Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135362e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3135362e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          YkqT2tMWh3NqEMt+1YBjGK7z6Cd3hJJP/z8kMkNhJVw=
Subject key identifier:   B0:32:CC:5D:84:FE:8F:80:D0:4B:1A:D8:99:56:29:C6:B2:85:9E:E1
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3C9DBFB92202B396234C313E1AE59B99F6AC34C5
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135362e302e302f31362d3136203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:bf:b9:22:02:b3:96:23:4c:31:3e:1a:e5:9b:99:f6:ac:34:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=B032CC5D84FE8F80D04B1AD8995629C6B2859EE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b0:27:15:75:b7:e2:94:06:0f:13:32:ea:c8:
                    69:3f:14:41:68:42:11:6b:c1:53:aa:f8:e8:1a:75:
                    2f:ca:80:7f:1c:63:56:3c:46:8f:12:03:da:b8:9a:
                    3d:12:ee:59:19:9d:7c:c6:33:be:73:db:8f:eb:85:
                    6e:9c:70:18:16:4e:53:ac:d3:ff:40:bd:6d:9e:9b:
                    0b:d1:42:a7:b6:13:41:9d:4c:6c:8a:52:08:27:a1:
                    93:5f:82:c8:52:e2:40:d1:9a:07:6b:22:df:a8:61:
                    69:97:7f:60:1b:fa:d0:66:9d:03:6b:86:bc:18:d2:
                    a7:7f:bc:4a:c7:65:c5:aa:ce:03:04:fc:16:b6:51:
                    8b:a3:27:ae:3c:b0:b6:e6:4d:28:6f:12:15:71:71:
                    92:a0:0b:f7:31:46:19:cb:7a:7b:be:99:a2:68:14:
                    64:18:38:62:c2:9c:ba:83:6e:06:74:37:55:a6:3e:
                    2e:40:1d:5e:2f:57:39:48:3b:dd:20:1e:32:7a:75:
                    ec:76:ae:88:2d:37:0f:03:86:2a:e1:df:ca:47:36:
                    d5:38:54:bd:a6:43:88:5a:ea:35:b7:85:00:87:fa:
                    41:28:2d:71:32:cd:e2:e3:32:95:66:2d:35:e2:bb:
                    8c:ac:62:a8:48:82:51:6d:d2:b1:a0:e4:74:42:19:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:32:CC:5D:84:FE:8F:80:D0:4B:1A:D8:99:56:29:C6:B2:85:9E:E1
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135362e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:73:64:bf:ce:22:ef:51:56:7d:8d:27:8e:47:c5:96:c4:c5:
         e1:82:f6:b5:93:5d:55:ea:97:c1:18:48:29:cf:4b:ea:41:5a:
         a2:da:96:0d:95:3a:be:cf:ce:60:3d:dd:55:0b:2a:2f:62:a4:
         1c:05:74:6e:88:d5:18:9c:ff:d9:a7:8f:fc:1a:da:e7:53:6a:
         0e:a0:1a:eb:93:0a:81:48:34:7c:b9:f9:fb:8b:97:27:98:b0:
         96:9f:95:3d:08:57:ab:6e:89:78:3f:f3:da:22:1a:f3:f0:e8:
         15:be:36:d1:81:6b:66:7a:72:a8:c3:94:75:28:33:5d:02:3a:
         b7:24:b5:a7:46:af:06:39:3f:fb:55:7f:96:49:04:0c:30:95:
         34:d3:1b:a4:87:c2:b0:37:d0:e5:f0:e4:3f:a2:3e:25:8b:7c:
         37:7b:08:3d:9b:a6:00:e0:eb:43:a6:46:a1:b5:fb:61:8f:4a:
         24:ee:26:8f:eb:18:a3:65:a2:10:c2:5a:bd:92:5e:fd:7a:0c:
         03:4f:98:04:12:12:9f:0e:81:7d:96:17:16:71:15:cf:c6:c6:
         b2:19:12:6a:67:7b:d3:9f:ae:d9:01:32:fc:c7:a4:b1:02:a7:
         e8:e2:b7:4c:dc:91:5a:a0:da:3f:9a:fe:46:a3:76:78:60:d5:
         31:29:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:55 2026 by rpki-client