Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3230352e302f32342d3234203d3e2035363530.roa
File:                     34372e3134302e3230352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          201xpKB7Dar8FaD/ZxLObU/t3VIbjbjmGEa4oCjEQrg=
Subject key identifier:   66:BD:08:A4:17:0D:F4:CE:57:26:63:EA:61:F7:03:AD:F1:8B:1B:41
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4F79E95A7CE4DA3449FCF08AF17F915E8942D0AE
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3230352e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:07 +0000
ROA not before:           Fri 01 May 2026 02:23:07 +0000
ROA not after:            Fri 30 Apr 2027 02:28:07 +0000
asID:                     5650
IP address blocks:        47.140.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:79:e9:5a:7c:e4:da:34:49:fc:f0:8a:f1:7f:91:5e:89:42:d0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:07 2026 GMT
            Not After : Apr 30 02:28:07 2027 GMT
        Subject: CN=66BD08A4170DF4CE572663EA61F703ADF18B1B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:c0:5d:bf:32:a0:05:b1:a6:c0:b6:25:57:
                    e7:8f:8a:95:9e:83:7d:07:ca:d2:9e:e8:c8:1f:a2:
                    52:68:82:41:46:9c:e8:bb:c3:78:97:63:b7:13:fa:
                    2b:4b:53:f4:ac:e2:df:a5:34:ca:5f:fe:ee:7b:bc:
                    e4:c5:cf:af:16:c4:7c:76:d0:58:a5:a2:ff:65:5f:
                    62:b9:ec:65:af:54:e5:0f:c4:e4:43:04:cf:35:bf:
                    ae:8a:da:bd:94:18:1d:1c:4e:0f:55:31:30:cf:ee:
                    1d:69:2d:00:ae:41:2c:3d:52:de:40:11:bb:c8:02:
                    af:dc:06:03:17:63:31:79:4e:83:98:b6:a4:63:eb:
                    4a:ae:db:84:ce:51:8c:d3:9b:05:96:fc:8a:09:bf:
                    8d:3a:bc:4d:64:12:33:97:9a:0d:d2:57:34:6d:0a:
                    04:8c:20:85:6b:26:48:20:5d:71:ef:81:0c:ba:40:
                    2d:02:2c:6a:34:b4:67:cf:b1:70:49:fc:ce:4e:71:
                    28:82:dd:77:39:96:ab:bf:15:ee:b5:a7:1c:36:8d:
                    b0:e4:18:1b:f0:9d:eb:85:a6:77:3d:2e:3e:61:6b:
                    da:72:ff:ec:cd:da:e5:b5:c4:72:bb:b0:87:62:62:
                    f1:b1:81:74:a3:ad:46:00:4c:24:33:2a:e7:88:e5:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BD:08:A4:17:0D:F4:CE:57:26:63:EA:61:F7:03:AD:F1:8B:1B:41
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3230352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:03:59:3a:27:9d:27:11:5f:9e:ec:64:5e:5a:aa:de:92:4e:
         e0:38:66:2b:b4:0c:72:7d:91:df:f4:12:30:c6:a5:e6:63:54:
         01:fe:8d:9e:e3:e2:26:e6:3d:f9:f9:93:ad:86:e4:71:15:e1:
         0f:d3:30:cb:15:f3:60:e6:c1:d3:b9:e0:7d:8e:c5:69:ec:bf:
         e4:75:e9:ea:82:db:83:00:c3:9f:f2:f3:f3:97:64:8c:31:a8:
         28:24:dd:35:11:7e:e9:ee:67:34:99:5c:59:c4:fe:d7:5a:13:
         5d:4e:05:d6:98:62:dc:c8:69:8c:aa:23:bc:c2:a7:4e:14:99:
         91:a2:43:89:d1:43:e2:6e:8b:02:85:2a:8a:ac:9e:b4:d4:5c:
         24:a9:09:af:08:a2:f7:bc:69:f8:8f:cf:65:0a:76:0c:85:37:
         9f:14:04:cc:01:c1:29:b1:d1:a6:41:49:f7:c1:69:55:8b:a2:
         31:86:c5:b4:c7:9a:4b:b5:74:25:bc:a8:7b:a8:ff:14:c7:33:
         92:32:ea:9c:85:bd:6f:2a:fe:5b:e0:3d:83:7a:9d:26:06:54:
         e1:8f:7e:11:fe:ee:9c:b4:04:40:7a:f4:67:2c:c0:11:d9:72:
         fc:8c:68:e6:09:ef:f8:6d:92:ef:93:fe:4a:e8:d1:89:09:dd:
         20:09:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:29 2026 by rpki-client