Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3234342e302f32332d3233203d3e2035363530.roa
File:                     34372e3134302e3234342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          5/fKGYlOeKm4zypjviU6NIURqsB/m/bwWJli2ORyHLA=
Subject key identifier:   D8:62:98:3F:93:7B:34:B4:56:1C:57:7C:44:43:CA:A3:37:F7:BE:22
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       7C24139966BD270ADF2C238987FBB80A5997C57B
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3234342e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.140.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:24:13:99:66:bd:27:0a:df:2c:23:89:87:fb:b8:0a:59:97:c5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=D862983F937B34B4561C577C4443CAA337F7BE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9b:b8:33:92:52:43:88:ed:c9:2b:dc:89:8d:
                    d1:e2:c2:59:1e:df:c3:86:c4:72:0b:80:ce:61:ae:
                    ef:5a:e4:22:04:2d:ae:a1:3f:70:d3:2a:a6:8a:e2:
                    81:a5:b5:af:8c:9f:04:bc:cc:ad:b6:32:bc:4c:10:
                    0b:72:4a:a7:88:ed:69:4e:14:84:dc:81:c2:90:5e:
                    ce:08:3a:a0:6a:c3:32:92:9c:a5:98:d0:1a:6e:71:
                    63:85:09:2b:39:18:9d:27:5e:be:46:f5:83:63:6e:
                    37:fb:1e:ca:5a:86:ad:84:d1:35:de:f9:cd:35:f2:
                    b9:75:83:ce:73:74:ab:c5:93:8e:4e:26:df:33:b5:
                    5f:b1:dc:fd:cd:d6:f4:37:11:d6:78:13:c2:db:e0:
                    d9:12:8e:b7:c5:51:e0:55:94:f7:c8:ca:bf:89:44:
                    dc:da:91:5e:14:e5:a8:9b:99:34:44:d2:c0:47:ac:
                    d2:8a:73:80:ec:e5:cc:b2:41:a0:2c:e7:78:0f:53:
                    5e:82:78:95:77:f5:3a:24:4c:3a:67:b6:1d:52:82:
                    11:3e:70:2f:03:cf:8a:ac:fc:20:0c:b8:22:99:a2:
                    4c:8f:05:8f:0e:fa:c6:42:f0:0d:dd:48:86:a6:1c:
                    13:de:98:c2:a0:b2:f8:55:ae:35:4d:c8:c6:c2:83:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:62:98:3F:93:7B:34:B4:56:1C:57:7C:44:43:CA:A3:37:F7:BE:22
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134302e3234342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.140.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:09:13:1c:0f:fe:20:22:32:92:77:b4:9e:85:8c:c1:a2:de:
         a1:47:f9:2b:02:45:57:16:88:de:e2:67:0b:7a:33:48:ca:ea:
         03:63:e3:0b:eb:4b:7d:98:62:6e:5d:fe:db:46:b6:ab:e3:a6:
         46:46:ea:bd:45:96:de:a2:32:32:9f:0a:0b:a2:f6:a0:d4:29:
         24:49:a1:c0:bf:e2:6e:96:18:1d:ab:05:c6:35:bf:a2:84:ed:
         ae:00:8c:a3:7e:6e:47:be:d1:4d:1f:67:51:d8:af:a6:f2:13:
         3f:94:f2:87:c5:ca:16:cf:08:f8:b8:64:a1:e4:87:76:f6:1e:
         3f:2b:60:c4:17:cf:5a:ad:dd:2a:b0:60:49:73:42:50:ff:42:
         98:96:de:dc:2b:0f:61:e9:b5:a3:80:93:2d:1f:71:02:39:73:
         c3:5c:fd:dd:f0:26:59:db:ae:39:eb:3b:27:b9:5e:6b:8c:a7:
         76:fc:a8:85:b8:84:e3:d2:66:59:8b:dd:8a:99:35:1e:aa:9d:
         2f:a4:10:d4:3e:ca:82:c2:5a:f9:0e:d8:5d:63:e9:b3:c5:5a:
         de:68:54:8b:60:4b:1c:1c:c8:45:2b:f0:c9:87:0c:a9:ff:2a:
         1d:f8:66:ec:3b:18:fa:d6:db:9f:1b:69:76:fd:11:70:81:be:
         fe:8a:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:32 2026 by rpki-client