1:35:d2:68:47:f8:13:5c:77:ee:
         49:1f:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:59 2026 by rpki-client