Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139362e302e302f31342d3134203d3e2035363530.roa
File:                     34372e3139362e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier:          VNVLyroZbVjncy4yhl3UqHkEQcPrs86KYGhPZdbSFN8=
Subject key identifier:   FD:66:90:BE:0F:28:D2:F4:B2:2B:7C:71:24:05:6E:70:19:96:07:C2
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       315FB1D6DE5916F83AEBE995A2D6264A04608E94
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139362e302e302f31342d3134203d3e2035363530.roa
Signing time:             Wed 28 Jan 2026 06:03:20 +0000
ROA not before:           Wed 28 Jan 2026 05:58:20 +0000
ROA not after:            Wed 27 Jan 2027 06:03:20 +0000
asID:                     5650
IP address blocks:        47.196.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:5f:b1:d6:de:59:16:f8:3a:eb:e9:95:a2:d6:26:4a:04:60:8e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 28 05:58:20 2026 GMT
            Not After : Jan 27 06:03:20 2027 GMT
        Subject: CN=FD6690BE0F28D2F4B22B7C7124056E70199607C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:4b:33:0b:71:92:dc:d0:90:d9:80:89:07:
                    05:a5:b4:23:a7:45:43:4c:fd:8f:4a:03:77:c5:8d:
                    05:a6:ba:29:56:39:56:57:03:8b:1d:30:d0:2b:29:
                    9f:59:e0:64:57:36:33:c2:14:9e:32:05:a1:f3:7e:
                    0c:eb:51:93:07:31:22:55:bc:24:39:69:fd:2b:89:
                    2c:11:4c:44:c1:5e:9f:0d:6a:8f:38:18:07:58:99:
                    e1:c3:2a:b3:19:26:d7:23:ba:ee:b3:c8:25:ef:92:
                    16:26:aa:ed:e1:1b:bc:ba:0b:da:89:86:2e:6e:a6:
                    fe:d6:72:cb:43:76:2d:7a:73:8b:60:96:ed:9d:1c:
                    55:93:14:d3:ed:ef:34:21:4e:21:42:84:3c:23:ac:
                    59:a5:e8:ec:a2:21:7e:d4:bd:dd:b8:fe:01:fb:06:
                    28:cb:e0:8e:3f:f3:6c:18:e3:ec:94:b6:2f:03:d7:
                    2f:98:fc:bb:66:a1:fc:f4:e8:a9:11:8d:83:99:37:
                    00:ec:90:aa:80:38:b4:d7:49:20:2c:5d:43:49:57:
                    c0:f3:34:27:a7:8b:7a:81:d4:8a:95:9e:78:7c:5e:
                    b4:a4:aa:fe:4d:4c:03:33:20:a8:9c:3d:e9:27:42:
                    a9:65:ea:da:d7:47:fd:74:2d:08:d3:5f:fc:2a:36:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:66:90:BE:0F:28:D2:F4:B2:2B:7C:71:24:05:6E:70:19:96:07:C2
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139362e302e302f31342d3134203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.196.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:a7:df:4e:58:86:0a:69:cf:40:17:b1:b6:48:b3:e4:b6:
         fb:b4:c9:05:69:6f:b2:38:3b:e3:e2:c7:c3:1e:a3:d7:48:de:
         57:1c:fb:db:89:b1:26:14:b1:9e:bd:ae:59:d6:66:06:bb:fc:
         9e:52:99:f9:6d:65:1a:68:cd:af:a1:90:67:fd:f1:af:6a:8c:
         92:c6:37:80:ac:82:e2:33:b3:70:bd:00:e0:42:cc:54:44:a4:
         c1:4b:52:da:aa:56:10:38:eb:2f:1a:59:f4:7a:c2:97:8c:5a:
         b9:0c:7f:5f:e5:15:05:d5:a8:40:75:ee:5f:26:7c:27:b0:99:
         c4:25:94:1f:9c:31:bb:5c:4c:ea:be:fb:68:17:08:ce:cf:2b:
         b6:fc:6b:60:bb:c6:c1:a4:18:05:5b:fd:83:24:e4:53:b3:74:
         a1:cc:40:b2:93:53:d5:01:17:d7:05:7a:38:02:95:bd:83:e2:
         84:f2:89:9c:f7:79:72:49:fd:92:91:1a:d3:09:5a:98:59:5d:
         06:75:ea:ae:88:c1:2b:a3:f4:c8:cb:13:8f:58:67:fc:00:f3:
         9d:63:65:4a:07:55:74:3e:3f:cf:80:14:a3:67:96:40:26:ad:
         c5:be:7f:ba:ad:e8:8c:b1:28:66:65:3f:9f:55:2d:83:55:41:
         a5:74:6d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:51 2026 by rpki-client