Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132382e302f31392d3139203d3e2035363530.roa
File:                     34372e3134332e3132382e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier:          ejgGtj04dlUbAYdFG/TDSmsoLnF9aKcnr+85U+Chg9U=
Subject key identifier:   7A:38:5B:F2:06:54:0B:4E:B5:C1:BA:D1:9D:66:B6:12:5F:5A:47:04
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       100B3BB9B3314AED7579CD7E053B4C7766002569
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132382e302f31392d3139203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        47.143.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0b:3b:b9:b3:31:4a:ed:75:79:cd:7e:05:3b:4c:77:66:00:25:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=7A385BF206540B4EB5C1BAD19D66B6125F5A4704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e9:4a:8a:d1:c8:c1:b4:d3:de:1f:53:41:dc:
                    1a:e2:dc:c9:72:70:79:82:1d:68:5a:39:60:f9:55:
                    48:72:9f:96:cf:e1:e7:40:58:b8:85:15:e5:f1:d1:
                    83:4a:e0:12:b8:15:be:f2:0d:27:c3:d3:c6:30:06:
                    91:8d:2e:95:83:73:6c:ec:0f:ab:28:6b:ea:0f:92:
                    d8:b6:12:69:b1:42:cc:34:5f:10:39:e6:55:a7:35:
                    b1:e0:60:0a:27:41:44:68:f4:77:23:0f:c7:07:8b:
                    41:2c:cd:f2:c8:62:2a:26:f3:5e:96:a5:8c:d9:03:
                    7e:8d:42:53:3d:d4:52:cf:b0:e9:b8:d4:3f:e0:66:
                    06:2c:f5:64:67:cc:c2:d9:ac:aa:8c:1d:5f:db:ae:
                    be:56:52:59:50:a6:1c:50:d2:3e:02:ce:33:2d:eb:
                    d8:53:db:80:2c:1e:b9:bb:9c:8e:91:4a:d5:b9:1c:
                    30:62:3e:67:99:c2:56:24:cd:89:dd:3c:42:d1:cf:
                    3e:d6:d2:4c:64:72:67:9a:df:1f:50:b0:6a:62:ee:
                    91:46:bf:4d:91:79:4d:83:f9:05:ab:e6:2a:5c:24:
                    5e:05:48:d0:1d:61:c6:2b:07:cb:ef:9f:85:32:a8:
                    35:8b:c8:d6:e3:9f:34:93:e6:23:49:a5:43:11:c2:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:38:5B:F2:06:54:0B:4E:B5:C1:BA:D1:9D:66:B6:12:5F:5A:47:04
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3132382e302f31392d3139203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         97:19:8f:6b:c2:c2:9f:db:ea:3a:15:02:8e:cb:fe:05:ef:b8:
         95:20:3b:63:31:a3:64:fa:e0:c2:81:cb:4b:5f:44:28:32:30:
         1e:42:51:ef:97:2f:09:b7:43:3a:68:21:37:86:cd:c7:09:66:
         af:72:4f:26:d0:a7:a2:03:84:16:36:66:1a:c0:3d:71:c6:50:
         9e:f8:a6:30:2b:33:9f:20:c8:c4:2a:17:b6:dd:77:de:9c:4e:
         9b:2a:3a:80:23:be:6c:f7:99:97:e6:04:15:99:5f:20:b9:23:
         3c:9e:ec:2d:c0:0f:43:14:e6:7a:d1:75:4b:cd:5c:50:03:62:
         4d:4d:b2:6e:14:5e:a8:e6:3e:a1:ff:e6:61:2b:bc:5a:a7:ec:
         b9:cf:df:52:60:68:b1:f8:c4:7d:36:f1:9c:f2:07:34:34:77:
         45:2c:07:19:0c:4e:76:36:47:7d:58:37:e5:f4:ad:1a:7f:c1:
         ff:72:0c:f7:10:63:c9:af:b1:c4:f2:6e:7b:16:cd:eb:d8:c0:
         52:e1:f5:8a:ba:18:59:50:bc:1f:72:18:0b:18:5b:6d:31:e3:
         86:73:9d:a7:5e:71:94:6f:da:3f:00:58:0c:c9:86:57:b2:24:
         79:8d:67:c0:08:f5:40:02:4e:48:fd:b0:7f:3a:5e:b7:d1:a6:
         6c:4c:f9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:27:48 2026 by rpki-client