Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e36342e302f31382d3138203d3e2035363530.roa
File:                     34372e3136302e36342e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          tFA0r/zs84ZgyLm6vu0df7rBs5ExDm0Wg4sYT3Wl1X0=
Subject key identifier:   10:BC:8C:E9:CB:94:BE:E4:FF:F2:D5:5F:C0:FD:4A:77:F3:CC:07:9A
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       0D74D471CD39B60B9AA39A4A5422ED8E5BDD1623
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e36342e302f31382d3138203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        47.160.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:74:d4:71:cd:39:b6:0b:9a:a3:9a:4a:54:22:ed:8e:5b:dd:16:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=10BC8CE9CB94BEE4FFF2D55FC0FD4A77F3CC079A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:cf:61:9a:fb:9f:88:ff:eb:99:44:d9:f7:
                    69:3c:d3:1e:cb:95:c8:a9:6a:1d:4c:33:16:f4:9a:
                    92:c1:d9:17:33:04:0d:12:00:00:71:e2:7d:2e:92:
                    07:53:16:73:1e:b2:49:9b:f8:a7:b0:3a:bf:96:6a:
                    49:fa:19:56:d7:d5:51:68:56:c7:d6:35:67:ef:a6:
                    2a:67:d8:d5:bd:36:93:71:03:d2:72:9a:f5:3f:88:
                    fc:d7:4d:d3:f5:20:81:c5:7a:88:ee:0b:6a:63:f5:
                    a8:98:16:c2:17:9a:c3:44:26:ea:8c:83:64:ce:80:
                    f4:d0:01:14:64:bc:83:d2:ee:74:5a:46:78:08:68:
                    75:e1:37:36:fe:35:40:74:81:d1:53:7f:54:0d:6d:
                    79:7f:c2:16:c9:95:c9:cf:af:19:99:3b:f8:b7:15:
                    30:55:47:55:0d:d4:0f:9d:74:1a:96:16:7d:74:f6:
                    14:df:89:95:04:95:24:9d:e2:99:04:4a:bb:bd:20:
                    78:59:36:81:88:12:80:9a:23:76:dd:4b:02:4e:18:
                    54:41:0d:89:0a:70:a1:06:6d:b0:18:ab:60:79:ce:
                    08:02:0c:c6:65:99:94:9d:7d:08:eb:1e:c6:37:ad:
                    79:42:3a:e2:b0:b9:a9:d9:a3:bb:93:7d:07:5e:78:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BC:8C:E9:CB:94:BE:E4:FF:F2:D5:5F:C0:FD:4A:77:F3:CC:07:9A
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136302e36342e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.160.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:c0:2f:14:2c:5b:39:c4:78:91:e6:52:53:f1:b1:eb:ce:ae:
         b1:13:99:62:65:4b:fa:55:a7:b9:c0:0e:5e:ae:f2:e5:a6:40:
         3d:7f:e1:8d:1b:3a:c8:91:a9:6d:6b:3d:26:a5:22:54:c9:b3:
         97:08:a2:04:c6:b4:f8:63:b9:fe:e7:1f:30:6e:f7:78:57:77:
         4f:c1:bb:6b:3d:18:67:13:ca:de:80:c0:f8:b7:52:77:11:59:
         c9:ce:36:75:85:a5:a9:07:1a:3b:86:ef:02:40:30:6d:82:78:
         64:7c:44:68:80:63:87:0c:d0:94:e2:17:42:d0:88:58:a6:26:
         51:1a:b5:a1:66:5a:1d:47:db:1e:2f:03:ef:97:7a:de:34:6c:
         44:19:bd:01:c2:69:85:dd:c4:74:f7:14:34:3a:da:6b:63:14:
         c2:d5:2e:b4:50:8b:2b:a0:ea:9b:4c:8a:01:b4:28:2a:cd:6e:
         42:3b:b9:5b:bb:3e:6f:da:1e:50:60:15:33:5d:2e:61:8d:10:
         65:72:a4:11:0f:4d:6d:60:2d:81:35:d3:6b:c7:b8:1e:21:3a:
         03:a0:cf:9d:8d:ca:23:1c:b1:45:85:da:d9:34:82:e7:36:b9:
         d5:39:2e:eb:46:fb:f3:eb:dd:8a:0d:51:15:8f:67:a3:76:cd:
         5a:45:0e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:45 2026 by rpki-client