Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
File:                     34372e3139332e302e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          c6TcMVFD0C40kdy6l0EIo1fL96IkxMMVajZqUFUqRCg=
Subject key identifier:   83:47:54:29:28:39:72:0A:E2:F2:94:93:E5:C3:69:D3:AE:23:BD:7E
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       0C8D96DAC56DEAA7ED34A70E619573BC89FDB8A5
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa
Signing time:             Tue 27 Jan 2026 06:03:19 +0000
ROA not before:           Tue 27 Jan 2026 05:58:19 +0000
ROA not after:            Tue 26 Jan 2027 06:03:19 +0000
asID:                     5650
IP address blocks:        47.193.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8d:96:da:c5:6d:ea:a7:ed:34:a7:0e:61:95:73:bc:89:fd:b8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 27 05:58:19 2026 GMT
            Not After : Jan 26 06:03:19 2027 GMT
        Subject: CN=834754292839720AE2F29493E5C369D3AE23BD7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:45:99:8a:fb:30:96:bb:82:f5:5f:ed:56:
                    b1:91:36:81:df:ec:b7:cb:f5:14:5a:a4:45:5d:bc:
                    5f:9a:75:e1:83:f1:c7:bd:3f:e4:8a:b8:69:56:70:
                    1d:07:11:5d:f8:b9:3e:70:28:a4:88:a3:70:67:4f:
                    15:1c:0e:5e:ce:cf:be:65:45:b1:52:26:4c:c0:7b:
                    9b:1f:fb:2d:9b:04:ce:91:f4:3a:82:6b:ed:50:03:
                    29:89:fc:dd:d3:00:b6:7e:78:fc:2b:7d:bd:a8:49:
                    1f:fe:1c:28:05:2d:68:c5:ed:67:58:3b:79:95:ad:
                    60:7f:1e:36:e7:f8:9b:3a:01:34:93:04:65:63:0b:
                    90:4f:76:cd:6b:7e:8c:96:1c:84:eb:e5:e7:51:63:
                    42:f7:35:e1:65:96:d4:a6:fe:8e:31:7d:2c:01:53:
                    e5:1d:a2:23:52:e4:98:24:89:0a:28:4a:c6:9a:06:
                    d6:31:69:c2:2f:f8:25:c0:04:55:59:85:39:84:47:
                    8b:cc:ec:4a:28:4b:f0:f2:93:c1:5f:a5:47:3e:09:
                    86:10:21:55:9f:43:ec:10:39:7f:93:6a:18:c3:30:
                    8c:f4:d0:31:38:46:55:96:81:d4:c2:f5:09:90:be:
                    af:49:f8:99:33:04:50:ad:f0:94:6d:df:78:d7:4f:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:47:54:29:28:39:72:0A:E2:F2:94:93:E5:C3:69:D3:AE:23:BD:7E
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e302e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.193.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:74:35:70:1b:ca:67:4f:ba:90:b3:57:c3:5c:df:bc:34:
         5e:b3:6f:2f:a7:7b:78:21:99:ec:49:57:0c:a0:2d:e0:c8:f0:
         db:d5:3e:1a:04:a5:ff:9d:0e:85:4c:bf:2f:2e:88:2c:8b:e8:
         92:72:7d:06:d5:93:b2:a6:e5:2c:31:10:51:ba:58:28:b8:5e:
         44:5d:d9:1c:1a:6c:73:e9:0a:10:8c:c4:0b:24:88:33:14:17:
         87:8c:55:50:4e:87:2a:6a:87:ca:78:db:4a:78:88:f7:10:f4:
         6a:fe:7c:b2:eb:62:67:63:d6:10:ba:e5:00:f0:c3:a5:23:40:
         11:a4:08:42:f4:f5:23:1e:c0:a6:2d:bb:ae:0b:b7:63:16:9d:
         33:0f:67:de:df:a5:7b:cf:14:87:2c:b4:47:79:d9:0c:9b:f5:
         62:39:5d:45:c0:9b:61:3b:ce:02:86:7c:fc:fd:d0:36:c0:45:
         12:2e:ed:cd:07:41:47:46:f8:05:5d:d0:e5:29:b0:1c:8d:a1:
         2d:22:dd:98:ad:52:9b:e9:84:d4:67:cd:0f:13:43:6c:5a:8d:
         6f:2a:1f:95:b4:13:e3:1c:e5:68:0f:75:91:cc:75:61:1b:a6:
         d6:69:19:44:2a:31:47:ab:e9:33:2e:94:4b:f5:84:3b:10:f2:
         9f:3c:a3:e0
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUDI2W2sVt6qftNKcOYZVzvIn9uKUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjYwMTI3MDU1ODE5WhcNMjcwMTI2MDYwMzE5
WjAzMTEwLwYDVQQDEyg4MzQ3NTQyOTI4Mzk3MjBBRTJGMjk0OTNFNUMzNjlEM0FF
MjNCRDdFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AlFmYr7MJa7
gvVf7VaxkTaB3+y3y/UUWqRFXbxfmnXhg/HHvT/kirhpVnAdBxFd+Lk+cCikiKNw
Z08VHA5ezs++ZUWxUiZMwHubH/stmwTOkfQ6gmvtUAMpifzd0wC2fnj8K329qEkf
/hwoBS1oxe1nWDt5la1gfx425/ibOgE0kwRlYwuQT3bNa36MlhyE6+XnUWNC9zXh
ZZbUpv6OMX0sAVPlHaIjUuSYJIkKKErGmgbWMWnCL/glwARVWYU5hEeLzOxKKEvw
8pPBX6VHPgmGECFVn0PsEDl/k2oYwzCM9NAxOEZVloHUwvUJkL6vSfiZMwRQrfCU
bd9410/7NwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFINHVCkoOXIK4vKUk+XDadOu
I71+MB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzEzOTMzMmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHL8EAMA0GCSqGSIb3DQEBCwUAA4IBAQAs
u3Q1cBvKZ0+6kLNXw1zfvDRes28vp3t4IZnsSVcMoC3gyPDb1T4aBKX/nQ6FTL8v
Logsi+iScn0G1ZOypuUsMRBRulgouF5EXdkcGmxz6QoQjMQLJIgzFBeHjFVQTocq
aofKeNtKeIj3EPRq/nyy62JnY9YQuuUA8MOlI0ARpAhC9PUjHsCmLbuuC7djFp0z
D2fe36V7zxSHLLRHedkMm/ViOV1FwJthO84Chnz8/dA2wEUSLu3NB0FHRvgFXdDl
KbAcjaEtIt2YrVKb6YTUZ80PE0NsWo1vKh+VtBPjHOVoD3WRzHVhG6bWaRlEKjFH
q+kzLpRL9YQ7EPKfPKPg
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:58 2026 by rpki-client