Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132352e302f32342d3234203d3e2035363530.roa
File:                     34372e3134332e3132352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          6RRxhMZGrHCQaJWY84zpdGwBiqpX8g/3EoKh46nyzD8=
Subject key identifier:   53:0B:B3:47:A6:66:8F:B8:58:11:A9:03:00:D5:BB:8E:01:9B:73:F5
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4D4BE610340356623FC93137714F16F069E8C7F3
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132352e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        47.143.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4b:e6:10:34:03:56:62:3f:c9:31:37:71:4f:16:f0:69:e8:c7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=530BB347A6668FB85811A90300D5BB8E019B73F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:e9:9f:0c:6b:fb:46:86:11:4a:ed:77:8f:
                    49:cc:8d:14:5b:50:49:79:cf:1e:78:6a:9a:81:44:
                    21:78:1e:07:a5:a1:2a:18:84:29:09:61:3b:06:45:
                    35:80:70:df:2e:42:e6:94:4e:5b:0b:34:52:8d:83:
                    63:51:b4:5c:1e:4a:81:1d:6f:bb:78:c3:b9:92:10:
                    28:0d:6c:e9:1b:57:06:cf:d9:f7:9a:18:27:dd:0c:
                    d4:b7:f5:d3:be:32:60:74:fe:bc:32:e6:99:0f:ff:
                    a9:fa:09:78:c0:e1:dd:56:12:b3:3c:6a:7f:f0:d0:
                    b2:04:ca:4e:5a:a5:bb:b8:af:61:2c:6a:83:15:e3:
                    db:80:0b:3b:b3:70:ce:0a:fd:1f:1c:9a:9b:c0:29:
                    84:2a:63:2f:d3:f8:e7:62:54:15:5a:c2:41:b0:c1:
                    00:b3:e4:11:3f:87:e9:e3:06:a2:27:21:f1:69:9d:
                    3d:de:10:f4:f6:3d:36:da:0a:fc:20:3f:08:cb:5a:
                    35:bf:62:5c:3c:6c:67:df:a5:8f:34:66:e0:44:7b:
                    66:f0:00:3a:bb:d4:72:db:11:c8:9a:0e:78:12:7f:
                    3c:fb:b8:90:4b:c8:3e:7a:a3:23:08:4b:3f:64:30:
                    ec:8d:9e:fb:05:7e:1e:5d:97:44:8c:8a:19:17:cf:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0B:B3:47:A6:66:8F:B8:58:11:A9:03:00:D5:BB:8E:01:9B:73:F5
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:13:46:52:7d:71:40:26:dd:b0:13:7a:80:25:61:89:ba:d2:
         9d:b4:af:5c:a4:f0:ea:ff:6f:28:7f:87:a7:a6:46:a4:33:43:
         e7:29:f0:07:28:1c:25:8d:aa:3b:ce:e6:c2:5b:7e:e2:f2:d0:
         06:86:21:5c:c1:11:1e:bb:fb:83:bb:8b:78:09:aa:4d:5e:4a:
         aa:4f:13:9a:59:66:0a:b3:8b:e7:ca:13:98:39:ec:d6:29:ab:
         6f:9f:62:de:9b:0c:87:ea:44:38:9c:e0:d6:41:71:88:d9:a4:
         f3:df:72:7a:9c:2a:91:c7:83:6a:ae:2b:7b:a9:18:26:b8:e3:
         36:13:a8:50:83:b8:2f:07:68:c6:97:d6:ad:bb:f0:63:fe:24:
         8d:26:29:02:39:bb:28:47:a9:da:37:81:f2:0c:cd:f3:32:ee:
         67:e2:17:8f:8e:47:94:c4:16:09:b3:9d:c2:cc:ad:07:71:cf:
         c6:e3:dc:99:04:db:da:82:36:b2:d2:d5:2f:89:79:a5:3b:a3:
         22:85:b8:a1:c9:28:e0:08:33:5b:a6:1c:0f:a4:d4:fd:93:56:
         9f:d9:9b:44:4c:bb:ee:28:c9:56:b4:5a:d8:dd:4a:9e:8a:c0:
         a2:35:fd:1d:04:9b:3a:46:fd:04:5e:88:cd:dc:05:b3:d3:99:
         72:54:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:36:19 2026 by rpki-client