Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136302e302f32322d3232203d3e2035363530.roa
File:                     34372e3136312e3136302e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          0q69Ds93FKyG6uoF08lSkF4DOTkZ50g8fMjktVfzztM=
Subject key identifier:   5C:9E:8A:62:05:23:F7:9C:C2:19:54:69:1B:EF:4D:5B:69:90:F5:92
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       4655E1E6F062D32E6C8BC12E83929A527BA9968A
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136302e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.161.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:55:e1:e6:f0:62:d3:2e:6c:8b:c1:2e:83:92:9a:52:7b:a9:96:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=5C9E8A620523F79CC21954691BEF4D5B6990F592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:b3:18:99:eb:31:3f:99:e0:02:6d:d6:f6:
                    30:57:ca:86:e2:ad:ad:5d:d2:2f:f7:01:ed:a6:86:
                    f7:2e:1f:4a:48:4c:70:e5:42:26:29:8f:c2:7d:a6:
                    76:42:73:24:6a:93:aa:8f:77:76:b5:11:f8:9b:6a:
                    99:57:6b:65:6a:ca:cb:89:66:db:cd:1c:d9:b8:94:
                    0e:43:f9:5c:2b:fd:86:ec:bf:9d:26:99:ac:ab:46:
                    cd:d2:f5:a1:2f:8d:07:a1:2b:bc:4e:be:01:8b:f5:
                    0b:96:9b:04:5c:d6:99:d5:c5:d5:2d:73:a9:67:21:
                    8a:b6:02:d0:1a:6c:b0:f4:1e:fe:e9:a3:3e:cf:3d:
                    f4:69:07:93:af:34:b7:be:b1:87:5a:58:06:0c:be:
                    da:1d:a0:5f:71:34:26:9a:8d:12:8e:a3:1e:1c:a3:
                    cf:d8:71:33:e8:6a:38:a0:6f:cd:49:62:5b:ba:a2:
                    dd:78:4b:87:1f:a7:7d:77:7c:d5:ed:54:02:09:5a:
                    94:53:a3:95:90:ab:eb:f6:cc:e9:59:a2:5e:88:db:
                    07:ee:bf:9f:95:69:fe:88:1a:71:b1:a6:f3:de:51:
                    a6:9d:44:2e:f7:d5:d0:0d:26:ef:b9:ce:90:73:d1:
                    2a:b1:83:b4:3f:16:a0:0c:3c:1b:f4:5a:38:86:6b:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9E:8A:62:05:23:F7:9C:C2:19:54:69:1B:EF:4D:5B:69:90:F5:92
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136302e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.161.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:39:c0:d0:96:67:c0:c0:82:52:46:79:25:b2:5e:73:a0:f7:
         97:e4:c5:0c:f3:06:dd:0e:01:1f:fe:dc:a6:fc:1d:90:e9:b4:
         86:f3:19:88:22:a0:c4:9b:86:b5:b5:d1:a1:63:67:5c:ad:2f:
         33:52:dc:2f:07:16:fa:42:42:31:9a:26:e3:80:77:73:7e:88:
         e2:4d:44:9f:53:2a:08:0f:89:15:4f:68:77:c5:78:a0:34:55:
         13:ca:19:30:b1:94:1f:87:12:bb:b0:ba:13:56:2e:b7:df:50:
         3a:25:06:1e:98:9d:8c:4b:97:8d:f2:ab:46:84:d2:65:a7:b8:
         9a:c3:31:80:54:f7:7d:89:04:5f:05:fd:a0:19:11:63:0b:92:
         25:b6:15:81:0b:83:9b:63:c5:c4:2b:b1:00:3b:06:15:d8:1f:
         9a:2f:7f:e6:b2:58:f1:b1:06:cb:75:04:6e:5f:33:48:cc:5b:
         92:25:10:2b:79:df:b3:1a:c1:8d:3e:b1:b5:47:e8:4f:c9:b1:
         10:ca:6b:fb:64:80:69:45:6f:1e:54:86:39:f2:76:93:72:d8:
         aa:dd:3d:c4:2f:3c:f8:97:d6:0a:33:f0:f8:68:42:c4:36:e6:
         57:bb:58:30:e1:22:43:68:ca:c3:88:86:54:c7:f9:23:5d:de:
         62:4b:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:23 2026 by rpki-client