Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e302e302f31382d3138203d3e2035363530.roa
File:                     34372e3136302e302e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          sbu3YHFOobBRtt5sN5F6jkDt3uwcldLNTdcXs23oWDU=
Subject key identifier:   8D:49:9D:52:F3:49:16:A3:8F:E2:B6:51:EB:FA:62:F1:B2:3D:C2:09
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       07A1FCA91EF1596233E1DEE1ABE6CB2AB292D6AB
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e302e302f31382d3138203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        47.160.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a1:fc:a9:1e:f1:59:62:33:e1:de:e1:ab:e6:cb:2a:b2:92:d6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=8D499D52F34916A38FE2B651EBFA62F1B23DC209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:67:9e:f5:db:b0:25:82:ec:b7:85:35:2c:
                    71:bf:30:0e:b8:96:2f:c8:5e:a4:03:c0:bd:44:78:
                    86:e1:bc:94:ad:75:c5:2b:c9:e2:6c:b7:9c:e3:ca:
                    99:93:55:73:4d:82:5a:4a:b4:2b:0a:9d:72:8b:9e:
                    97:6e:82:51:dd:12:44:57:28:84:d1:a2:0c:23:4d:
                    05:60:09:f0:58:71:44:e0:2e:06:7d:bb:ab:3c:54:
                    b9:61:25:5d:86:fc:d8:4b:ed:57:02:31:df:d4:7b:
                    0d:cb:58:46:18:6c:22:12:80:1f:79:ae:bf:96:22:
                    e2:23:eb:0f:6c:58:90:29:e4:b9:d7:2d:25:62:62:
                    12:fb:a8:02:97:31:82:6d:91:8a:5d:ca:39:d7:b5:
                    07:bc:5e:7c:24:9f:eb:0d:38:65:0a:f4:ea:46:54:
                    d3:6b:a3:dd:7f:03:b5:35:4e:7f:ab:53:8a:e2:d6:
                    50:37:02:e7:20:c6:8e:45:3f:c5:de:72:63:2d:39:
                    2e:db:62:57:cc:ad:1f:1c:6b:27:ab:10:c4:40:f1:
                    22:f4:4e:b1:87:24:e3:54:3e:af:6f:c5:31:e5:61:
                    9e:c9:a7:74:7f:bd:ad:92:82:14:bc:4d:79:d0:63:
                    b4:d1:73:90:0a:f1:0d:79:8c:e6:48:01:6d:31:df:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:49:9D:52:F3:49:16:A3:8F:E2:B6:51:EB:FA:62:F1:B2:3D:C2:09
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e302e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         88:5c:1e:16:c6:fd:41:04:da:69:60:06:60:78:41:27:48:e4:
         42:8a:61:2f:2a:06:14:4d:96:af:6a:14:ad:45:6f:b2:30:8d:
         8b:8c:9c:4c:f9:1b:8a:94:d8:bc:0a:1f:74:55:6d:be:3e:e4:
         32:a9:ab:d6:a4:d4:4d:87:b0:15:a5:31:da:7b:9c:e8:c0:dc:
         42:c2:91:24:4f:d0:be:41:97:6f:b1:cd:fc:af:94:49:c7:5d:
         b6:e8:fd:c5:1e:ed:a5:9e:f9:f8:d4:f7:de:fc:e3:65:e3:e5:
         02:37:5f:0c:10:65:6b:70:99:8c:71:3e:49:a7:8a:ce:99:a2:
         73:3d:69:5d:a6:36:85:77:1d:bc:59:51:35:63:c7:88:d6:a8:
         64:ab:c9:f9:ea:09:e0:52:ed:56:eb:2c:7d:cf:34:2a:08:3d:
         00:24:c1:5c:9a:7b:9d:a7:35:6a:a7:9c:0e:22:09:de:f3:58:
         d5:ea:99:e4:26:06:81:1d:c5:47:ba:9f:84:00:cc:af:d9:5b:
         f4:a0:46:ed:df:cf:da:07:ef:21:1a:70:61:57:6d:d1:7d:38:
         b3:f5:e2:dd:7c:d5:ec:49:40:a7:be:72:46:66:87:26:18:f4:
         90:cd:98:dd:ed:ca:04:5d:3d:28:6c:ba:85:f3:b2:2e:54:48:
         64:67:7a:a9
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUB6H8qR7xWWIz4d7hq+bLKrKS1qswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA4WhcNMjcwNDMwMDIyODA4
WjAzMTEwLwYDVQQDEyg4RDQ5OUQ1MkYzNDkxNkEzOEZFMkI2NTFFQkZBNjJGMUIy
M0RDMjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCBnnvXbsCWC
7LeFNSxxvzAOuJYvyF6kA8C9RHiG4byUrXXFK8nibLec48qZk1VzTYJaSrQrCp1y
i56XboJR3RJEVyiE0aIMI00FYAnwWHFE4C4GfburPFS5YSVdhvzYS+1XAjHf1HsN
y1hGGGwiEoAfea6/liLiI+sPbFiQKeS51y0lYmIS+6gClzGCbZGKXco517UHvF58
JJ/rDThlCvTqRlTTa6PdfwO1NU5/q1OK4tZQNwLnIMaORT/F3nJjLTku22JXzK0f
HGsnqxDEQPEi9E6xhyTjVD6vb8Ux5WGeyad0f72tkoIUvE150GO00XOQCvENeYzm
SAFtMd9pWwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFI1JnVLzSRajj+K2Uev6YvGy
PcIJMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNjMwMmUzMDJlMzAyZjMxMzgyZDMxMzgyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGL6AAMA0GCSqGSIb3DQEBCwUAA4IBAQCI
XB4Wxv1BBNppYAZgeEEnSORCimEvKgYUTZavahStRW+yMI2LjJxM+RuKlNi8Ch90
VW2+PuQyqavWpNRNh7AVpTHae5zowNxCwpEkT9C+QZdvsc38r5RJx1226P3FHu2l
nvn41Pfe/ONl4+UCN18MEGVrcJmMcT5Jp4rOmaJzPWldpjaFdx28WVE1Y8eI1qhk
q8n56gngUu1W6yx9zzQqCD0AJMFcmnudpzVqp5wOIgne81jV6pnkJgaBHcVHup+E
AMyv2Vv0oEbt38/aB+8hGnBhV23RfTiz9eLdfNXsSUCnvnJGZocmGPSQzZjd7coE
XT0obLqF87IuVEhkZ3qp
-----END CERTIFICATE-----
Generated at Tue May 12 22:16:32 2026 by rpki-client