Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3137322e302f32322d3232203d3e2035363530.roa
File:                     34372e3136312e3137322e302f32322d3232203d3e2035363530.roa (raw, json)
Hash identifier:          wzc2prABvfewnuvsp6EjvLkNnlARkQSPEkPWfTnJVGA=
Subject key identifier:   96:34:2C:A9:CB:4C:AA:C1:04:CC:7A:01:7F:47:72:43:00:27:4A:64
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       328EA53FA7B5C1F58344A2B7FB7C0578CB739E5E
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3137322e302f32322d3232203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        47.161.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8e:a5:3f:a7:b5:c1:f5:83:44:a2:b7:fb:7c:05:78:cb:73:9e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=96342CA9CB4CAAC104CC7A017F47724300274A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:8a:7f:28:d9:13:8b:99:b7:64:79:57:26:
                    67:71:5c:7f:15:be:7f:fd:cb:48:5d:7f:09:1d:bf:
                    0d:4b:ea:e4:cb:f6:cf:31:3e:39:f1:fa:39:7c:69:
                    b9:35:55:fd:6d:3f:8a:45:bc:14:c9:5f:be:ad:59:
                    2d:ef:2d:8f:b5:29:15:1e:bf:51:91:7b:cb:b1:a6:
                    19:d4:2b:ab:42:73:7e:1f:85:4b:8c:ae:5f:ec:45:
                    d0:ef:e4:84:3d:72:2f:3c:d0:23:5d:4a:76:54:71:
                    e9:ea:e7:d5:ee:c1:44:5f:d2:8b:04:53:ee:e6:ac:
                    04:12:5f:87:11:be:1b:ef:c0:85:f1:ff:85:ac:94:
                    d3:ed:af:b9:97:ed:14:93:45:f0:84:5d:39:4b:4d:
                    cc:b9:4d:fe:75:ab:c6:ff:5b:47:b1:78:63:4f:00:
                    94:39:a7:02:50:01:a0:85:52:99:47:9f:8a:13:a1:
                    bd:75:36:f4:09:7e:8b:08:0c:0b:55:4f:da:70:31:
                    8c:25:49:67:fc:ce:6f:b7:5a:28:d4:d6:b0:96:aa:
                    cb:0f:eb:33:0e:28:b9:e2:f1:73:27:07:75:21:80:
                    05:af:c2:ac:fc:3e:24:da:3b:b8:cb:f2:10:ca:7e:
                    2d:eb:64:78:d7:e3:91:b4:49:35:23:6a:58:b6:b5:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:34:2C:A9:CB:4C:AA:C1:04:CC:7A:01:7F:47:72:43:00:27:4A:64
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3136312e3137322e302f32322d3232203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.161.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:3c:a7:4b:63:5a:02:76:be:5a:68:41:52:03:49:f6:3b:45:
         bb:9f:7c:40:18:95:67:32:eb:24:a9:2e:93:14:58:7b:dd:25:
         5e:0f:27:f4:89:cb:b8:22:f9:a7:f3:c6:9b:d2:55:95:8f:44:
         ff:f0:fa:1b:95:64:47:92:0b:41:79:cc:c4:e6:00:95:77:8a:
         b8:4d:44:1b:dc:5f:da:a4:45:8e:32:ec:7f:ff:ee:66:a4:60:
         7c:1e:1f:a4:f7:78:d6:c7:36:4e:4d:e2:25:61:26:5e:2c:f2:
         64:a5:f2:90:40:6c:e3:ac:13:a8:97:db:5c:93:b7:1c:0e:f0:
         a1:ee:8d:a3:b8:63:94:17:bf:85:c4:80:25:ad:69:b7:1a:c7:
         98:46:89:b4:5e:69:06:30:97:21:3f:53:fc:ee:70:b2:05:6c:
         45:cc:6f:3f:18:26:cb:7a:ba:46:9a:41:4a:c8:4b:3f:8b:96:
         0e:cf:a1:21:79:0c:64:e0:7b:8e:ba:0a:70:aa:88:13:01:a6:
         5a:18:ce:38:42:cb:b3:8d:2c:0f:e7:44:02:59:73:e7:14:2c:
         7b:2f:d1:4b:98:9c:96:24:d9:9d:5d:ce:3c:d1:e7:52:17:e2:
         69:76:7b:a9:dc:13:81:15:39:90:46:b9:28:a0:82:42:a7:f1:
         9e:d7:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:53 2026 by rpki-client