Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232392e302f32342d3234203d3e2035363530.roa
File:                     3137322e39352e3232392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          DFIW409qkkTi3O1nrgmHQhIWhZ4fxRhvf3ioF+tzXCs=
Subject key identifier:   A9:F0:7A:23:EC:87:54:0E:2E:1C:C9:79:94:F8:06:DD:52:75:95:0E
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       626FAA54A98C9970AB25F5AB6E8FF72D617ED6CE
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232392e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        172.95.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:aa:54:a9:8c:99:70:ab:25:f5:ab:6e:8f:f7:2d:61:7e:d6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=A9F07A23EC87540E2E1CC97994F806DD5275950E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:44:93:7b:9c:62:8b:af:0e:00:4d:13:e4:45:
                    9d:4e:f0:2c:e7:82:df:96:0c:57:36:74:f0:3d:ce:
                    6c:a8:b3:c0:c1:7f:ba:bb:17:33:48:8e:a2:ee:bb:
                    25:3f:02:d3:ce:fd:90:38:96:a3:c6:cb:a8:a1:6f:
                    cf:77:26:64:90:30:bf:39:3b:0d:52:f0:74:5c:16:
                    28:1e:c9:b3:6b:4e:72:3a:13:49:28:c7:c5:d9:cf:
                    4d:15:b9:54:b4:85:31:97:7b:bc:eb:0e:dc:c6:42:
                    1a:54:7a:4c:90:e7:fe:eb:9e:d9:78:15:17:01:34:
                    5f:3b:86:f3:fe:90:55:9f:e6:5a:f6:43:a9:c6:d4:
                    6c:b6:60:98:06:93:9d:44:18:40:42:9a:5c:76:6b:
                    33:78:33:fa:83:3e:53:db:f5:c9:d2:b6:e8:fc:58:
                    87:68:d3:a5:39:dd:26:c0:ca:ec:75:2a:f4:ab:09:
                    cd:14:cf:9b:30:88:c2:f6:ff:7c:3f:ac:19:bb:fd:
                    6c:7b:9a:ae:b8:3f:c1:4d:8b:0f:72:02:56:d2:13:
                    8f:2c:05:c1:b4:bf:e7:fb:8f:e8:90:51:40:15:3e:
                    e0:f8:dd:22:95:8d:10:80:9b:64:1d:7f:52:29:b0:
                    d4:ef:d3:2c:24:15:68:4e:af:f8:78:4b:4d:4a:48:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F0:7A:23:EC:87:54:0E:2E:1C:C9:79:94:F8:06:DD:52:75:95:0E
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3232392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:4b:82:0a:35:56:13:aa:08:de:89:b7:b6:d0:ad:13:1d:3f:
         fb:4a:19:9f:0f:cb:e7:06:e2:4a:c0:fb:6a:55:0a:08:47:51:
         f9:a6:c9:39:00:d5:29:1d:d9:0f:31:87:21:10:39:4e:48:fe:
         01:3b:0a:48:a9:bf:87:38:b0:be:9e:a5:f4:05:27:f9:f6:14:
         85:52:67:72:4e:5f:fa:67:26:b6:35:13:5d:27:f2:ae:30:c2:
         76:49:62:2f:c7:58:b4:d1:99:65:cb:35:47:1d:c0:2e:41:14:
         a3:dd:24:65:a4:06:cf:b5:44:a7:3f:f0:23:16:74:ba:95:41:
         70:63:3b:79:96:73:ac:3a:69:24:38:05:29:05:63:d6:ac:92:
         29:9b:61:bf:1a:59:cf:5d:20:5f:20:30:a3:34:77:25:51:3e:
         34:fe:b1:59:53:3f:4a:28:7b:17:19:b2:ca:5a:ab:76:47:e5:
         14:f0:8b:bf:63:23:63:94:5a:3e:0a:d9:6c:8a:a7:47:a2:57:
         3b:57:35:c5:30:d2:81:ba:e4:7a:32:47:ac:0a:0d:f4:67:51:
         e1:06:a4:4e:03:51:50:ef:88:fc:a2:b2:91:0f:e0:cf:32:1a:
         12:b8:65:92:e6:cf:22:7f:e1:82:db:c0:c6:22:58:fc:8b:51:
         6b:13:e0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:45:20 2026 by rpki-client