Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135382e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3135382e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          Wl4j1xlnSCN0I4/URqaNZLMrpGYMZRhIRZdPvJdIVUQ=
Subject key identifier:   F2:C4:0B:E8:44:44:CA:10:26:11:9E:12:B9:4F:37:F9:63:A3:09:FF
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       6D597FC42FC5ED03BD2425F9F0521FA15FCB0EB7
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135382e302e302f31362d3136203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        47.158.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:7f:c4:2f:c5:ed:03:bd:24:25:f9:f0:52:1f:a1:5f:cb:0e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=F2C40BE84444CA1026119E12B94F37F963A309FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:12:4e:c7:c0:dd:c9:29:cb:11:73:99:d3:
                    75:e3:03:f7:3b:ea:06:7c:c5:16:84:23:7f:a6:35:
                    84:c4:07:fc:72:f3:26:cd:5a:66:8e:42:36:a7:b7:
                    11:12:29:e5:45:15:22:ef:c5:ee:f2:67:fa:e6:6e:
                    59:ba:8b:a7:99:18:58:24:69:68:82:a0:6b:6c:40:
                    aa:71:0f:12:bb:e0:10:98:72:69:a8:df:e9:9a:2a:
                    22:94:74:65:c5:17:2d:99:6c:13:8c:ca:f7:9f:bd:
                    29:25:8e:9b:04:09:e7:c5:84:16:b3:dc:71:ed:87:
                    f3:57:50:7f:ab:25:8d:d0:f5:ef:89:c3:70:ed:ba:
                    bf:dd:15:78:58:d4:5d:e8:e8:10:56:db:f3:b3:5c:
                    ea:9a:8c:4e:9c:a8:ab:ae:64:92:e0:3c:d6:9b:f2:
                    9b:22:8c:7c:6d:50:d5:11:0c:e8:b9:21:3d:cf:a7:
                    51:c2:f4:01:13:14:e4:a3:54:00:52:4b:78:ba:6d:
                    01:f1:9e:7d:1f:05:6a:ac:49:0e:53:3b:bb:3f:44:
                    2a:83:e5:ef:ec:41:e5:25:e2:d7:92:8a:13:25:2c:
                    7f:82:fd:76:e7:06:1e:b3:6f:3a:9d:c7:19:f0:88:
                    ea:1e:ff:30:86:87:d2:93:15:8e:bf:9f:fd:cd:e3:
                    6e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:0B:E8:44:44:CA:10:26:11:9E:12:B9:4F:37:F9:63:A3:09:FF
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3135382e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:70:0d:8f:06:6f:a7:29:f4:e0:95:4f:0d:50:f1:1c:2c:
         0f:58:e6:6e:b9:d7:04:ad:4a:0d:9d:59:c8:b3:95:0f:5c:a9:
         a6:a6:14:0e:8e:19:d5:6e:71:dd:23:60:97:b6:e8:72:31:ac:
         5d:67:cb:0d:3b:d7:70:0f:e0:27:71:3a:ca:8a:17:52:ed:1e:
         ce:33:aa:3e:f2:6f:73:1f:b4:e0:7c:ba:cc:91:e9:56:78:d9:
         8c:cd:09:8f:52:68:1b:01:f6:a0:c5:26:fc:35:ba:af:a3:43:
         9a:6d:f8:a7:89:28:36:1a:3b:b1:93:e7:72:f6:3e:0f:c4:78:
         dc:06:f1:44:1f:12:fe:d8:10:2b:b1:aa:01:64:d8:b6:3b:fc:
         e2:ba:f3:8d:13:74:d2:9f:64:8f:68:d4:aa:06:6c:32:16:2b:
         5a:c1:c4:52:4d:89:27:9c:79:ea:14:06:c5:6d:ed:ce:24:39:
         05:ec:4f:03:79:bd:a3:cc:43:86:1f:ea:63:c1:6d:85:e2:9c:
         28:e9:cd:80:93:e0:ab:a9:8b:15:7a:ea:6f:24:b2:d4:fa:ad:
         ee:cb:92:91:19:68:5c:0d:ca:f4:b8:4e:7f:71:f5:48:12:0e:
         18:e0:3b:d5:e3:27:81:46:04:8b:8a:2d:c0:f8:d5:1a:98:13:
         c6:c5:cb:a9
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUbVl/xC/F7QO9JCX58FIfoV/LDrcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA5WhcNMjcwNDMwMDIyODA5
WjAzMTEwLwYDVQQDEyhGMkM0MEJFODQ0NDRDQTEwMjYxMTlFMTJCOTRGMzdGOTYz
QTMwOUZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolMSTsfA3ckp
yxFzmdN14wP3O+oGfMUWhCN/pjWExAf8cvMmzVpmjkI2p7cREinlRRUi78Xu8mf6
5m5ZuounmRhYJGlogqBrbECqcQ8Su+AQmHJpqN/pmioilHRlxRctmWwTjMr3n70p
JY6bBAnnxYQWs9xx7YfzV1B/qyWN0PXvicNw7bq/3RV4WNRd6OgQVtvzs1zqmoxO
nKirrmSS4DzWm/KbIox8bVDVEQzouSE9z6dRwvQBExTko1QAUkt4um0B8Z59HwVq
rEkOUzu7P0Qqg+Xv7EHlJeLXkooTJSx/gv125wYes286nccZ8IjqHv8whofSkxWO
v5/9zeNu1wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPLEC+hERMoQJhGeErlPN/lj
own/MB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNTM4MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAL54wDQYJKoZIhvcNAQELBQADggEBAGbG
cA2PBm+nKfTglU8NUPEcLA9Y5m651wStSg2dWcizlQ9cqaamFA6OGdVucd0jYJe2
6HIxrF1nyw0713AP4CdxOsqKF1LtHs4zqj7yb3MftOB8usyR6VZ42YzNCY9SaBsB
9qDFJvw1uq+jQ5pt+KeJKDYaO7GT53L2Pg/EeNwG8UQfEv7YECuxqgFk2LY7/OK6
840TdNKfZI9o1KoGbDIWK1rBxFJNiSeceeoUBsVt7c4kOQXsTwN5vaPMQ4Yf6mPB
bYXinCjpzYCT4KupixV66m8kstT6re7LkpEZaFwNyvS4Tn9x9UgSDhjgO9XjJ4FG
BIuKLcD41RqYE8bFy6k=
-----END CERTIFICATE-----
Generated at Tue May 12 22:50:05 2026 by rpki-client