Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3231362e302f32322d3232203d3e2035363530.roa
File:                     34372e3134302e3231362e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          0yW80i2j92Rq0QXptHblNjugRr4OhqWe6HPrNqaPa6s=
Subject key identifier:   24:05:6A:C9:EF:41:3D:D9:60:92:E0:0A:2D:26:4C:45:64:21:0E:90
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       7BAEBFD38A9F89E1BD41C25690BEB1EB1FAE2E48
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3231362e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.140.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ae:bf:d3:8a:9f:89:e1:bd:41:c2:56:90:be:b1:eb:1f:ae:2e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=24056AC9EF413DD96092E00A2D264C4564210E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:a8:e7:97:62:97:7b:c8:a0:88:35:bc:ab:
                    86:e3:94:e1:73:2e:8a:13:4e:90:74:6d:ad:0b:7e:
                    87:34:60:d7:6a:66:0c:81:e1:6e:a2:50:64:0c:a5:
                    ab:28:21:89:27:ef:ad:28:5c:44:0a:a3:dd:bd:af:
                    f0:03:93:76:4a:b9:87:eb:c1:53:40:8b:f8:b2:f5:
                    20:54:89:cf:7a:4a:9b:ff:81:d5:04:21:f0:ad:f5:
                    e9:96:41:89:7b:ce:77:7d:07:8e:54:1a:7e:89:2c:
                    90:e4:d9:2c:92:63:5a:ce:11:26:b4:84:0e:e3:b1:
                    7d:8f:b6:23:8f:41:a2:53:55:f9:c4:c9:d3:1d:12:
                    c7:4e:f1:cb:d5:df:a9:9b:dd:23:4f:14:5f:66:5c:
                    fc:1d:ab:f7:7c:c7:e3:66:75:54:be:89:85:da:de:
                    61:a9:6a:12:02:61:01:c9:89:fe:0b:b5:a3:e8:f7:
                    30:32:6d:ab:89:68:aa:1e:9e:3f:f6:07:90:ad:b8:
                    7f:87:93:f9:e6:0f:15:b1:4f:d3:15:72:a4:a1:0b:
                    c2:a7:0d:d1:c2:88:54:6d:ec:ef:ea:80:0f:5c:50:
                    4a:21:2a:e9:cb:d0:e7:75:68:46:11:c4:36:6e:1e:
                    b4:af:37:c6:bc:fe:f0:7f:44:72:be:ed:74:86:61:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:05:6A:C9:EF:41:3D:D9:60:92:E0:0A:2D:26:4C:45:64:21:0E:90
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3231362e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:5f:14:14:31:5a:6c:1d:89:1b:20:5c:b7:c7:11:d7:bb:1a:
         60:cd:db:68:93:a9:df:0a:02:42:cf:96:3d:9f:de:46:05:8f:
         07:63:a6:3c:45:e0:b7:a6:68:cb:9d:ec:27:f9:f6:2e:0a:fa:
         af:91:4e:94:e5:bc:f9:9f:a1:73:25:5e:12:f8:05:75:d2:4b:
         e6:6b:9b:88:68:56:ee:fe:34:6a:fb:d4:b3:b3:dc:60:38:1f:
         50:52:bc:28:7f:50:3e:f9:a2:c6:82:87:5e:a8:d4:c2:5d:d6:
         96:dc:bc:06:f4:eb:8d:1b:53:03:f8:a4:7c:1e:11:5d:6d:fb:
         4d:34:99:d9:ee:4f:5c:fb:f6:7b:ee:10:70:12:55:34:b8:43:
         fd:78:63:b3:59:4e:0c:61:03:39:7a:9f:36:61:e7:40:f1:62:
         4a:69:b4:33:76:f0:29:df:97:fd:17:b9:9b:df:9f:a3:66:25:
         a0:5e:52:a8:06:18:2b:6b:46:b5:02:d7:61:06:86:73:33:ee:
         56:10:87:b3:19:de:77:b7:7d:b7:a3:70:73:33:2a:9b:7f:63:
         94:9a:f7:de:07:89:68:d2:60:81:93:70:f6:48:3a:3f:41:53:
         21:a1:74:8a:cd:93:51:fe:14:cb:cd:1c:6d:83:2c:5f:ab:70:
         c7:62:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:35 2026 by rpki-client