Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137362e3234322e302f32342d3234203d3e20333935323932.roa
File:                     34372e3137362e3234322e302f32342d3234203d3e20333935323932.roa (raw, json)
Hash identifier:          88A0Xrpj/ORK/r7ut1kUDnvSzkB6/pTqG00IpvHb3po=
Subject key identifier:   27:76:DC:4B:7A:73:E9:7B:A9:FA:27:77:3E:09:47:2E:D9:95:E4:BA
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       04F4DD5F10B93403641292BA3211391EB75AF431
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137362e3234322e302f32342d3234203d3e20333935323932.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     395292
IP address blocks:        47.176.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f4:dd:5f:10:b9:34:03:64:12:92:ba:32:11:39:1e:b7:5a:f4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=2776DC4B7A73E97BA9FA27773E09472ED995E4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:c5:72:b0:d7:f2:b3:b7:fa:64:73:33:a7:
                    cf:8f:0e:6b:73:41:56:4d:06:03:b7:d2:62:7e:93:
                    ac:16:80:61:45:2c:70:1b:fc:7f:e9:ad:d9:14:43:
                    9b:c1:cb:cb:32:58:02:68:48:65:76:54:86:99:f7:
                    c3:6b:a4:20:ea:6f:32:8e:c8:35:90:71:d9:7c:03:
                    98:1a:04:c4:6e:df:29:e2:c4:4e:a7:26:1a:ce:de:
                    39:14:7f:60:a1:9b:4d:4c:98:7b:7e:07:84:bb:c7:
                    06:7c:9b:ad:6d:79:79:07:10:e2:82:d0:3a:38:80:
                    9c:59:9d:0d:3e:99:e6:ac:98:31:5f:c5:7d:fb:0a:
                    5e:16:8e:b4:f8:e9:41:55:f0:f8:a3:c6:4b:91:fc:
                    1b:ca:99:0a:00:99:8f:84:5c:a2:ae:b2:f5:d1:37:
                    8a:1d:c4:ef:e7:6b:c8:ce:82:aa:53:5c:ce:45:03:
                    e6:53:62:4f:bd:32:5b:fb:14:04:15:c5:db:11:03:
                    96:64:ba:12:87:2a:64:24:36:83:2f:3d:c0:f7:72:
                    3f:2e:4d:f4:0b:79:03:0f:22:20:0b:e3:11:4e:0e:
                    84:3a:1f:96:65:39:dd:5a:d9:11:1d:9b:75:9e:4a:
                    21:40:44:e3:22:5b:a3:8f:76:4b:e3:b8:b7:85:27:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:76:DC:4B:7A:73:E9:7B:A9:FA:27:77:3E:09:47:2E:D9:95:E4:BA
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137362e3234322e302f32342d3234203d3e20333935323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.176.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:60:1f:31:1e:81:83:07:c0:97:52:c4:ef:fe:ab:61:8e:a2:
         6c:d1:df:ff:ba:43:bf:61:7d:7f:18:8d:ff:11:71:52:b1:cc:
         6a:11:2c:54:0b:51:10:3f:58:11:27:64:c8:2b:95:1a:c6:30:
         bd:a9:a5:11:81:df:e3:02:d2:23:87:40:37:01:23:36:85:f7:
         8e:4c:68:2b:4f:7c:8d:b1:78:3e:a1:c7:5d:75:ea:97:93:d9:
         7a:dc:bc:f3:82:53:81:e2:ac:5b:8d:c7:34:a9:bf:d4:ba:ad:
         b5:25:3a:93:9e:2a:99:66:71:96:b1:13:97:5a:de:01:8a:66:
         7b:cc:0d:0e:57:45:95:c8:1f:99:d2:84:3c:3a:58:6f:5c:a6:
         53:5e:2e:18:88:aa:1c:70:d3:8a:c8:05:77:5f:6e:fb:da:ba:
         6a:54:74:3d:14:30:f2:f7:69:ca:de:20:69:6d:20:37:b7:49:
         01:54:4f:cb:1c:55:4e:7c:f1:0e:6f:dc:c8:c6:71:f7:d1:d0:
         8d:7e:ab:78:14:e3:37:32:b4:70:3f:b3:a7:1c:4a:5e:95:48:
         08:e3:7a:cd:28:c5:4e:cd:bc:f7:3d:47:85:39:b2:ee:e8:00:
         d1:d0:68:fc:a0:48:9b:63:71:67:90:f6:9b:43:60:20:d8:bd:
         52:34:a8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:47 2026 by rpki-client