Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e34302e302f32332d3233203d3e2035363530.roa
File:                     34372e3134332e34302e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          QL2AaCdvLuB/Pod6/2+Tpi+agU4dpe6j7T1g23nC7IY=
Subject key identifier:   39:30:02:BD:82:68:97:2F:E9:B8:7D:1D:6E:0E:0F:AA:3C:DF:D2:A7
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3273BDFF1EEF2A397A478AE99897CAB943471EB5
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e34302e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.143.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:73:bd:ff:1e:ef:2a:39:7a:47:8a:e9:98:97:ca:b9:43:47:1e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=393002BD8268972FE9B87D1D6E0E0FAA3CDFD2A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6b:ff:55:91:de:07:1a:28:37:42:2c:8e:11:
                    c3:cc:16:3c:74:1a:2c:f2:1e:59:23:6d:7a:4f:e5:
                    34:5f:29:b0:97:e8:4d:09:81:d3:51:38:33:9e:84:
                    9e:d0:9d:96:8f:e7:5b:7b:ca:6d:11:36:6e:23:d8:
                    56:fc:9e:66:b5:8f:9d:77:12:09:eb:d5:ad:62:fb:
                    e4:2a:f3:7c:67:c3:1c:f5:5a:5b:75:a6:91:41:da:
                    39:3c:02:7d:fc:f3:99:04:5f:21:b6:ee:76:0a:37:
                    aa:64:b3:90:19:06:fb:bf:94:f6:f7:d6:f2:5c:84:
                    58:5b:79:2e:88:fe:b4:9d:0b:5d:b1:bd:1e:e1:4b:
                    95:1a:e7:39:7a:76:22:7e:9b:e2:e9:1b:66:1a:9b:
                    8b:e3:19:92:a4:8a:c3:0f:df:fe:50:fb:7d:f2:e4:
                    11:25:e9:c5:56:36:e3:41:66:86:88:0b:f8:dc:1d:
                    d1:dd:fe:0c:c4:8e:fd:c1:71:73:6c:81:76:9d:bc:
                    a5:56:49:2b:2d:22:e8:23:dc:f3:93:86:21:1d:c3:
                    fd:1f:c9:26:3e:89:03:fc:b6:56:e9:b3:20:ba:e4:
                    0d:66:fd:a4:ad:63:9e:21:d7:29:9d:f7:b1:bd:7b:
                    0d:44:1a:af:2e:21:5c:d1:d1:e4:6f:98:9a:aa:11:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:02:BD:82:68:97:2F:E9:B8:7D:1D:6E:0E:0F:AA:3C:DF:D2:A7
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134332e34302e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.143.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:0c:e9:f3:e5:34:74:6b:65:8c:4a:48:bf:82:94:6e:0f:5b:
         c8:37:f2:83:05:36:4b:d5:ec:8d:57:61:15:ae:1e:1f:75:8f:
         99:ec:0f:e1:e6:a0:78:2d:5f:96:83:a7:1d:6d:e0:87:80:28:
         91:ed:13:cd:49:06:80:ae:9c:cf:e2:2e:3c:c1:ad:1d:30:b7:
         80:5d:06:17:8d:97:e9:dd:ef:6e:94:f3:d5:9d:ea:45:cb:08:
         bf:6d:9a:11:1b:af:17:5d:ad:88:fa:17:31:0e:d8:6d:7e:1d:
         2b:81:3d:65:77:44:a2:cc:02:6f:08:78:e1:6d:f2:f9:07:38:
         ed:6d:9d:15:7f:f1:b5:56:17:6e:2e:67:69:7e:e9:2d:0a:eb:
         58:4e:4b:6a:4a:e0:a6:d8:0a:96:1d:8a:49:bd:61:88:e6:28:
         8a:c4:8b:2e:99:64:79:93:9c:c5:e2:85:93:e1:a1:e9:a3:e0:
         75:7f:b2:e6:e9:c3:66:43:68:1a:ff:9b:d5:9e:90:05:41:21:
         57:61:61:50:fb:cc:bc:34:48:b4:2d:1a:60:21:2f:0e:0f:ae:
         ec:cc:b8:02:e9:c2:c6:6a:57:9e:c0:3d:8d:81:44:7e:7e:9c:
         4b:3d:ce:7d:b0:46:90:3a:c2:ab:ac:4f:ce:9e:2d:29:a8:c0:
         9f:2d:88:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:01 2026 by rpki-client