Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3230322e302f32332d3233203d3e2035363530.roa
File:                     34372e3134332e3230322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          7PGjSs+rd5kGeML2EsIw4vph3p1j9DXMvUs2fGsmNoQ=
Subject key identifier:   07:23:83:AB:A3:50:A0:E1:8E:43:88:1E:79:29:BD:F7:AF:5F:05:6D
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       69D111819BF4D930BF1A12B07BD46FC23B10CB8C
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3230322e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.143.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d1:11:81:9b:f4:d9:30:bf:1a:12:b0:7b:d4:6f:c2:3b:10:cb:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=072383ABA350A0E18E43881E7929BDF7AF5F056D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:be:92:ed:7a:b7:8c:31:a1:e1:d7:fd:e1:d2:
                    0d:b4:59:af:67:1b:5e:c2:0e:7a:d4:c2:0d:c2:86:
                    8b:1c:d3:71:f7:00:07:75:e1:bd:ad:5e:4b:ca:70:
                    35:67:18:46:b9:d3:8a:0f:f0:07:00:15:11:52:95:
                    ba:b1:bc:1f:34:d3:20:e4:ae:c3:55:17:ed:fc:2a:
                    4f:cd:2c:86:c0:3b:ea:13:7b:aa:2e:f4:91:5f:3e:
                    73:c2:bc:69:cb:00:71:39:20:fb:d2:ef:7b:e6:19:
                    d1:87:87:69:14:77:ec:e0:6f:13:01:e0:11:a3:b2:
                    7f:f5:ae:30:f2:95:1d:ff:f2:6d:8c:ba:6e:dc:fa:
                    4c:19:c1:f2:ec:6c:df:ae:ad:68:2c:60:0a:78:d7:
                    d8:d1:45:21:e0:69:38:2f:a8:90:36:2b:2b:c6:89:
                    9a:98:15:db:f3:b0:f2:40:06:d1:04:5e:13:ee:9e:
                    b8:b3:4d:96:ce:36:e3:21:0a:16:a5:99:54:7b:f3:
                    83:6c:26:cf:3e:64:c4:e1:6d:20:30:a2:38:84:20:
                    a3:0c:c9:86:e4:f1:6a:dc:ac:71:77:35:8c:5c:01:
                    0c:88:25:59:e4:4f:34:a9:ac:ce:83:e3:b8:cb:be:
                    58:60:e3:11:3b:11:40:42:fd:5e:d3:ae:ad:2e:27:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:23:83:AB:A3:50:A0:E1:8E:43:88:1E:79:29:BD:F7:AF:5F:05:6D
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3230322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:1d:e0:15:e6:59:aa:50:8c:cf:42:a3:3c:ce:6d:8f:0a:d9:
         13:1a:9f:c1:26:02:a0:cd:a3:51:27:78:5d:4a:21:8f:42:3a:
         4a:e4:bd:f6:5c:f8:7f:2f:b5:55:dc:a9:f5:71:76:02:f9:4b:
         0a:1a:32:a5:93:80:b5:ad:53:96:de:73:79:be:6b:b7:07:60:
         9d:72:dd:8d:98:e0:27:41:12:51:6b:61:9c:dc:94:aa:0e:64:
         54:6a:0e:2c:b3:98:38:6b:28:92:69:48:80:57:36:e5:7c:7e:
         8f:a2:c9:78:94:06:b3:5c:c7:3b:e1:ca:5c:ec:aa:37:44:86:
         1d:ac:68:2a:b6:4e:aa:87:5c:ce:46:b4:6f:05:71:29:2c:f4:
         f5:ac:bc:89:4c:58:86:da:5f:10:17:11:f5:37:f7:90:f7:91:
         6e:f8:05:7c:d6:7b:08:98:41:e5:45:ea:2a:96:a7:07:9b:9f:
         fc:80:10:4a:25:8d:1c:55:85:14:d7:31:aa:56:33:14:59:42:
         34:ce:a0:bb:7c:65:01:4b:eb:c0:06:d3:da:75:28:e9:3f:bd:
         8a:64:4d:95:13:e3:e9:37:1f:68:f0:8c:d2:5a:e0:c9:17:10:
         e7:8f:69:68:73:6d:ee:a3:19:f7:be:87:32:8d:9a:69:a7:af:
         ba:2e:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:16 2026 by rpki-client