Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33392e302f32342d3234203d3e2035363530.roa
File:                     34372e3134332e33392e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          njX1+vCKrvT+FJHDb9u8nnPeaMG+E6Ni5RPjoi+o91s=
Subject key identifier:   9D:29:9F:54:D3:85:61:41:79:35:CE:0C:58:0D:14:7C:AB:E0:87:97
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       33F3BCF7BD60BFF50ACF09C70B0FC2E9B4A1665E
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33392e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.143.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f3:bc:f7:bd:60:bf:f5:0a:cf:09:c7:0b:0f:c2:e9:b4:a1:66:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=9D299F54D38561417935CE0C580D147CABE08797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:b3:2e:6a:7c:89:62:08:0d:f3:bb:85:76:
                    ac:62:00:8c:60:2b:1c:4a:b7:4c:42:37:f6:54:71:
                    76:09:b0:0d:20:c9:18:55:44:4f:8d:cb:77:d4:68:
                    9a:3e:b4:3e:b4:7c:f6:de:fb:0c:8d:ee:b8:88:41:
                    35:c3:96:6e:b8:68:33:6f:35:f2:78:47:0e:48:8a:
                    59:e7:a1:f9:80:f4:07:8c:63:06:b8:4a:20:1c:dd:
                    03:af:53:e4:d6:f8:b5:c1:58:d0:97:1c:e1:b2:25:
                    42:43:74:1b:4d:0f:8b:d1:bf:08:dc:22:77:dd:c0:
                    d8:8f:b1:9a:e9:32:43:d8:92:b1:16:0a:e7:71:36:
                    b8:59:e0:c3:35:f2:cd:d8:a5:04:21:22:e9:75:b3:
                    22:07:fe:b0:38:a7:7c:90:d2:b7:9c:a7:6b:af:4a:
                    66:98:62:9f:8a:bf:58:03:1c:15:ad:a2:c4:ad:46:
                    e7:24:46:ab:31:67:b7:66:36:fe:c6:6e:5e:7e:19:
                    9a:6d:0c:51:3d:e3:0d:a7:9e:8e:9b:25:f1:37:f4:
                    a7:6e:57:3f:d1:0d:a7:da:bb:ae:48:0b:4e:bc:43:
                    17:da:08:7e:0a:dd:78:7e:24:c5:7d:c5:76:82:a4:
                    c2:71:7e:c2:ad:76:a5:f2:8d:bb:8a:49:c7:04:d5:
                    bd:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:29:9F:54:D3:85:61:41:79:35:CE:0C:58:0D:14:7C:AB:E0:87:97
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e33392e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:dc:26:5d:b3:3a:e0:7f:c6:fa:e6:a2:b6:22:73:b9:a7:1a:
         26:e5:54:90:63:c6:aa:01:00:d0:00:e8:0f:8d:9e:87:40:f6:
         7d:a7:cf:0c:25:77:15:f1:3a:71:56:ee:f2:ef:c1:ae:f0:5e:
         51:37:25:b6:46:39:46:98:10:3a:fa:5c:a2:fd:f8:3f:81:75:
         77:d6:7d:73:40:f4:0b:ca:f2:b0:ed:69:ef:c7:57:da:ff:b1:
         7f:a8:96:de:f7:a8:de:56:5a:bc:6a:54:e2:2e:38:d5:a9:80:
         86:37:f1:bd:5c:bc:53:4b:f9:e0:04:5f:26:50:6c:e2:7e:56:
         10:59:6c:25:1d:b0:7d:48:5c:19:e3:c7:f5:e3:6a:5d:04:7c:
         30:c0:c8:2f:fd:43:b8:0c:cb:5f:1b:b5:b6:b3:e8:ca:00:00:
         c1:be:b6:fa:43:3c:a5:b7:26:c1:53:f1:7c:c1:9b:f6:64:1f:
         fe:e6:41:0f:46:a9:31:b7:80:10:e2:98:c9:34:2d:9c:16:47:
         2b:8d:01:e3:cf:42:89:cc:71:85:b8:12:09:dc:f0:45:62:79:
         dc:ad:51:e6:b5:15:37:5c:c7:68:0d:d4:1d:dc:b7:83:e4:c6:
         51:a8:cd:6b:cc:af:35:5c:76:9c:97:d3:2a:b2:01:e8:0c:41:
         50:92:ea:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:28 2026 by rpki-client