Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e302e302f31392d3139203d3e2035363530.roa
File:                     34372e3138312e302e302f31392d3139203d3e2035363530.roa (raw, json)
Hash identifier:          YVIvJPbSi3ITc8l8fmx1yTfZwT7RdfBVZ86AS17/yFY=
Subject key identifier:   A7:8B:BF:BD:FE:14:C8:95:DD:50:15:FE:79:B3:4A:02:4A:6C:8D:3B
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       26C2D5E7206AAA1D1F645CFA7406D29FE6490F5F
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e302e302f31392d3139203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        47.181.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c2:d5:e7:20:6a:aa:1d:1f:64:5c:fa:74:06:d2:9f:e6:49:0f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=A78BBFBDFE14C895DD5015FE79B34A024A6C8D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:d2:3a:f5:9d:54:37:0d:76:31:8a:56:0c:
                    90:5b:c9:a9:c0:df:63:3f:4e:14:64:7f:9e:1f:c4:
                    eb:78:00:dc:aa:1a:ca:77:39:13:b2:ac:76:1f:ec:
                    60:c0:f6:0d:62:9f:1d:19:7e:58:e1:b6:f7:59:bf:
                    f3:d7:37:0b:bf:fa:58:6a:e5:79:b0:aa:c9:ca:0f:
                    8b:bc:85:6f:12:15:f3:d6:c4:fd:69:0c:a8:68:2e:
                    36:57:33:c6:7c:fd:84:c9:f5:fb:5e:e1:68:01:bf:
                    62:c1:ea:f1:66:ab:c7:d1:8a:a6:56:82:75:dd:ff:
                    5c:10:0c:79:77:ff:2c:45:9a:89:3d:d7:4a:08:79:
                    0f:d0:b0:a0:83:df:c8:ea:6f:48:ec:96:c6:f2:52:
                    18:6b:91:6e:1e:59:2a:85:d5:2e:90:06:a1:1d:f8:
                    43:45:60:9f:ac:bd:9a:b5:33:0e:38:4b:89:30:68:
                    1b:dd:22:78:f3:7f:cf:11:33:d2:a7:8d:76:78:4f:
                    aa:d6:1a:ce:6b:3f:6c:84:66:e0:2d:06:35:9d:c2:
                    e4:40:ee:fb:2d:9d:26:62:1d:28:71:f5:8c:ef:be:
                    dd:9c:a2:90:eb:70:60:30:fb:bd:77:68:b7:26:af:
                    ce:6f:94:96:7f:c5:29:aa:b6:4c:ba:e0:f9:85:f8:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8B:BF:BD:FE:14:C8:95:DD:50:15:FE:79:B3:4A:02:4A:6C:8D:3B
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e302e302f31392d3139203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:82:ad:9c:a0:20:fd:42:57:d7:f6:8a:7d:ba:5e:0f:d1:95:
         0e:ad:57:8c:2e:19:a1:d0:59:45:c3:73:43:ae:c8:35:79:e6:
         3e:4b:33:17:a8:52:fe:69:10:3b:c1:f0:05:fc:52:30:a5:1d:
         68:ae:36:15:d5:84:ea:c3:9e:52:2c:9b:23:9d:0d:75:2c:b5:
         14:03:1b:a9:69:42:01:7a:f9:07:be:01:fa:48:af:89:d5:9f:
         8f:5c:56:38:03:70:e5:ff:bc:6a:4e:8f:00:f3:ca:6a:a0:40:
         0c:f8:1b:18:98:11:17:81:b2:f3:1a:20:bb:56:d5:94:41:cd:
         ae:c4:c2:9b:70:a2:80:37:d5:64:ac:b1:c5:a3:1b:24:42:c8:
         48:47:f6:84:f8:a2:87:12:5f:83:71:c9:d1:d0:b8:15:6e:f7:
         04:56:49:8f:f7:0b:3c:30:c0:82:c7:c2:3b:61:5c:15:bd:2a:
         0b:c3:66:2c:99:44:66:5b:ac:50:7b:f6:df:cf:00:e1:00:45:
         7c:0b:fe:10:9c:96:c0:22:69:57:0b:c5:62:ba:10:80:63:c9:
         16:d9:61:44:23:d5:39:ac:54:eb:6a:83:85:30:38:b4:10:20:
         76:e0:52:93:77:de:e2:93:26:cc:cb:f7:34:69:64:eb:89:d4:
         cd:d2:cf:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:17:01 2026 by rpki-client