Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137392e31392e302f32342d3234203d3e20343030323439.roa
File:                     34372e3137392e31392e302f32342d3234203d3e20343030323439.roa (raw, json)
Hash identifier:          F7w90iXQLN588XQHRZ8C2N5pSiJFFAWXjAbPxavdNtE=
Subject key identifier:   97:C8:FC:4E:04:A8:0B:7B:13:FD:3A:0D:EF:98:4E:B9:AD:27:FB:31
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       071292579DD7A3379B177F2F05EAFCFDD397D1C7
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137392e31392e302f32342d3234203d3e20343030323439.roa
Signing time:             Fri 01 May 2026 02:28:05 +0000
ROA not before:           Fri 01 May 2026 02:23:05 +0000
ROA not after:            Fri 30 Apr 2027 02:28:05 +0000
asID:                     400249
IP address blocks:        47.179.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:12:92:57:9d:d7:a3:37:9b:17:7f:2f:05:ea:fc:fd:d3:97:d1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:05 2026 GMT
            Not After : Apr 30 02:28:05 2027 GMT
        Subject: CN=97C8FC4E04A80B7B13FD3A0DEF984EB9AD27FB31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:47:98:04:66:0e:49:b0:ee:7f:03:28:b1:
                    f5:e9:fd:f2:ed:d1:3e:78:e6:da:de:75:be:a5:e0:
                    16:70:ab:29:a1:34:c7:5d:7b:6d:82:50:be:72:10:
                    d5:c1:7c:43:9b:19:6c:95:a2:46:db:30:a8:90:ee:
                    6b:c3:a7:10:cc:5e:53:8b:cc:d8:41:7e:29:79:86:
                    d0:9f:d4:35:a5:c5:27:06:77:ea:22:e5:5a:c9:df:
                    99:d9:22:85:cb:5a:db:74:1e:59:91:56:af:14:71:
                    e6:44:b6:b1:13:3b:c5:f1:1b:3a:24:93:24:7e:96:
                    3f:09:12:9c:ef:92:47:cb:18:4b:b5:1e:fe:95:f6:
                    76:0f:5d:37:a4:70:a4:8e:c0:e9:5b:99:1a:a3:cd:
                    a0:b0:df:7d:27:59:37:c0:63:5e:07:15:05:2b:87:
                    cd:82:9b:b2:ba:bb:22:9b:8f:45:2b:e4:ae:50:06:
                    ce:5b:5b:c8:97:bf:4d:0e:02:ee:43:54:82:8b:2f:
                    cb:4c:b4:ab:a8:2f:96:48:7e:d0:90:92:e6:c3:11:
                    71:16:51:b7:7d:d2:44:e2:c6:c1:3a:e2:8e:c2:42:
                    62:fa:b4:ee:00:0e:7b:b2:32:02:76:93:36:bc:58:
                    7b:5e:5d:5d:5f:0b:c2:58:05:26:f9:91:be:e3:3f:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C8:FC:4E:04:A8:0B:7B:13:FD:3A:0D:EF:98:4E:B9:AD:27:FB:31
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3137392e31392e302f32342d3234203d3e20343030323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.179.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:71:69:88:88:87:49:d6:86:f8:80:f7:2f:e4:a7:9d:45:46:
         91:13:b5:c5:44:59:70:37:bf:e7:8f:c4:f0:4f:b0:c8:63:53:
         9e:6a:f4:45:17:66:41:ce:ae:74:97:c9:85:7e:5b:1b:c1:de:
         38:5c:45:9a:f6:91:86:dc:28:70:56:1e:a4:1e:c5:d2:07:bf:
         5b:53:d5:35:99:2f:e0:ec:e8:57:2c:13:93:06:7a:f5:8b:22:
         ad:48:8c:82:97:50:89:fb:40:59:d6:4d:7f:73:96:34:39:e8:
         eb:61:22:f9:aa:f3:09:e4:bc:be:7f:cd:00:a3:9d:ce:fc:18:
         ef:1a:8f:c5:a4:1d:f9:bd:20:bd:1d:5c:f2:43:32:92:4d:d2:
         61:34:d3:d5:98:d0:5a:bc:18:41:a5:bd:81:cd:98:3c:77:93:
         53:6e:90:21:13:b9:8c:4d:c8:d0:c1:cf:98:68:67:39:1f:b1:
         4b:8e:82:8b:17:a1:2a:36:5c:33:d2:a0:0e:18:1c:f8:36:d9:
         89:5c:2a:25:a7:de:a1:96:60:55:1d:5e:74:ee:10:c9:8b:00:
         9a:ae:b3:db:28:9b:e1:91:cd:fc:ff:29:d4:64:16:e8:6f:08:
         12:60:06:c6:5d:99:a5:da:0d:b6:fa:b1:49:3d:9f:ab:84:3a:
         83:d3:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:48 2026 by rpki-client