Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131322e302f32322d3232203d3e2035363530.roa
File:                     34372e3134302e3131322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          Z3jOVRBJw8l9agMCfNFirBb3jUNzDovhuygQs/6YMog=
Subject key identifier:   89:CB:04:47:F5:A1:AF:49:FF:2A:5C:7A:D6:73:E5:D4:52:C3:54:6A
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       2C33EC25BD4D183F8170B7EB165C2AD8A1BBD6E0
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131322e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.140.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:33:ec:25:bd:4d:18:3f:81:70:b7:eb:16:5c:2a:d8:a1:bb:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=89CB0447F5A1AF49FF2A5C7AD673E5D452C3546A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:0e:b4:cd:30:46:6d:e6:e4:4d:42:c9:25:
                    8f:0d:b4:82:a8:8b:4b:f3:5b:9a:30:88:05:0a:e0:
                    a0:43:c6:39:de:4e:ae:4b:3e:b5:a3:5b:d5:83:0e:
                    8c:b7:b0:18:87:16:bc:a0:1c:a1:06:53:b9:ec:36:
                    23:28:e7:64:dc:06:90:ce:07:7a:44:14:9c:19:85:
                    12:6b:c9:82:27:b3:a3:69:82:98:a5:53:9d:ad:03:
                    1b:2c:53:64:ca:73:46:13:44:44:6d:43:99:f5:59:
                    91:5f:8f:59:59:f7:76:95:75:81:75:9f:e0:9a:f4:
                    1a:02:b4:34:05:fe:37:e1:e8:f1:c5:9e:8a:f8:e3:
                    70:33:ef:7e:a9:6d:fb:f5:65:71:67:90:1c:f2:a8:
                    7e:2b:f7:6d:3e:bf:8a:77:d7:0f:17:1b:9b:b1:3a:
                    d8:12:13:15:5d:5d:8b:9d:b9:ca:c8:02:78:1d:1c:
                    e9:d0:dc:ae:b2:73:f0:55:d1:5e:07:9c:e5:f6:84:
                    b5:42:28:23:53:c7:cc:20:39:b2:ee:57:7b:e4:5e:
                    2e:51:77:16:9f:fc:cd:2f:8c:c2:eb:82:fb:f1:c7:
                    c1:3f:d2:68:e2:2f:d8:4e:5b:59:0c:78:97:bf:0f:
                    3c:56:82:9c:7d:76:0a:29:9f:50:ca:2a:14:69:1f:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:04:47:F5:A1:AF:49:FF:2A:5C:7A:D6:73:E5:D4:52:C3:54:6A
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3131322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:00:21:da:29:a9:2f:6c:27:1b:43:cf:88:e5:8a:64:87:48:
         fd:eb:bb:ff:81:6e:3d:75:93:f5:42:8c:31:45:8a:be:20:e6:
         0e:93:e1:9f:4b:4e:31:32:3c:58:c4:bc:16:7f:bb:32:78:83:
         75:0a:94:8c:71:c3:91:47:b0:bc:f8:7f:35:90:30:6d:45:af:
         88:76:20:da:a0:4a:73:42:73:ee:1e:28:22:98:54:43:cf:00:
         b8:55:d2:50:81:dc:28:7d:05:f9:89:60:be:38:50:e5:31:21:
         a7:fd:b4:59:59:18:fb:51:03:71:02:9d:8c:85:53:ab:29:36:
         c7:63:d1:c8:f4:a1:64:2a:d6:8a:e4:07:f1:b7:dd:66:0d:0c:
         07:19:41:73:1a:a4:57:ab:91:fe:45:fe:2e:2d:f9:3c:4b:26:
         1c:a9:0d:d6:ce:31:9d:c8:9a:eb:56:4f:99:d4:0f:58:a0:58:
         68:8e:ba:18:92:57:10:29:ee:cc:d5:f5:ec:f2:54:e3:24:b2:
         99:d3:d6:f9:3a:9a:b8:70:bf:a3:64:62:6e:b6:5e:f1:10:52:
         fa:b2:8b:dd:e1:1f:7a:7c:a3:6d:c3:0c:e7:c7:97:25:23:40:
         9a:b7:21:dd:3f:87:aa:3d:b4:7c:67:1a:cc:f9:94:3a:2d:ae:
         85:11:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:29 2026 by rpki-client