Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233312e302f32342d3234203d3e2035363530.roa
File:                     3137322e39352e3233312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          SYVUfqCbwHUkhVBGTM/mxYFmFjChcgJNDmLBO4uh3xU=
Subject key identifier:   41:EA:BC:8D:9A:6D:21:08:32:09:B1:47:FD:01:45:1A:C4:CF:C4:CF
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       722F06B98DA7D211AB85170D5C2B5F3A3884378C
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233312e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        172.95.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2f:06:b9:8d:a7:d2:11:ab:85:17:0d:5c:2b:5f:3a:38:84:37:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=41EABC8D9A6D21083209B147FD01451AC4CFC4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:af:86:65:39:ce:bf:55:87:23:2e:8c:31:
                    95:a9:92:f3:e5:97:ea:bc:b8:73:3c:8e:1d:c9:21:
                    97:a0:21:dd:07:b5:f0:fa:38:5b:9f:13:29:d5:50:
                    8d:2c:ec:25:bd:a1:02:71:39:ea:3d:a4:9d:5c:e0:
                    33:73:43:cc:a3:50:77:9a:93:3a:6a:4b:1e:e0:0f:
                    e0:91:4a:d1:e2:fb:c5:a4:93:b5:8f:5d:17:ad:ac:
                    4b:09:1a:37:39:33:f4:ce:d3:c6:1e:b0:1c:55:84:
                    88:09:25:ed:b1:2e:b3:58:29:a8:24:2a:5d:d3:c4:
                    3c:78:3f:dc:35:c8:dc:40:49:83:76:b7:be:20:54:
                    42:41:ca:24:db:36:cf:87:46:d9:0f:02:c5:9b:a5:
                    7f:1b:5c:f0:bc:0c:7b:9a:46:7a:50:54:f2:f0:5a:
                    df:3f:d1:3b:14:c7:a1:3b:35:c9:ee:50:50:fb:22:
                    3c:00:36:53:77:7e:99:a7:3a:33:b5:cc:0a:b5:35:
                    f8:f3:1c:05:50:61:08:f3:7c:10:56:4d:28:d7:f5:
                    21:a6:b9:b5:f8:98:e5:3a:ab:09:a2:0c:98:27:5c:
                    b7:05:38:70:24:97:2f:8b:77:3d:d0:23:7b:72:9f:
                    ae:ea:0d:a2:92:31:f4:49:4b:4d:41:aa:f8:8e:f4:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EA:BC:8D:9A:6D:21:08:32:09:B1:47:FD:01:45:1A:C4:CF:C4:CF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3233312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.95.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:18:70:1c:2c:2b:84:b1:95:02:bf:48:9f:0e:d5:6b:dc:08:
         08:86:1b:46:9e:fe:f2:82:a0:09:f6:89:e8:cb:14:5d:c7:b7:
         e8:6c:7e:34:34:62:1f:2a:9d:b1:4a:17:26:e7:3d:c9:51:b0:
         60:9f:52:78:df:95:2d:83:b9:7b:07:e9:ff:a2:e6:e2:3c:6e:
         b8:3a:4f:1e:30:9e:1f:a8:47:61:e8:88:fa:f0:24:ff:74:81:
         44:9f:af:62:81:be:be:81:17:ae:88:7e:dd:e5:94:2c:af:9f:
         1b:b7:23:3e:11:7d:a8:c6:13:1b:2e:a9:eb:32:16:d8:17:2a:
         f5:c3:0b:ce:b4:76:c1:c0:29:21:a6:b6:9f:d5:28:27:c5:66:
         96:31:c4:ee:a5:8d:65:74:b2:1a:69:c0:5d:af:a4:a5:63:6a:
         17:a8:04:ee:73:3d:be:54:e1:34:4a:87:39:a9:cc:37:06:3a:
         6f:99:75:ce:63:89:1d:87:7e:4e:be:e0:68:25:f3:f2:f4:ad:
         52:d5:de:d3:9f:77:33:36:9d:ae:f9:5c:03:35:cf:32:9b:2f:
         a2:c9:91:a2:fa:9c:89:06:0b:49:dd:5e:51:a6:14:a8:16:be:
         b0:b8:ca:30:a8:d2:13:34:83:b5:a6:1a:b0:0c:96:1f:c8:5c:
         a0:87:da:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:49 2026 by rpki-client