Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134322e38332e302f32342d3234203d3e2035363530.roa
File:                     34372e3134322e38332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          1VfTvu2mj9ZGlmvcfTXtZORYDL/jGs1w0Czvo4DEjgM=
Subject key identifier:   C2:94:EC:55:8E:A7:88:CC:F9:A4:AC:28:BC:38:CB:B6:D7:64:08:2D
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       045EF68ED9AC85D43E1A9AE8E747CFA0AE14155D
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134322e38332e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:07 +0000
ROA not before:           Fri 01 May 2026 02:23:07 +0000
ROA not after:            Fri 30 Apr 2027 02:28:07 +0000
asID:                     5650
IP address blocks:        47.142.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5e:f6:8e:d9:ac:85:d4:3e:1a:9a:e8:e7:47:cf:a0:ae:14:15:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:07 2026 GMT
            Not After : Apr 30 02:28:07 2027 GMT
        Subject: CN=C294EC558EA788CCF9A4AC28BC38CBB6D764082D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:4a:c7:bd:87:bc:10:26:40:30:a3:da:8e:
                    1e:29:db:b3:b0:5c:92:fb:f4:a2:3b:3a:48:1c:62:
                    ad:d1:c0:de:59:7d:6c:50:30:0a:80:30:e0:ad:2d:
                    c5:b6:ab:6c:0d:95:2d:ee:e0:35:cb:44:65:09:e3:
                    98:37:44:3a:73:20:53:4b:aa:15:72:c4:46:18:e3:
                    3b:56:df:54:35:5b:47:c0:0f:ac:1c:74:c7:bc:d0:
                    51:ab:2a:88:60:ab:59:9b:a6:36:4c:e9:0d:a0:75:
                    41:fd:a7:12:6b:66:d0:43:62:8e:68:e4:d3:d8:df:
                    f1:0b:d6:28:ef:51:dd:a8:89:97:5f:22:97:e2:b8:
                    35:66:a5:d6:b8:25:7e:c3:fc:f1:be:de:a1:2d:c3:
                    65:65:aa:ea:32:4f:97:cd:f2:0e:b2:5a:fe:7f:09:
                    9b:85:3f:f4:eb:25:2c:22:c0:f1:55:ce:f5:79:d1:
                    94:4b:e3:64:95:7f:41:a8:d7:97:3a:76:e1:8a:a2:
                    2f:5c:ba:f8:32:71:5e:59:cd:6f:63:aa:86:84:43:
                    0c:39:8b:11:ad:ea:25:04:0b:2c:2b:27:03:63:d3:
                    be:3f:a2:95:f2:f5:84:91:8a:a7:ad:0b:7a:f0:c9:
                    b9:21:5c:33:50:1f:c7:83:0f:c0:1f:b4:7c:5f:3c:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:94:EC:55:8E:A7:88:CC:F9:A4:AC:28:BC:38:CB:B6:D7:64:08:2D
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134322e38332e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.142.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:ad:23:c5:36:17:ec:4e:0e:2e:9a:fb:78:b1:d4:4b:1e:
         1a:7a:e9:f1:1b:bb:32:b0:32:28:d3:f0:97:dc:48:46:67:11:
         da:40:16:54:41:1a:d6:4b:1e:dd:10:54:9c:f0:49:fc:0f:e7:
         ab:ea:35:12:36:fe:05:ff:02:de:55:f0:74:79:c3:0e:e6:36:
         39:93:bf:e4:5e:a3:8f:40:ed:86:65:98:8d:3e:85:e3:1d:22:
         21:ec:a8:5d:d5:99:01:74:58:1e:68:39:d5:d1:6a:f2:10:d5:
         96:cb:55:6e:c8:d6:3d:72:5f:35:ea:93:77:8b:25:a2:e6:d3:
         f6:d8:16:c3:0b:a5:cd:10:22:e7:0d:8c:ce:6b:91:ff:5c:b9:
         43:18:c3:08:72:97:c8:84:db:2c:6e:7d:b8:58:f1:e9:a4:38:
         d0:27:2c:31:27:6b:02:0c:71:80:ac:97:fe:d0:25:49:6d:29:
         f0:3a:d2:e7:50:22:f5:70:61:39:1c:cc:c5:36:0b:7a:7f:ab:
         09:d1:3a:89:91:89:a8:ca:fd:ac:7c:f9:02:14:bf:34:c0:a3:
         43:5f:5c:12:78:9a:20:ef:40:4e:39:66:d1:b3:97:21:12:cf:
         ad:64:5f:69:82:ef:7e:58:9e:a3:5c:5a:2b:4a:f6:e2:47:75:
         83:5b:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:09 2026 by rpki-client