Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33342e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e33342e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          hqiAe8YB6y9NfZR6TcCLeVCNMinyZB0vUuHQ+RZ3PPI=
Subject key identifier:   36:F1:6A:9E:35:E4:50:26:0E:5E:B0:18:CF:4C:75:86:B3:09:03:08
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       282E611D398D1557DF8B5A52AFF308ECFA717B32
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33342e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:08 +0000
ROA not before:           Fri 01 May 2026 02:23:08 +0000
ROA not after:            Fri 30 Apr 2027 02:28:08 +0000
asID:                     5650
IP address blocks:        47.181.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:61:1d:39:8d:15:57:df:8b:5a:52:af:f3:08:ec:fa:71:7b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:08 2026 GMT
            Not After : Apr 30 02:28:08 2027 GMT
        Subject: CN=36F16A9E35E450260E5EB018CF4C7586B3090308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:53:38:01:a3:eb:db:f9:d9:9f:3c:d6:56:
                    71:79:79:0c:77:2c:1e:9c:42:3a:bf:91:44:0f:9e:
                    5e:bf:cf:43:4d:c3:f9:7c:dc:4c:0c:d1:d7:9b:04:
                    2f:23:78:2a:81:3f:f2:3e:f0:44:a1:d7:e2:6c:15:
                    31:46:87:3b:fd:3c:4b:88:d6:06:f4:0a:e4:31:5a:
                    94:b1:3b:ec:4c:b2:0e:11:9d:74:f2:b1:ee:60:e6:
                    ea:ed:76:45:d3:c0:6f:59:40:38:34:1d:a9:71:d2:
                    01:04:d7:a4:ca:6a:56:ca:e6:f6:f9:73:ba:24:f3:
                    14:53:eb:39:c1:05:a5:a0:81:76:68:2d:5b:fc:6b:
                    92:80:91:78:30:57:8a:8a:a4:3a:79:67:65:b7:38:
                    a9:bb:f8:13:1e:c5:2a:49:2e:e7:88:15:c1:79:8f:
                    95:41:7e:1b:28:91:80:a5:16:a8:19:6b:c8:4f:9c:
                    2f:9b:b9:be:5a:05:7c:79:e2:12:5d:c2:55:e0:07:
                    64:97:dc:35:54:e4:3a:0f:86:e6:16:a4:41:23:cc:
                    85:d0:34:6d:7f:a7:2b:62:2c:f1:92:77:d3:8c:39:
                    db:32:af:0f:d1:ce:15:38:97:f6:8c:4e:cb:46:9b:
                    c9:f3:3b:7b:99:57:99:9c:5c:2f:4d:5d:44:46:56:
                    55:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F1:6A:9E:35:E4:50:26:0E:5E:B0:18:CF:4C:75:86:B3:09:03:08
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e33342e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:4c:76:7d:96:85:4e:14:ec:a1:28:ea:f8:66:ed:3e:ff:
         d9:9a:96:5b:2e:c3:2a:64:a6:29:0d:0e:11:68:89:af:75:e6:
         f8:ab:16:5c:5a:47:d4:67:ee:21:30:9d:1a:79:65:4b:be:61:
         ef:2e:b7:81:d2:20:15:a4:6a:b8:0d:f5:f2:7f:d4:48:4e:69:
         28:e6:02:6e:55:2e:be:c3:5c:90:b2:70:07:06:b3:b3:c0:da:
         be:9c:46:1b:74:fd:e8:56:1c:9c:9f:01:02:9e:88:70:47:bc:
         1e:78:84:6e:8b:76:ab:eb:a6:09:25:1e:c3:77:13:cb:da:8e:
         25:c3:fa:10:17:47:c6:b4:6e:4f:a6:5c:7b:39:6c:d5:29:8c:
         90:e8:01:43:63:24:a9:1e:8e:cd:75:ef:b3:92:85:cc:9e:49:
         ba:04:a7:e3:23:d2:56:08:6e:d6:f3:ea:4b:06:e2:ea:84:e8:
         11:9e:fc:9d:68:a8:c5:e7:08:91:d5:58:d4:a6:4a:91:76:10:
         15:e1:72:eb:8b:2d:6d:64:29:08:73:77:76:31:a9:75:c8:5e:
         ad:db:b6:07:2b:37:91:60:54:2b:9b:91:cd:2d:7e:50:56:f2:
         6c:cf:d3:d6:67:fc:98:4e:b1:d4:bd:72:36:f1:88:ae:5a:32:
         55:4f:ad:f4
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUKC5hHTmNFVffi1pSr/MI7PpxezIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh
OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA4WhcNMjcwNDMwMDIyODA4
WjAzMTEwLwYDVQQDEygzNkYxNkE5RTM1RTQ1MDI2MEU1RUIwMThDRjRDNzU4NkIz
MDkwMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ndTOAGj69v5
2Z881lZxeXkMdywenEI6v5FED55ev89DTcP5fNxMDNHXmwQvI3gqgT/yPvBEodfi
bBUxRoc7/TxLiNYG9ArkMVqUsTvsTLIOEZ108rHuYObq7XZF08BvWUA4NB2pcdIB
BNekympWyub2+XO6JPMUU+s5wQWloIF2aC1b/GuSgJF4MFeKiqQ6eWdltzipu/gT
HsUqSS7niBXBeY+VQX4bKJGApRaoGWvIT5wvm7m+WgV8eeISXcJV4Adkl9w1VOQ6
D4bmFqRBI8yF0DRtf6crYizxknfTjDnbMq8P0c4VOJf2jE7LRpvJ8zt7mVeZnFwv
TV1ERlZVmwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDbxap415FAmDl6wGM9MdYaz
CQMIMB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv
Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2
NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzMvMzQzNzJlMzEzODMxMmUzMzM0MmUzMDJmMzIzMzJkMzIzMzIw
M2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEvtSIwDQYJKoZIhvcNAQELBQADggEB
AEWLTHZ9loVOFOyhKOr4Zu0+/9mallsuwypkpikNDhFoia915virFlxaR9Rn7iEw
nRp5ZUu+Ye8ut4HSIBWkargN9fJ/1EhOaSjmAm5VLr7DXJCycAcGs7PA2r6cRht0
/ehWHJyfAQKeiHBHvB54hG6LdqvrpgklHsN3E8vajiXD+hAXR8a0bk+mXHs5bNUp
jJDoAUNjJKkejs1177OShcyeSboEp+Mj0lYIbtbz6ksG4uqE6BGe/J1oqMXnCJHV
WNSmSpF2EBXhcuuLLW1kKQhzd3YxqXXIXq3btgcrN5FgVCubkc0tflBW8mzP09Zn
/JhOsdS9cjbxiK5aMlVPrfQ=
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:03 2026 by rpki-client