Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3135382e302f32342d3234203d3e2035363530.roa
File:                     34372e3134302e3135382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          3jf1pyvDMUDuMyQf7vjos3dSXcOBdpyRP3NI8HtGv1Q=
Subject key identifier:   41:C1:75:39:77:43:2B:9D:DC:62:70:C2:CB:AA:E7:A8:05:82:D1:0B
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3227C06B7D66507F44C6AE4CA5A4532CADB09A10
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3135382e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.140.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:27:c0:6b:7d:66:50:7f:44:c6:ae:4c:a5:a4:53:2c:ad:b0:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=41C1753977432B9DDC6270C2CBAAE7A80582D10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:71:1e:87:cd:e7:ba:1a:16:95:17:23:a9:
                    64:94:b9:98:12:e6:62:cd:41:5a:81:e0:61:01:60:
                    45:dc:d6:21:f8:43:7e:a4:4e:9a:55:0e:bb:3d:7b:
                    82:14:cc:d0:1a:ad:53:d6:f1:08:dc:44:2d:7a:ca:
                    03:ca:58:9d:33:dc:cc:8e:74:72:e4:af:10:58:a0:
                    33:18:1f:5f:a9:92:79:6c:67:c6:04:eb:2d:06:7e:
                    0a:57:d1:49:f5:6a:af:7f:3e:36:54:53:bb:5b:47:
                    33:42:9e:4d:bc:50:ab:42:73:3f:c9:f5:cb:f5:30:
                    5a:bb:09:12:ef:10:1c:e0:29:ae:1c:0c:bb:ee:00:
                    5f:67:7e:67:63:3a:9b:0b:62:e6:a0:bb:86:69:3c:
                    05:80:6e:c8:9d:56:bf:0e:c7:77:6a:bf:19:f9:43:
                    90:7d:c0:52:34:fa:a0:ae:99:32:c7:04:1f:df:44:
                    b4:24:a7:2d:b4:74:7f:4d:30:fd:d0:92:6c:f3:a2:
                    6b:7c:99:06:29:14:6c:81:ce:a9:e3:64:4e:0f:5c:
                    64:b3:28:93:26:7d:af:b7:6b:73:50:fe:d3:64:cb:
                    9e:96:0c:52:fb:92:1d:dc:e4:e4:14:f6:bb:71:51:
                    35:a5:9a:78:b5:1e:fd:1b:d7:ed:98:7e:6c:f7:67:
                    54:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C1:75:39:77:43:2B:9D:DC:62:70:C2:CB:AA:E7:A8:05:82:D1:0B
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3135382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4b:d1:63:e8:b8:cd:78:9c:75:11:4a:67:47:2d:d8:ec:86:
         c0:11:d4:58:27:bb:9a:f5:d2:78:2b:66:d7:ff:5e:8b:fe:63:
         a6:fe:a0:3e:93:6d:0a:8c:b8:d4:be:92:2f:eb:a9:17:56:96:
         d2:ff:9a:4b:eb:59:f8:34:2c:89:71:55:e7:d7:3f:3a:0a:f4:
         6b:96:bc:3f:ec:be:3e:a7:27:56:9f:f8:6d:e2:b6:48:a0:26:
         40:84:06:3a:c0:56:79:5e:d2:a7:8d:c8:89:cf:39:2e:f8:84:
         66:36:db:4b:47:94:4d:b0:b2:97:b1:8e:97:12:23:88:ff:d5:
         ae:eb:d8:37:ca:32:8d:d1:bf:e3:60:ff:c7:85:16:39:42:a4:
         3b:50:b4:57:f8:8b:a2:03:ed:5a:eb:54:05:9d:30:83:70:14:
         dc:95:18:08:42:a8:fb:93:7c:3f:9f:05:4e:10:4d:75:1a:5a:
         ab:e6:94:fe:8c:49:5d:80:b7:dc:70:2d:3a:c8:54:d6:38:a6:
         b4:5a:05:cf:d4:cc:ef:d4:c9:01:58:54:20:ac:47:ce:f2:03:
         ae:1c:50:6a:ef:ed:01:16:79:6c:8c:44:62:b4:98:5b:c2:c8:
         94:8c:1c:03:ad:6b:cf:14:f2:db:64:28:97:f7:c0:11:ed:cf:
         24:99:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:22 2026 by rpki-client