Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3231302e302f32332d3233203d3e2035363530.roa
File:                     34372e3134332e3231302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          sD+OKzBEsGwmtKF/0f3dQ1PbnPAXHZGhB6TClLL4XlI=
Subject key identifier:   4A:8B:C5:93:4A:BC:07:5B:BF:33:7D:95:7E:3B:4F:7C:1C:D9:AD:B1
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       338C99F4B6452D900D39BF24AF1340B39B82089A
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3231302e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.143.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:8c:99:f4:b6:45:2d:90:0d:39:bf:24:af:13:40:b3:9b:82:08:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=4A8BC5934ABC075BBF337D957E3B4F7C1CD9ADB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:24:b4:49:36:b3:f5:8e:19:a7:5b:ef:03:
                    57:fe:90:3b:7d:21:9a:82:14:b7:cf:60:88:c4:90:
                    77:47:78:be:d0:cf:46:6e:b4:94:a8:0a:42:8a:0b:
                    91:f7:f2:6b:64:f4:6f:71:08:43:99:ba:06:4d:6e:
                    52:63:16:61:69:7e:6f:bc:08:bb:3a:4b:0b:c2:c1:
                    6a:3f:6f:27:78:16:58:3c:e2:b9:c8:b9:9a:8a:29:
                    16:10:a7:31:33:de:9f:e0:92:7e:15:ac:44:32:16:
                    c6:f7:2a:84:fe:c0:a3:1b:cb:0d:e9:e5:5e:15:ba:
                    13:30:86:a6:90:15:e8:c7:f8:1e:8e:f9:8d:3e:da:
                    0e:d6:b8:5e:6f:da:7b:44:57:ad:b1:e0:b1:78:1e:
                    ad:fc:39:24:23:ed:9b:5b:a9:24:cb:41:46:dd:0d:
                    d5:56:37:ca:cf:dd:8b:ee:64:d3:1a:ad:ee:90:ec:
                    9c:e5:5c:55:a9:3e:c1:e6:17:dc:85:72:54:8a:00:
                    46:af:da:da:95:0d:51:0b:9d:77:9e:6f:77:18:98:
                    3f:c3:bd:53:eb:9b:ce:4c:3e:06:b1:9c:dc:a7:fa:
                    a8:22:b9:6f:82:50:67:fa:48:1a:b2:41:de:79:7a:
                    73:7c:c5:4b:28:64:bd:6b:e1:11:85:7c:13:ba:63:
                    03:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8B:C5:93:4A:BC:07:5B:BF:33:7D:95:7E:3B:4F:7C:1C:D9:AD:B1
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e3231302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:e5:7f:87:3b:24:43:82:15:49:fc:2f:d6:c1:59:98:d5:33:
         43:0a:69:15:8e:fb:a1:0d:c0:46:d2:fa:11:3c:63:5c:0e:22:
         a8:2a:22:15:40:71:b3:8c:2c:02:ba:d3:bc:5a:ff:c8:f6:02:
         d5:be:6d:5d:e5:c2:87:06:ed:a3:68:0d:9c:53:10:f3:56:96:
         23:43:7b:0a:a9:2c:0f:6b:99:6c:a5:fc:5f:c4:76:e3:34:38:
         15:3d:5b:ef:19:44:cc:39:37:26:be:b8:4c:1e:05:95:76:f6:
         08:13:15:71:95:73:6f:e5:d3:f9:f3:31:0d:22:6c:79:bd:49:
         f1:c0:23:1d:18:da:01:7b:a2:1b:71:15:04:a8:fc:04:83:60:
         db:6e:b1:69:19:13:48:a7:76:1f:13:25:db:8e:21:4e:c4:f7:
         74:d1:ed:74:af:26:2b:f5:97:78:cf:f7:9c:fd:2e:5a:f1:3c:
         d4:00:45:71:33:78:4f:56:a3:48:46:c2:cf:04:cf:85:f8:92:
         66:da:05:bd:10:84:ce:e6:d0:fd:94:20:cd:d7:21:d7:20:f5:
         85:89:1e:c2:ab:81:d7:a1:f2:6b:e7:74:26:d2:4f:60:ff:73:
         ac:2b:f9:e4:cc:aa:9f:33:16:2a:ca:d8:64:4d:f3:c5:f6:e0:
         9f:7a:02:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:14 2026 by rpki-client