Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33382e302f32342d3234203d3e2035363530.roa
File:                     34372e3134332e33382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          wSp1vx4xLs0B+8unY07JrAMH3z5f8R6CANKzfK2x6LU=
Subject key identifier:   11:0D:ED:C6:C9:F9:D7:D8:1A:7C:7F:BA:8B:FA:F1:65:31:2B:C8:B2
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       310EC9BE2BF195CEEE3BCA6453D76D6F3F919B95
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33382e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        47.143.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0e:c9:be:2b:f1:95:ce:ee:3b:ca:64:53:d7:6d:6f:3f:91:9b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=110DEDC6C9F9D7D81A7C7FBA8BFAF165312BC8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:23:8a:f1:5e:d1:df:f2:e5:01:f9:fb:51:
                    52:8a:ce:7f:dc:6e:5d:52:f5:bc:12:96:79:5c:5d:
                    fc:27:2b:dc:46:bd:64:46:63:4a:b8:76:f0:5d:49:
                    fb:75:c1:d4:a4:0c:55:f8:f3:cd:4b:49:d6:cd:27:
                    8b:7a:e6:62:09:7b:6f:f0:1f:94:1d:6e:8c:9e:2f:
                    61:58:91:27:c1:d6:2b:a1:4e:b1:56:2a:24:8e:c6:
                    cb:4e:c0:00:38:7d:73:ec:0a:49:0e:2d:bd:23:09:
                    c9:bb:b0:54:46:cd:fa:26:1a:d3:da:ae:e1:2d:ce:
                    85:54:42:b8:ac:e3:09:22:03:22:67:97:3c:af:7f:
                    dc:b7:ed:85:7a:c3:ee:1b:09:50:cb:96:4a:03:44:
                    8f:02:17:59:c5:2f:07:1d:7c:f3:a2:83:1b:d2:78:
                    39:09:f3:16:dc:2b:2b:55:3f:8a:20:ae:24:4d:4e:
                    bc:13:df:1f:b0:99:0b:41:5c:ad:38:6c:d7:0a:39:
                    57:f6:31:29:72:12:45:99:ac:e8:cf:11:de:e1:23:
                    b0:48:66:99:b7:52:90:aa:db:55:f0:df:1d:a1:f8:
                    d6:6e:16:54:5e:f0:d4:e6:77:f6:9d:ff:bb:ab:87:
                    87:72:27:8e:9c:1e:1c:c0:15:00:d9:ba:11:b3:3b:
                    fa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0D:ED:C6:C9:F9:D7:D8:1A:7C:7F:BA:8B:FA:F1:65:31:2B:C8:B2
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e9:01:6c:ae:56:a2:d5:b3:87:f9:4e:53:f0:da:7b:fe:29:
         eb:e0:31:40:6f:ee:8d:38:dd:17:4a:f3:14:57:18:26:4e:98:
         7c:44:01:9e:ea:6c:d0:d3:7f:2e:4c:42:f6:94:60:b4:cf:fc:
         da:6e:f3:a3:7f:38:c8:6b:a9:17:b4:a4:86:b5:1c:79:5d:48:
         88:56:38:cd:d8:b4:96:89:0d:76:c6:da:e2:8a:76:b8:de:3e:
         89:be:8d:c5:62:19:ab:d5:57:9d:6d:43:da:e0:85:f1:20:c1:
         c0:95:bc:47:fe:1a:c4:d2:bf:06:9c:7d:81:af:63:5f:9b:1d:
         ab:25:0d:3d:3d:16:5d:64:9d:da:7c:b1:84:10:8f:12:34:f6:
         ca:1b:7e:c7:22:d1:67:52:c4:cb:4d:2b:74:ab:b1:d8:8b:95:
         56:99:e8:a5:21:f0:d7:e8:25:91:13:c3:c5:7a:39:33:8c:c4:
         6a:a5:bc:9e:cd:c0:e3:c7:82:4c:a5:e0:eb:42:f6:ee:b7:e1:
         9b:d3:58:ea:e5:23:89:bf:02:08:db:b9:69:fd:40:90:67:8b:
         f6:ed:b5:dc:6d:6f:15:a9:50:d6:e5:e3:fb:6f:d1:07:8c:1e:
         b0:3f:37:c7:84:20:f7:0e:44:10:5f:1c:47:5d:0a:82:a0:9a:
         14:e7:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:12 2026 by rpki-client