Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134342e302e302f31332d3133203d3e2035363530.roa
File:                     34372e3134342e302e302f31332d3133203d3e2035363530.roa (raw, json)
Hash identifier:          4gDQOQuje2f4WXD3Yy9LBRvWAZ6PZCUn0Cl/jINrY9Y=
Subject key identifier:   5A:80:17:F0:AC:2B:6A:2E:58:97:B6:96:6E:2F:19:01:87:48:26:B4
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       765A453C589C90B1C877BAA72B3239042A1F14EB
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134342e302e302f31332d3133203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        47.144.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:5a:45:3c:58:9c:90:b1:c8:77:ba:a7:2b:32:39:04:2a:1f:14:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=5A8017F0AC2B6A2E5897B6966E2F1901874826B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:8d:d8:62:cf:4a:cf:87:91:b0:f7:81:a2:
                    2e:8f:2b:dc:6d:b1:27:66:be:b7:4d:03:51:92:3c:
                    5d:f2:5b:5c:ed:ff:bd:6b:79:1b:12:17:4f:31:44:
                    9f:9b:b0:c7:a3:48:5d:94:b5:d6:10:31:2f:43:17:
                    fa:96:4d:57:75:a7:7d:0c:24:07:c6:41:78:9a:50:
                    e6:44:d0:dd:55:43:0a:78:4f:ef:fa:77:ab:6f:e1:
                    c2:4c:66:e0:16:9a:e9:c9:43:02:6f:cb:77:fc:6b:
                    1e:a0:05:ce:2f:61:bb:bf:17:97:62:77:8b:ba:11:
                    a1:ba:19:71:ed:c2:48:7f:19:0f:ac:80:c7:72:2e:
                    e6:6b:77:7c:15:af:80:f8:0a:62:1b:9d:47:8c:34:
                    4d:71:75:70:3b:21:3d:39:ed:ea:bf:a8:76:52:e6:
                    04:ae:91:c9:d3:c2:de:ba:26:38:5e:b6:bd:2e:33:
                    f0:e6:16:79:05:a0:de:26:4c:eb:f7:e7:0e:85:7c:
                    23:45:3c:26:c8:77:bb:78:07:ae:f4:a2:2c:82:ed:
                    66:70:87:65:cf:5f:72:82:bc:5f:ef:25:b4:a2:6e:
                    3a:56:c3:65:6d:92:79:6d:c6:44:40:5f:65:12:9b:
                    1c:74:88:f7:8d:0e:15:76:62:b5:e6:de:33:03:31:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:80:17:F0:AC:2B:6A:2E:58:97:B6:96:6E:2F:19:01:87:48:26:B4
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3134342e302e302f31332d3133203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.144.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         7c:6e:94:ed:ba:02:ae:e9:ea:13:f0:98:88:43:31:b3:29:ab:
         41:ed:fc:8a:45:25:91:d8:ae:98:6a:dd:99:45:44:30:41:cf:
         17:15:8e:fd:f4:63:b2:d1:06:9e:ed:11:4b:2e:27:a2:3e:3b:
         c4:92:9e:4b:42:36:fc:20:53:f7:97:f2:31:58:a1:f2:48:50:
         0d:0a:5e:6a:83:da:d2:6b:e6:2b:50:a4:00:68:32:8c:51:fd:
         d4:18:e0:e8:61:bb:e7:ab:4a:24:2f:95:bd:01:01:9b:9f:de:
         0a:1c:c5:6f:e1:8b:3e:98:a8:d1:05:af:44:ed:b2:cb:0e:b6:
         1c:db:2b:45:c5:a6:5f:64:ce:46:82:c9:c1:ba:71:9c:8f:a4:
         c2:06:6e:08:65:2c:38:0b:de:55:8c:e3:7a:e9:07:22:07:bc:
         40:a0:bb:4d:e6:2d:20:e2:ab:10:e5:a3:59:b3:e9:e9:52:f5:
         1c:4d:b1:ba:c0:8f:a2:2f:1c:af:3f:01:24:cc:d5:69:36:53:
         01:5e:3c:41:16:17:0a:95:f1:de:1e:76:8b:16:c5:f2:33:ae:
         b1:c6:79:b8:a2:a4:1a:c2:f9:06:59:af:ad:1b:1b:34:e9:10:
         35:2a:9f:9e:28:03:72:7f:99:25:b8:3a:1e:f1:d7:38:67:f7:
         02:e2:c0:05
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUdlpFPFickLHId7qnKzI5BCofFOswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA5WhcNMjcwNDMwMDIyODA5
WjAzMTEwLwYDVQQDEyg1QTgwMTdGMEFDMkI2QTJFNTg5N0I2OTY2RTJGMTkwMTg3
NDgyNkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOCN2GLPSs+H
kbD3gaIujyvcbbEnZr63TQNRkjxd8ltc7f+9a3kbEhdPMUSfm7DHo0hdlLXWEDEv
Qxf6lk1Xdad9DCQHxkF4mlDmRNDdVUMKeE/v+nerb+HCTGbgFprpyUMCb8t3/Gse
oAXOL2G7vxeXYneLuhGhuhlx7cJIfxkPrIDHci7ma3d8Fa+A+ApiG51HjDRNcXVw
OyE9Oe3qv6h2UuYErpHJ08LeuiY4Xra9LjPw5hZ5BaDeJkzr9+cOhXwjRTwmyHe7
eAeu9KIsgu1mcIdlz19ygrxf7yW0om46VsNlbZJ5bcZEQF9lEpscdIj3jQ4VdmK1
5t4zAzFGwwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFqAF/CsK2ouWJe2lm4vGQGH
SCa0MB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNDM0MmUzMDJlMzAyZjMxMzMyZDMxMzMyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMDL5AwDQYJKoZIhvcNAQELBQADggEBAHxu
lO26Aq7p6hPwmIhDMbMpq0Ht/IpFJZHYrphq3ZlFRDBBzxcVjv30Y7LRBp7tEUsu
J6I+O8SSnktCNvwgU/eX8jFYofJIUA0KXmqD2tJr5itQpABoMoxR/dQY4Ohhu+er
SiQvlb0BAZuf3gocxW/hiz6YqNEFr0TtsssOthzbK0XFpl9kzkaCycG6cZyPpMIG
bghlLDgL3lWM43rpByIHvECgu03mLSDiqxDlo1mz6elS9RxNsbrAj6IvHK8/ASTM
1Wk2UwFePEEWFwqV8d4edosWxfIzrrHGebiipBrC+QZZr60bGzTpEDUqn54oA3J/
mSW4Oh7x1zhn9wLiwAU=
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:24 2026 by rpki-client