Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137372e302e302f31382d3138203d3e2035363530.roa
File:                     34372e3137372e302e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          R+urKaLa4r206Ucca5Z2v8AUQP71d5X+VQM+JGiZqvk=
Subject key identifier:   A1:1D:6B:DE:41:B1:9D:AD:1C:D1:2E:9B:6C:4F:D3:F9:28:D4:0F:71
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       2EE24993F5F1F618D56E0BCFEF2051A8F979C6E7
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137372e302e302f31382d3138203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     5650
IP address blocks:        47.177.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e2:49:93:f5:f1:f6:18:d5:6e:0b:cf:ef:20:51:a8:f9:79:c6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=A11D6BDE41B19DAD1CD12E9B6C4FD3F928D40F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:67:53:8a:a5:0a:18:67:30:59:01:ce:87:
                    58:b4:e5:1f:02:c6:45:d6:88:36:74:e9:da:57:ee:
                    0e:7c:0e:60:03:8c:d1:68:99:c6:1b:83:a6:10:c3:
                    60:84:54:4e:88:7c:d4:fa:74:8d:3a:d8:d6:3f:a8:
                    71:c3:4f:8b:a7:31:97:d6:26:27:98:96:a4:18:e1:
                    85:04:0d:8d:07:86:c4:c8:46:fd:68:bd:e2:9f:fe:
                    3e:ff:e8:c4:d4:c4:c8:44:d2:2f:26:d2:37:40:50:
                    f6:d6:cb:5d:2d:04:d9:cc:84:72:2b:c5:c8:9c:c0:
                    3a:ce:aa:22:86:ba:03:7c:63:b6:da:87:d7:d8:7f:
                    59:e4:f9:ae:bd:de:18:aa:3d:34:50:6b:86:6f:e8:
                    b6:fb:82:35:b8:df:e0:12:f4:0a:24:51:2f:df:e3:
                    68:c4:1d:c1:e3:36:37:24:7e:f4:4e:30:39:10:d0:
                    ab:f2:19:36:f2:6d:d7:d4:d2:29:6d:29:83:07:05:
                    43:95:8c:f3:d3:df:79:11:5e:28:7f:3c:d5:00:f5:
                    19:09:3a:ec:ec:96:77:59:2f:79:6c:30:d6:c3:2c:
                    e5:20:fe:83:97:c0:8f:46:e4:08:83:62:c7:22:27:
                    3d:c1:d1:f3:f8:51:50:97:9f:63:f8:d9:7f:8a:bb:
                    95:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1D:6B:DE:41:B1:9D:AD:1C:D1:2E:9B:6C:4F:D3:F9:28:D4:0F:71
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137372e302e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.177.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bf:40:e8:c0:a8:01:62:13:24:f7:e7:32:a9:cd:85:43:ec:9d:
         47:2c:fd:bb:9a:9b:64:4d:32:d8:13:1c:57:f0:2e:ea:50:30:
         74:e6:08:9f:ab:7f:4d:fc:57:93:26:58:7c:9d:c1:33:18:9f:
         fb:a3:0f:59:70:a0:eb:00:5f:eb:e5:a6:93:eb:b8:86:3a:a4:
         84:cd:af:95:99:bf:fd:14:30:ad:90:b6:5d:5c:4b:bd:4a:36:
         5b:c0:18:9c:17:ea:6b:b0:fb:37:cf:ae:35:f7:28:d5:32:6e:
         49:d2:2c:d0:0b:8d:d4:55:e5:c6:55:4b:8c:47:63:9c:8f:ff:
         c6:46:91:7e:3d:be:66:9b:93:1f:55:3c:cb:62:3b:a4:90:59:
         1a:16:02:f3:cd:81:2b:d0:56:1e:12:83:ef:49:5c:bb:63:7b:
         f6:99:0d:9d:e7:69:ee:49:22:93:94:50:e0:94:0c:22:65:e8:
         e6:17:d1:65:bb:f7:ce:5f:77:e0:03:89:88:d4:cf:87:1c:59:
         7d:c8:d0:5c:be:b6:77:09:42:5c:a1:90:26:5c:9a:ec:9d:70:
         db:ac:59:aa:01:51:60:d5:70:77:8c:a4:80:f6:8b:a4:e9:4d:
         3d:5b:63:ae:93:ad:4c:9b:4a:0e:e3:53:3f:b1:99:11:d7:73:
         b9:2d:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:58 2026 by rpki-client