Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3132382e302f31382d3138203d3e2035363530.roa
File:                     34372e3136302e3132382e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          f+rgQZwYYJ5s7FpNhfCEr5AwPypjIW/tyoeLYL9ww4g=
Subject key identifier:   96:A3:45:92:05:CF:D3:36:5E:05:B7:4E:B2:55:F5:F6:66:F8:9A:68
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       211D0273D7737ABCD07662C0EA607393607C12C6
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3132382e302f31382d3138203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:07 +0000
ROA not before:           Fri 01 May 2026 02:23:07 +0000
ROA not after:            Fri 30 Apr 2027 02:28:07 +0000
asID:                     5650
IP address blocks:        47.160.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1d:02:73:d7:73:7a:bc:d0:76:62:c0:ea:60:73:93:60:7c:12:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:07 2026 GMT
            Not After : Apr 30 02:28:07 2027 GMT
        Subject: CN=96A3459205CFD3365E05B74EB255F5F666F89A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:40:e8:59:f8:45:37:fb:70:ef:b1:48:a0:
                    db:61:b5:3a:24:fe:0c:c1:5b:33:94:00:1d:03:a2:
                    ab:9e:9f:62:b2:8a:fa:af:1a:02:8a:21:08:4a:60:
                    02:d8:fd:6f:7c:1b:fe:b1:2f:10:1b:d9:ec:1d:0e:
                    3d:2f:b5:13:80:3f:9b:f8:f2:30:1c:45:80:ea:29:
                    12:90:9b:8d:58:56:0d:be:a1:62:05:fd:2b:43:16:
                    91:5c:bd:09:ba:f7:81:50:96:f7:a8:2b:3a:c5:6e:
                    e9:ca:a9:ea:88:c6:96:81:f8:01:f1:ea:28:51:d6:
                    57:89:d6:ad:34:51:0e:9f:ee:cb:8d:3d:d1:0a:12:
                    c7:a5:a5:df:89:37:ce:89:38:ba:b2:f0:01:67:a2:
                    80:46:15:0e:46:36:08:ac:12:1c:41:8d:17:eb:ed:
                    dc:de:ca:8f:d5:8d:d3:99:60:f5:16:49:17:b6:68:
                    49:88:90:b7:f7:60:b5:be:2c:07:e8:49:16:81:ad:
                    eb:c2:7b:10:07:ec:22:6f:ce:dc:18:0e:70:a4:d7:
                    fb:24:91:69:dd:6e:b4:23:58:7e:1c:09:05:a2:fc:
                    83:3d:f1:40:04:30:42:76:6b:8b:b7:d4:25:89:db:
                    82:4f:75:38:11:4c:88:b1:99:b4:6e:21:ee:9b:7d:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A3:45:92:05:CF:D3:36:5E:05:B7:4E:B2:55:F5:F6:66:F8:9A:68
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e3132382e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:40:37:f4:a6:37:10:4e:1c:91:7d:c1:b1:00:38:d9:91:
         3a:26:5c:2c:9a:28:44:32:e5:3f:57:0b:53:ec:9e:d3:c4:06:
         da:92:e8:05:b1:2a:38:ea:36:a9:39:4d:79:ae:b4:a3:9e:a0:
         df:60:f3:bd:23:60:66:6a:c1:97:74:b3:48:c3:c9:96:44:08:
         0e:6a:64:0a:1b:28:01:c7:c7:4c:12:e1:48:cd:d7:9a:ff:e7:
         0d:74:50:1b:6c:65:04:c0:93:7b:d0:f5:a3:c4:85:4d:fe:8f:
         ad:83:b9:0e:94:36:cf:83:88:76:6b:f4:7a:e0:b8:53:55:7b:
         1f:2f:9c:3e:1f:98:a5:bd:07:e4:06:e0:27:aa:ef:8d:80:4e:
         a6:4e:a5:fc:ea:69:a7:14:59:1e:ca:fd:fe:ad:c9:70:d2:90:
         35:ba:84:c9:1f:52:18:af:e1:3a:95:ae:65:0e:72:c1:02:32:
         8c:08:c4:8f:35:14:c8:ce:69:a0:2f:93:5c:f8:d5:58:e1:61:
         6f:98:e5:74:2b:65:78:69:7c:80:39:4e:31:d6:53:fc:84:c5:
         7c:77:93:cc:af:4b:e4:df:60:e8:f0:4d:2c:ba:e3:a9:48:36:
         26:3c:65:30:c8:99:fe:6c:ff:29:0d:b7:32:c7:e7:2d:d6:27:
         5e:54:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:17 2026 by rpki-client