Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
File:                     34372e3133372e3230382e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier:          +osHT/9kIl8nYyoAhTsSYs4NfsCh0GNr3rC9yUSwYmI=
Subject key identifier:   31:68:3F:91:CD:E5:E6:6B:C7:F9:9C:EB:64:02:6E:BF:27:A0:D8:15
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       48367959E5423B9571C78C3B3570026C22F24D3B
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        47.137.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:36:79:59:e5:42:3b:95:71:c7:8c:3b:35:70:02:6c:22:f2:4d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=31683F91CDE5E66BC7F99CEB64026EBF27A0D815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:ea:d5:24:35:96:51:31:1e:1a:b6:93:69:
                    50:7e:ec:42:fa:f0:8f:e0:f3:70:c5:8c:4a:18:fe:
                    5f:ac:d2:43:6b:19:86:77:96:4e:b5:58:f8:12:be:
                    5a:75:46:62:b0:15:37:a1:fa:0e:1e:4a:86:f0:3b:
                    60:eb:21:1c:64:8c:ae:2a:af:c2:5d:93:e7:b3:29:
                    29:d0:f4:58:aa:28:a7:60:69:22:74:d2:45:2e:f0:
                    a4:a5:1f:92:60:d8:84:95:63:03:df:3d:25:57:5a:
                    40:a1:f5:12:75:41:11:d7:75:6a:ad:14:63:d9:45:
                    3c:ee:b5:43:30:b7:27:17:94:38:9d:70:5a:d7:f0:
                    e1:d8:28:2a:74:1d:56:65:0a:d0:63:a8:fd:47:e5:
                    c6:b7:2b:5c:8b:d9:c2:42:c3:41:3b:b9:3e:40:31:
                    b0:c0:12:68:3a:bb:84:0e:8e:ce:09:bd:14:58:87:
                    c4:9e:e1:ba:26:a0:77:88:41:5a:61:47:6f:bd:2e:
                    5b:06:fa:3a:f3:7f:46:97:8f:bb:10:8b:86:cc:c1:
                    ed:db:5f:01:88:8f:32:d9:02:0e:4d:76:c5:97:ee:
                    fc:35:ce:f7:9c:8d:cf:7d:39:28:8c:d3:71:a4:f3:
                    08:59:65:56:e3:91:8d:15:8f:4a:ff:92:f5:38:17:
                    70:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:68:3F:91:CD:E5:E6:6B:C7:F9:9C:EB:64:02:6E:BF:27:A0:D8:15
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3133372e3230382e302f32312d3231203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.137.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:60:f7:29:3f:fb:78:ef:a3:de:b6:e2:b0:29:e6:64:dc:59:
         0c:05:3e:3e:8e:60:31:b5:21:0a:c7:c0:38:79:2c:aa:b9:8a:
         e9:f7:e2:a3:05:61:cd:fd:24:6c:9a:02:fa:51:91:f6:01:71:
         6b:06:49:b6:1e:5b:90:53:d1:3a:71:02:39:f1:cb:47:f6:19:
         09:c8:25:d4:73:c4:ce:d2:24:c8:ae:14:86:3a:1d:08:34:e6:
         72:01:cb:6e:13:2c:6a:24:e8:af:0d:f7:8b:d8:d0:9d:b2:58:
         4d:23:07:f0:5d:a7:c6:b2:69:10:03:ce:f5:37:b0:ad:ff:48:
         ac:6c:59:d4:76:94:f1:d8:78:7d:d0:fa:1e:27:7e:7b:50:29:
         27:54:4c:37:57:74:90:ce:98:66:ed:ee:99:fe:88:dd:61:1e:
         6c:fa:a7:f0:40:69:64:f1:d8:d6:1a:61:af:1b:65:5d:57:23:
         9c:92:92:6a:93:a5:ea:85:48:5c:e4:97:f3:93:e9:5b:4b:3e:
         47:90:49:a4:d8:2f:bc:63:ea:89:e5:2b:8a:a8:a7:7d:06:fd:
         11:f2:17:15:6a:79:1d:22:27:5f:0f:29:dc:ba:39:fc:c2:76:
         37:fd:98:08:36:e6:9b:1c:ab:35:fa:9a:79:bd:70:1f:08:15:
         ef:4d:c0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:26 2026 by rpki-client