Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136382e302f32322d3232203d3e2035363530.roa
File:                     34372e3136312e3136382e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          h/YxkbWFum5LCkoOmIE0i1E8JupNKFt8uhk/Gq9fab4=
Subject key identifier:   B8:36:65:42:21:9C:E8:16:96:82:02:17:3F:24:1B:30:92:20:D6:63
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3392F4B35932A09537CC5390F91636A32303E6B6
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136382e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:07 +0000
ROA not before:           Fri 01 May 2026 02:23:07 +0000
ROA not after:            Fri 30 Apr 2027 02:28:07 +0000
asID:                     5650
IP address blocks:        47.161.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:92:f4:b3:59:32:a0:95:37:cc:53:90:f9:16:36:a3:23:03:e6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:07 2026 GMT
            Not After : Apr 30 02:28:07 2027 GMT
        Subject: CN=B8366542219CE816968202173F241B309220D663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7a:df:90:b9:e2:5a:06:00:81:9f:aa:e1:e6:
                    30:9f:48:b6:77:3f:fe:31:8d:65:c7:57:23:a9:f6:
                    ee:4b:84:84:c9:b2:ff:65:b7:5a:39:f8:97:15:ad:
                    87:f7:5a:8c:44:b9:16:da:b0:3a:78:10:8a:35:e4:
                    78:d8:0f:c2:e9:3a:d7:92:1f:b1:77:90:43:81:23:
                    f4:2a:60:d1:43:90:1a:a8:9b:eb:00:1f:32:c2:a6:
                    89:84:57:a7:ea:93:4b:de:f7:c4:41:55:0d:dd:81:
                    96:4d:65:b9:7f:ef:ea:2b:b6:0d:66:ee:7b:30:52:
                    49:f4:8b:d1:d6:67:65:20:b0:0a:cd:a9:97:43:01:
                    86:cc:74:63:cb:98:39:e0:24:b0:99:90:1f:9b:b2:
                    aa:e4:21:66:f9:17:0f:47:8d:a3:66:12:96:45:4d:
                    e5:e2:38:1e:34:f8:52:05:e6:fa:78:32:d9:15:45:
                    18:34:c5:ec:ff:e7:c0:21:5e:b1:1c:53:cc:54:82:
                    60:02:ea:7b:6f:d6:d7:e4:7c:ac:32:74:0e:7b:df:
                    c8:94:5b:da:0a:d9:35:8b:51:b7:d5:03:fa:68:76:
                    a5:ad:2a:49:e4:8c:06:83:47:52:58:0f:49:c1:37:
                    c7:ae:1a:3c:2c:d2:ba:4a:ea:41:af:2c:a9:e4:02:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:36:65:42:21:9C:E8:16:96:82:02:17:3F:24:1B:30:92:20:D6:63
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3136382e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.161.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:c2:71:ce:12:39:3b:6a:a7:de:c8:7d:b0:dd:5b:9d:85:f3:
         fd:56:04:77:f1:81:91:79:04:5e:1b:09:35:3c:3c:95:26:6c:
         83:66:fb:4e:a5:fb:c2:30:10:8c:bf:33:b6:16:42:96:0f:b1:
         85:7c:29:ef:7e:85:ef:43:53:71:19:14:07:4e:bd:b3:b4:95:
         f6:9d:be:79:0f:d4:8a:d5:25:e9:23:b4:f5:e0:8a:71:1e:91:
         31:a3:cd:1f:b3:e7:9f:f7:56:1f:ea:67:ab:8c:83:e8:4f:a4:
         a4:9d:26:10:8b:4a:f2:b6:55:33:79:b9:d4:1d:06:1d:68:b4:
         b5:01:ec:bc:5c:83:a6:d0:4a:33:bc:e7:93:6c:6e:d8:e7:b8:
         f6:16:76:3c:af:18:ef:c7:d5:88:19:bc:83:a6:b8:7a:05:19:
         93:88:cf:5d:d7:f9:c8:36:dd:c7:ea:4d:ed:03:8c:95:9b:83:
         f9:3a:4d:9e:86:8c:a9:94:4f:63:86:db:2f:a1:05:f9:8a:93:
         0d:ea:cd:3f:c6:cc:d3:19:e7:2b:2b:a3:6c:e6:04:8c:f4:2c:
         bd:a4:b8:71:12:77:07:ad:2e:20:0c:af:b8:c4:8e:c7:b5:e6:
         8a:3a:92:31:25:a5:d9:41:5a:73:ac:da:f3:ed:7e:de:df:14:
         c8:18:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:35 2026 by rpki-client