Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133362e302e302f31342d3134203d3e2035363530.roa
File:                     34372e3133362e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier:          mbEcheP8KIbd0+KJDury3rf4y/rKVs4OLRqsmucbG5Y=
Subject key identifier:   E3:97:49:AA:B7:C9:E6:29:B0:E5:05:41:49:A2:AA:02:86:36:21:75
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       7B7703DA936A9C652D65452979E69B6E9DFE4668
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133362e302e302f31342d3134203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.136.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:77:03:da:93:6a:9c:65:2d:65:45:29:79:e6:9b:6e:9d:fe:46:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=E39749AAB7C9E629B0E5054149A2AA0286362175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:90:e4:7e:94:a1:cf:83:05:fd:bb:7d:55:
                    ae:6a:36:1d:00:20:f5:3f:96:da:09:16:49:b6:71:
                    76:2b:58:1a:51:b4:94:7b:d9:fb:c3:7a:eb:d4:a4:
                    b5:27:09:50:b6:5a:1d:c8:24:16:69:dc:0c:a9:7e:
                    6c:35:97:d5:c9:79:2a:5d:f4:79:b2:93:a3:c1:a4:
                    19:ea:48:2e:a4:36:a0:7f:7f:4c:9d:b7:3b:84:23:
                    eb:4f:ee:da:6f:71:f3:7a:cd:e9:ef:74:89:65:d6:
                    14:ea:d9:b3:b2:3f:fd:f0:91:df:8a:cb:04:cf:8c:
                    c2:15:29:35:8e:d5:96:bb:89:9a:1e:fb:e6:dd:f5:
                    7c:9c:0f:db:ae:81:9d:07:5e:c3:69:1d:0e:c3:d0:
                    f0:2f:0e:47:6c:d7:0d:e8:04:3f:a2:50:2d:b9:6d:
                    de:3d:ef:ea:92:b6:45:42:e6:3c:22:dc:cc:79:05:
                    f2:92:1e:91:bb:99:f5:65:31:1b:1b:d4:41:4b:f4:
                    04:1b:2a:c8:46:15:7e:15:77:b1:58:7e:0a:6e:41:
                    3c:43:c5:9b:e3:1f:1e:1e:13:a3:26:18:d7:87:4e:
                    07:c5:d6:6b:80:e2:05:74:ff:bd:d0:a2:f2:6c:a8:
                    cb:4d:2e:bd:99:be:49:20:1a:cf:11:d2:35:e5:81:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:97:49:AA:B7:C9:E6:29:B0:E5:05:41:49:A2:AA:02:86:36:21:75
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133362e302e302f31342d3134203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.136.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:27:93:cd:87:fd:7f:b3:14:a6:58:7e:0f:b0:48:32:cf:
         15:e4:a1:cc:e1:f4:28:f9:3c:96:67:f2:02:1d:b6:7b:30:0f:
         20:94:45:dc:60:d0:bf:44:3a:23:3b:f3:6b:95:f1:b6:d6:e0:
         4b:55:63:02:7e:f0:a7:8a:bc:4a:4e:07:93:3f:c6:ac:78:5a:
         45:9c:d9:5b:59:ea:a7:64:3b:6b:af:ac:aa:59:fe:69:ce:a1:
         2f:de:92:4b:df:0e:ed:dc:ad:6b:e9:4f:1e:41:d7:d8:c4:90:
         d7:9a:69:5b:69:89:eb:53:da:c0:99:36:13:e8:62:7d:ed:24:
         89:91:91:9d:9a:c1:d1:ea:b8:3c:3e:ee:84:20:b4:66:ab:6f:
         da:6d:cb:aa:d8:c2:99:bd:82:34:93:21:44:de:3b:1f:a6:3d:
         de:f8:ba:53:30:1c:0e:6f:1a:08:fa:6e:01:61:16:07:c2:93:
         4f:a6:d4:e3:29:01:db:1a:e5:fa:1d:d0:01:ae:54:21:95:a6:
         de:53:b5:5e:fc:88:b2:19:b9:c7:e6:2b:ec:42:cc:70:99:40:
         90:a8:ce:e8:20:1f:cf:5f:7c:04:4e:4a:cf:4a:9a:b1:9e:25:
         1e:f3:dd:4f:49:89:de:cc:e4:46:f5:d3:47:58:f0:5e:88:1c:
         bf:77:ee:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:34 2026 by rpki-client