Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137382e302e302f31372d3137203d3e2035363530.roa
File:                     34372e3137382e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          KZ7BL0SFgARofKZFSSATW8vuimrm0tFSJ8Qo4qkJvHs=
Subject key identifier:   31:F4:4E:90:54:5D:93:8E:47:1D:75:D1:A3:45:77:A9:2C:72:79:2E
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       7BF65B43D91F03440A4D78FF7BF366451C718F8D
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137382e302e302f31372d3137203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:09 +0000
ROA not before:           Fri 01 May 2026 02:23:09 +0000
ROA not after:            Fri 30 Apr 2027 02:28:09 +0000
asID:                     5650
IP address blocks:        47.178.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:5b:43:d9:1f:03:44:0a:4d:78:ff:7b:f3:66:45:1c:71:8f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:09 2026 GMT
            Not After : Apr 30 02:28:09 2027 GMT
        Subject: CN=31F44E90545D938E471D75D1A34577A92C72792E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:2a:8b:2d:18:e8:65:0d:98:60:37:1c:cf:
                    dc:d4:d1:10:69:43:3d:86:09:e2:2c:12:8f:ef:f5:
                    5f:92:01:b0:70:83:31:0d:d1:21:5e:62:ae:2c:70:
                    fa:33:f6:a4:2d:fc:ba:eb:79:95:b0:b6:c6:9c:f0:
                    0a:02:f3:c2:89:c4:db:6d:af:d9:c4:2e:2e:0d:6c:
                    62:cf:09:c9:b8:e6:0a:35:96:a5:c9:e3:1e:19:75:
                    62:46:ca:6d:26:e0:5b:b2:05:e5:de:73:ce:72:24:
                    90:82:b5:dd:a4:ba:a8:c9:45:c6:52:6c:04:0a:36:
                    b8:7c:48:58:8b:7a:41:61:18:16:ae:b2:7b:4c:b8:
                    cd:fa:15:b0:a2:db:6d:46:23:ab:91:c7:c4:16:fe:
                    d5:5f:5a:46:56:db:87:a7:fb:04:d9:e5:5e:88:3c:
                    56:4d:9b:be:65:14:5e:43:2d:99:b7:69:d2:b4:94:
                    ea:fd:64:b1:e1:8e:3e:12:b2:a9:cb:5a:37:45:f0:
                    a7:f3:e3:65:91:3e:5c:8c:1e:49:30:0d:b9:32:b2:
                    60:e1:34:d2:ec:54:37:67:6c:a1:bc:aa:00:c9:b5:
                    79:d6:e3:ae:0a:49:79:41:72:17:d7:c5:f9:f4:da:
                    91:30:e3:a8:39:e9:18:fa:6e:c0:4c:e0:82:a6:ce:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:4E:90:54:5D:93:8E:47:1D:75:D1:A3:45:77:A9:2C:72:79:2E
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137382e302e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.178.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:29:f8:ed:c2:20:55:b4:6d:85:51:d9:80:07:5b:9d:9c:
         b6:8a:82:a7:1e:ae:a5:e4:86:8b:66:bc:b4:a2:af:65:6d:7d:
         99:d0:92:2e:63:67:12:b2:e5:ad:96:05:29:a7:9e:3c:1f:9c:
         5a:77:8c:f3:c9:a9:92:13:d3:f9:d5:e3:51:41:df:64:2f:08:
         0b:2b:85:4d:bf:7c:3b:6e:70:47:58:c2:30:cf:bd:25:f0:03:
         88:d7:54:e9:55:30:34:0a:90:a1:95:0b:65:aa:d3:a2:6d:af:
         35:ec:c0:20:6c:0a:c1:6d:53:48:fe:b1:2a:6c:b4:65:4a:6d:
         f4:b8:09:f7:f1:37:76:39:ec:9c:c2:f6:4d:b6:43:b1:d6:38:
         98:cf:c1:ee:d6:fc:bd:cb:f8:2c:f1:17:15:f8:49:27:fb:f3:
         29:1f:89:12:8b:e2:15:8c:9e:d4:5f:fa:11:fa:54:38:66:21:
         8a:09:21:60:66:df:26:0d:7c:1d:87:ec:b7:d9:4d:74:a7:7a:
         5e:7d:bb:fd:4b:43:56:9d:72:58:25:4d:82:92:ef:3b:32:25:
         09:03:89:c5:a5:4a:c5:c8:82:ce:84:d3:41:07:16:87:cf:f1:
         24:4d:c2:e1:b3:9a:a5:37:7b:9a:35:4c:59:3f:1d:bf:80:a3:
         78:73:53:f6
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUe/ZbQ9kfA0QKTXj/e/NmRRxxj40wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA5WhcNMjcwNDMwMDIyODA5
WjAzMTEwLwYDVQQDEygzMUY0NEU5MDU0NUQ5MzhFNDcxRDc1RDFBMzQ1NzdBOTJD
NzI3OTJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcsqiy0Y6GUN
mGA3HM/c1NEQaUM9hgniLBKP7/VfkgGwcIMxDdEhXmKuLHD6M/akLfy663mVsLbG
nPAKAvPCicTbba/ZxC4uDWxizwnJuOYKNZalyeMeGXViRsptJuBbsgXl3nPOciSQ
grXdpLqoyUXGUmwECja4fEhYi3pBYRgWrrJ7TLjN+hWwotttRiOrkcfEFv7VX1pG
VtuHp/sE2eVeiDxWTZu+ZRReQy2Zt2nStJTq/WSx4Y4+ErKpy1o3RfCn8+NlkT5c
jB5JMA25MrJg4TTS7FQ3Z2yhvKoAybV51uOuCkl5QXIX18X59NqRMOOoOekY+m7A
TOCCps79YwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFDH0TpBUXZOORx110aNFd6ks
cnkuMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzNzM4MmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHL7IAMA0GCSqGSIb3DQEBCwUAA4IBAQA8
Iyn47cIgVbRthVHZgAdbnZy2ioKnHq6l5IaLZry0oq9lbX2Z0JIuY2cSsuWtlgUp
p548H5xad4zzyamSE9P51eNRQd9kLwgLK4VNv3w7bnBHWMIwz70l8AOI11TpVTA0
CpChlQtlqtOiba817MAgbArBbVNI/rEqbLRlSm30uAn38Td2OeycwvZNtkOx1jiY
z8Hu1vy9y/gs8RcV+Ekn+/MpH4kSi+IVjJ7UX/oR+lQ4ZiGKCSFgZt8mDXwdh+y3
2U10p3pefbv9S0NWnXJYJU2Cku87MiUJA4nFpUrFyILOhNNBBxaHz/EkTcLhs5ql
N3uaNUxZPx2/gKN4c1P2
-----END CERTIFICATE-----
Generated at Wed May 13 00:44:31 2026 by rpki-client