Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232352e302f32342d3234203d3e2035363530.roa
File:                     3137322e39352e3232352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          IUZDLC8jqByfZ+Z21qhWOSeI+dWOmLHM8Xf3ugN1N1I=
Subject key identifier:   6C:65:C1:40:35:36:37:B3:E4:80:CA:41:FC:EB:87:A5:8E:09:12:E5
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       531EBD821E6225FCE3D9D3C98D118E31BD2C9B83
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232352e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        172.95.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:1e:bd:82:1e:62:25:fc:e3:d9:d3:c9:8d:11:8e:31:bd:2c:9b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=6C65C140353637B3E480CA41FCEB87A58E0912E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:3a:a9:5e:34:1b:96:53:97:f5:a8:b1:ef:
                    b7:a3:bb:8f:ba:d3:58:37:ae:97:13:3e:7d:d9:85:
                    95:7e:8d:35:fb:48:01:e1:c2:b5:11:4e:7a:a3:b2:
                    dc:af:c3:d5:b0:bc:3d:f7:d4:d4:39:6d:8f:bf:83:
                    e4:10:4a:dd:82:72:93:1b:4c:47:9e:61:b7:79:89:
                    c8:2e:1b:f0:6d:24:de:d1:44:8a:c9:92:4d:46:fe:
                    64:67:a4:95:a3:58:f2:11:62:35:d8:e5:77:39:3b:
                    1f:0f:fc:b8:26:b2:e4:03:9d:cd:fd:c8:de:47:43:
                    1a:b9:3b:f4:81:57:ec:19:8b:ef:5a:d5:d6:ac:30:
                    2b:cb:67:a8:b9:80:cb:db:47:10:86:a6:60:80:e5:
                    60:f2:c3:0f:34:67:aa:92:15:ab:5b:21:f3:a9:05:
                    9f:b5:1b:66:db:ec:64:b7:58:c4:82:d9:31:4e:b8:
                    63:66:f6:b6:a9:87:53:3a:91:97:27:76:12:de:3d:
                    cb:58:41:ab:e5:6e:23:1a:b3:80:25:39:2f:bd:fd:
                    f5:17:11:80:ab:00:ff:e1:79:05:ea:24:b4:aa:81:
                    ce:09:5f:ab:07:a6:0e:bf:96:4d:84:3b:4e:6d:fe:
                    0f:87:f2:6a:59:ec:de:03:54:40:02:0f:47:b6:72:
                    15:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:C1:40:35:36:37:B3:E4:80:CA:41:FC:EB:87:A5:8E:09:12:E5
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:aa:4f:df:9e:d9:87:c6:1c:c2:4b:2a:ea:1d:6a:be:b5:d5:
         44:2e:46:fd:ec:23:2c:3d:e0:5d:4f:46:d8:a0:d7:aa:11:dc:
         48:7f:f5:42:cb:16:7a:3e:32:95:14:b6:36:6a:dd:2c:ef:a1:
         f1:25:4c:86:e8:de:6e:f6:1c:9e:85:b8:54:17:11:80:24:de:
         68:32:02:7e:71:b0:e1:0f:59:cd:58:7a:7c:c6:6e:db:b9:1e:
         d8:54:be:8a:68:b4:08:bd:11:23:61:fc:47:46:e1:3d:f8:9f:
         04:6e:36:68:49:85:33:71:ba:33:0f:85:0d:db:df:1f:63:97:
         4e:eb:b5:57:e8:ea:c4:a9:e8:bc:a5:b8:16:bb:c5:ec:17:16:
         72:62:a6:30:86:c5:08:8c:89:5b:29:f9:1f:d8:4a:8b:74:11:
         94:e2:d8:7e:af:15:a2:66:e6:96:a8:0e:1d:74:52:d2:5f:d1:
         5d:d3:f9:d8:a5:33:cf:63:e3:e1:82:f0:3d:be:d6:1e:99:5e:
         7e:83:a7:7e:37:ec:ee:b4:0a:e4:2c:78:d4:f0:10:79:40:a9:
         99:1c:1f:1f:5b:63:3c:22:28:71:0b:7d:87:16:d8:56:9f:cc:
         05:05:ab:bb:15:c2:40:29:df:6f:82:b5:83:91:92:ce:3e:86:
         6b:6e:2b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:53:58 2026 by rpki-client