Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134322e302e302f31372d3137203d3e2035363530.roa
File:                     34372e3134322e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          +f2sLq3bRgWfCXgwI6rjLvzmrn7czhqb2rxjmL1EnwE=
Subject key identifier:   11:86:0D:4F:0E:48:31:8C:05:47:65:BA:ED:9F:83:B6:BF:F2:3F:F6
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4907A140C4812BB8A3270215F41C4447EA3FD6A1
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134322e302e302f31372d3137203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.142.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:07:a1:40:c4:81:2b:b8:a3:27:02:15:f4:1c:44:47:ea:3f:d6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=11860D4F0E48318C054765BAED9F83B6BFF23FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:c3:e1:c3:b9:8d:0c:44:96:2f:81:a4:d6:
                    db:7a:af:31:8a:7e:11:8f:ac:82:af:16:c5:c2:9a:
                    bb:38:62:16:06:36:fe:06:45:0f:ca:c6:16:74:5e:
                    3b:cb:09:37:69:80:f3:7c:7a:40:2b:16:a7:87:4c:
                    57:d0:72:60:a9:35:2c:ac:aa:ed:cd:9e:86:ca:22:
                    89:30:d1:c2:b9:71:b2:3f:d5:b6:e9:29:be:8f:e2:
                    7c:a1:4d:f1:04:4a:18:b7:ed:1a:7b:4b:56:96:57:
                    70:14:2f:f1:29:c9:22:10:be:38:7c:83:84:ff:fb:
                    c0:11:a0:4b:64:c4:fc:52:7a:a0:bf:25:28:8e:c7:
                    cd:1f:af:3f:7c:77:67:0c:f6:de:94:eb:e9:d8:ac:
                    bd:fd:1b:20:87:39:46:11:b8:92:22:05:af:eb:9b:
                    98:73:a2:ed:a2:17:d3:66:6a:2e:74:a7:c9:b0:b0:
                    d4:92:ab:28:8a:0b:04:d9:1f:dd:44:32:87:4e:7a:
                    3a:80:0f:57:af:40:9c:71:e0:ea:c6:dc:9f:a8:ea:
                    54:50:5e:8a:0e:80:96:ac:c5:a1:b5:64:87:6b:56:
                    29:a0:8a:48:eb:b3:94:73:20:17:22:47:d9:e3:28:
                    be:d1:c1:5d:88:f7:c1:af:18:77:63:1f:82:4f:be:
                    97:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:86:0D:4F:0E:48:31:8C:05:47:65:BA:ED:9F:83:B6:BF:F2:3F:F6
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134322e302e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.142.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:ff:6a:81:52:31:43:d2:fe:d1:f4:c1:f2:52:cb:94:0c:22:
         4a:e5:ad:39:cf:c9:81:62:ee:a0:de:49:b6:30:f4:39:c0:81:
         f8:80:7a:78:51:4d:4b:b1:9e:3c:a7:a2:97:b2:98:cc:55:ef:
         25:78:14:6f:07:34:1c:89:ca:ca:61:7c:c0:99:c2:3a:d1:39:
         32:42:cd:61:37:32:20:d7:a1:81:ba:44:f7:72:23:51:87:04:
         b1:18:8d:b7:af:09:71:af:5b:d9:9f:59:63:0e:17:bb:7e:c1:
         44:e3:61:58:64:e7:6a:86:d9:8e:a7:dd:74:6c:59:23:92:08:
         4c:ff:7f:2a:a9:81:bf:3f:f8:f6:e2:43:cc:9b:ed:cd:38:05:
         db:42:2d:1c:34:63:75:89:cd:9d:8a:d0:0e:d7:fb:12:b2:c4:
         84:83:dc:a4:50:c1:f9:e4:7c:f7:d1:20:27:f9:65:64:6e:db:
         af:46:f4:ac:a8:16:4a:26:3c:17:52:5b:f7:16:4d:a1:db:f9:
         e7:c8:9b:b1:45:64:1c:22:ed:9c:80:d7:30:b1:b2:9f:cd:cc:
         a7:8c:c8:82:dc:4c:ef:63:13:31:5d:54:c8:1d:b9:d7:fa:32:
         77:8f:bb:67:02:d9:5f:92:ff:4c:26:6a:44:eb:79:b8:82:d5:
         84:e9:ed:04
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUSQehQMSBK7ijJwIV9BxER+o/1qEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA1WhcNMjcwNDMwMDIyODA1
WjAzMTEwLwYDVQQDEygxMTg2MEQ0RjBFNDgzMThDMDU0NzY1QkFFRDlGODNCNkJG
RjIzRkY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsTD4cO5jQxE
li+BpNbbeq8xin4Rj6yCrxbFwpq7OGIWBjb+BkUPysYWdF47ywk3aYDzfHpAKxan
h0xX0HJgqTUsrKrtzZ6GyiKJMNHCuXGyP9W26Sm+j+J8oU3xBEoYt+0ae0tWlldw
FC/xKckiEL44fIOE//vAEaBLZMT8UnqgvyUojsfNH68/fHdnDPbelOvp2Ky9/Rsg
hzlGEbiSIgWv65uYc6LtohfTZmoudKfJsLDUkqsoigsE2R/dRDKHTno6gA9Xr0Cc
ceDqxtyfqOpUUF6KDoCWrMWhtWSHa1YpoIpI67OUcyAXIkfZ4yi+0cFdiPfBrxh3
Yx+CT76X3wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBGGDU8OSDGMBUdluu2fg7a/
8j/2MB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNDMyMmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHL44AMA0GCSqGSIb3DQEBCwUAA4IBAQCU
/2qBUjFD0v7R9MHyUsuUDCJK5a05z8mBYu6g3km2MPQ5wIH4gHp4UU1LsZ48p6KX
spjMVe8leBRvBzQcicrKYXzAmcI60TkyQs1hNzIg16GBukT3ciNRhwSxGI23rwlx
r1vZn1ljDhe7fsFE42FYZOdqhtmOp910bFkjkghM/38qqYG/P/j24kPMm+3NOAXb
Qi0cNGN1ic2ditAO1/sSssSEg9ykUMH55Hz30SAn+WVkbtuvRvSsqBZKJjwXUlv3
Fk2h2/nnyJuxRWQcIu2cgNcwsbKfzcynjMiC3EzvYxMxXVTIHbnX+jJ3j7tnAtlf
kv9MJmpE63m4gtWE6e0E
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:40 2026 by rpki-client