Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34322e302f32332d3233203d3e2035363530.roa
File:                     34372e3138312e34322e302f32332d3233203d3e2035363530.roa (raw, json)
Hash identifier:          MdGalDMGpvVosQFSBSkPlCfxVNCqCDrlsBnCei7Znx0=
Subject key identifier:   20:B9:83:8E:68:3E:05:FA:5F:56:8B:29:32:4F:7A:75:29:02:B2:4D
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       013697A89CC726244CAA472924BCCA7374B99C83
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34322e302f32332d3233203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:06 +0000
ROA not before:           Fri 01 May 2026 02:23:06 +0000
ROA not after:            Fri 30 Apr 2027 02:28:06 +0000
asID:                     5650
IP address blocks:        47.181.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:36:97:a8:9c:c7:26:24:4c:aa:47:29:24:bc:ca:73:74:b9:9c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:06 2026 GMT
            Not After : Apr 30 02:28:06 2027 GMT
        Subject: CN=20B9838E683E05FA5F568B29324F7A752902B24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8b:f3:b8:bb:8b:93:8e:60:74:b6:f9:22:c2:
                    c2:fa:36:7f:8f:b8:49:6d:8c:4c:c0:e4:44:eb:8b:
                    27:55:f9:f6:9c:0d:3c:ea:b8:fb:50:b4:72:9e:cc:
                    72:82:7b:df:3c:26:6d:4c:38:98:24:76:df:bb:b5:
                    69:52:ec:90:d8:3c:48:a2:80:17:0a:a5:3e:95:80:
                    2c:88:c4:03:f9:ca:43:c7:cd:05:36:a8:93:ed:a2:
                    4e:39:f8:44:87:83:5f:13:78:f2:45:68:67:3e:24:
                    72:bb:ec:e4:12:00:2d:1a:48:f2:20:a3:01:37:41:
                    bf:be:a3:a0:80:f9:a7:0d:9d:ef:6d:04:6b:35:c7:
                    6b:5f:9e:49:b6:5e:35:f7:dd:3b:52:aa:10:97:11:
                    8c:7d:6b:b4:dd:92:94:6f:0c:7d:4c:72:be:43:1a:
                    24:48:7c:38:b6:d3:de:a4:01:bc:f6:82:92:11:0f:
                    12:d7:cd:be:7c:07:0e:01:77:9b:ea:5f:2f:50:a6:
                    4d:ed:a5:7f:79:18:c9:cb:54:af:f5:4c:7b:8c:bb:
                    6e:eb:53:76:2a:2b:21:81:f2:e3:cb:ed:55:17:b6:
                    39:5a:58:74:33:f9:81:af:d1:03:83:54:8a:61:b4:
                    0e:31:98:e4:f6:b3:52:1b:e3:e4:8b:5d:89:39:85:
                    92:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B9:83:8E:68:3E:05:FA:5F:56:8B:29:32:4F:7A:75:29:02:B2:4D
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e34322e302f32332d3233203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:23:15:83:22:f5:4e:0d:3f:3f:9f:0d:18:1e:19:78:2d:7e:
         56:f6:ca:b4:77:41:fa:75:0d:ac:49:02:aa:f3:00:2c:36:fa:
         fb:70:d6:a7:7c:09:10:dd:4b:b1:4e:5c:07:2b:92:19:20:58:
         8e:da:d8:e1:5e:c4:aa:82:56:b0:63:48:88:56:fb:07:4d:b8:
         ea:63:a2:0e:dd:99:70:a1:ea:d6:80:fa:dc:ab:3a:0e:72:30:
         58:1d:e1:f5:41:50:3e:bb:13:08:8c:14:ab:27:88:e7:3b:e6:
         7d:11:4e:ad:62:2f:0f:d4:82:06:37:07:ca:20:85:3f:49:f7:
         0e:75:d1:27:09:ee:c5:6e:20:e6:bf:84:e4:38:cb:3c:45:8a:
         f4:0e:77:27:a9:df:12:d3:9b:83:ca:c0:99:67:24:97:25:b4:
         19:04:0d:41:e7:ea:37:ad:18:88:e9:32:ac:25:a2:79:bf:94:
         b5:d9:6b:c4:5d:04:f6:95:01:2e:4f:9b:1d:4f:f9:8b:d2:96:
         d4:7c:2f:ff:3d:80:b4:62:0b:ba:a8:87:47:44:ce:3d:da:ba:
         f3:11:f0:df:39:03:c9:0b:56:6a:9e:b5:f4:5b:27:c8:9f:7f:
         69:69:e6:df:94:fb:9f:77:77:d6:78:66:a1:09:c7:59:85:6f:
         ae:3d:00:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:36 2026 by rpki-client