Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e36342e302f31382d3138203d3e2035363530.roa
File:                     34372e3138312e36342e302f31382d3138203d3e2035363530.roa (raw, json)
Hash identifier:          +FIK/mpncRV7J3z1JKCdebmrjv+XNrnj/EJw/mfRXnI=
Subject key identifier:   71:87:57:A9:4F:AC:D6:3B:98:87:B6:2B:3A:AA:CB:DE:1D:E8:B4:72
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       2BFDB9E6BF8CA243A84556F503227A7F72871604
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e36342e302f31382d3138203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:28:07 +0000
ROA not before:           Fri 01 May 2026 02:23:07 +0000
ROA not after:            Fri 30 Apr 2027 02:28:07 +0000
asID:                     5650
IP address blocks:        47.181.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fd:b9:e6:bf:8c:a2:43:a8:45:56:f5:03:22:7a:7f:72:87:16:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: May  1 02:23:07 2026 GMT
            Not After : Apr 30 02:28:07 2027 GMT
        Subject: CN=718757A94FACD63B9887B62B3AAACBDE1DE8B472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:92:33:90:47:a2:de:5f:8e:36:3e:50:3b:
                    bd:f5:7f:e0:fe:e0:06:d7:78:8b:33:18:0d:0c:67:
                    1b:68:65:5d:cc:c6:34:27:46:97:31:58:36:bc:f4:
                    36:b6:74:90:7c:a2:79:22:e5:27:1b:e2:b4:80:4f:
                    ae:f5:04:37:0e:11:04:6d:92:4d:7d:5d:9e:1f:a1:
                    cb:77:4c:00:fc:03:4a:b7:28:cc:95:5b:3f:b9:d1:
                    83:17:05:ec:69:21:90:bf:be:3e:62:80:05:73:87:
                    3f:fc:32:7a:9b:29:49:02:c7:ac:00:a3:5f:8b:b9:
                    7c:c5:b5:6a:9d:3f:c6:a5:57:43:cc:b9:b1:f3:3b:
                    b7:46:77:c9:a9:07:95:f7:97:5f:46:d8:e6:d1:cf:
                    92:3b:5f:2b:e0:b7:12:4b:e5:8c:0f:c6:91:15:af:
                    5b:ae:4a:cc:13:b3:90:dc:30:c0:b5:30:98:b3:49:
                    26:37:9f:16:a3:1e:dd:b3:df:9e:21:c7:ad:a4:e7:
                    d9:32:52:30:cd:3f:7b:82:3a:df:bf:66:e0:2f:18:
                    a1:7b:d8:8f:fd:c4:05:74:f4:f0:fe:ec:c3:07:a9:
                    c2:9e:c8:dd:5f:ef:f0:c9:3c:d7:52:d6:bd:9f:9d:
                    a3:7d:e4:b5:4c:a6:f2:be:05:a8:d5:c4:24:bf:d4:
                    10:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:57:A9:4F:AC:D6:3B:98:87:B6:2B:3A:AA:CB:DE:1D:E8:B4:72
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/34372e3138312e36342e302f31382d3138203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.181.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:8f:76:73:69:c5:5a:0a:40:bf:d6:50:4e:bd:d2:d0:9f:
         0d:be:e1:ca:cc:98:ae:1d:0b:27:e2:fb:79:ab:15:6a:e2:75:
         a3:79:37:92:fe:d2:a8:a1:91:1a:b8:9a:a5:85:d0:2c:c7:2b:
         56:bf:1a:70:37:0a:d6:02:a5:26:84:ee:a0:a5:2d:ac:08:17:
         e2:37:db:fd:81:52:9c:d3:b6:36:d6:02:07:c3:99:e1:28:7d:
         a6:1b:b5:ff:0c:88:fb:ee:08:ef:32:8d:43:de:22:9f:ce:ea:
         35:69:4d:17:e1:a1:9f:52:ee:1e:2d:34:f2:0f:f5:c8:e2:c1:
         19:02:ad:d8:4b:2b:a5:b7:b3:8a:d5:7c:15:3c:be:01:fb:69:
         af:ff:fc:36:f0:51:80:b0:b7:5d:fe:5f:8c:cb:eb:7b:b5:18:
         8c:96:ff:67:24:7f:87:5e:16:1b:37:c8:ae:99:88:09:26:75:
         a8:42:b7:59:77:e4:3f:f0:cd:37:e2:b7:69:dd:5a:57:e4:71:
         4e:c6:84:ad:f7:98:43:77:83:43:ac:22:72:aa:6e:da:94:77:
         9f:34:84:fc:57:24:34:b7:40:a8:1b:b0:04:a3:36:24:53:40:
         dd:2b:fd:b0:e1:1f:e1:59:cf:9e:26:12:c1:d0:b7:ae:33:80:
         e8:fb:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:16:40 2026 by rpki-client