Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230302e302e302f31342d3134203d3e2035363530.roa
File:                     34372e3230302e302e302f31342d3134203d3e2035363530.roa (raw, json)
Hash identifier:          K822gR7RljSgUH3UNkMl8R5+rQH2oxiFOrmLYAX+Ck4=
Subject key identifier:   5E:D1:56:40:3A:24:04:05:B3:F9:71:A2:8B:17:A3:EE:F4:B7:CA:CF
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       4449E0AE79D52CFC87CFA9FE393CBD12715E99FB
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230302e302e302f31342d3134203d3e2035363530.roa
Signing time:             Wed 28 Jan 2026 06:03:20 +0000
ROA not before:           Wed 28 Jan 2026 05:58:20 +0000
ROA not after:            Wed 27 Jan 2027 06:03:20 +0000
asID:                     5650
IP address blocks:        47.200.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:49:e0:ae:79:d5:2c:fc:87:cf:a9:fe:39:3c:bd:12:71:5e:99:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 28 05:58:20 2026 GMT
            Not After : Jan 27 06:03:20 2027 GMT
        Subject: CN=5ED156403A240405B3F971A28B17A3EEF4B7CACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:15:d4:1b:09:fa:06:0c:88:d7:46:b3:e8:
                    a9:dc:48:f9:82:84:85:78:18:08:02:e2:b1:69:ac:
                    94:40:38:2c:dc:5d:57:dd:27:53:bf:63:35:14:34:
                    90:99:08:5a:89:ec:1e:d3:a2:23:3a:3e:4f:06:f8:
                    e6:94:ce:e3:82:d3:f5:0c:75:40:6d:12:d2:7f:6b:
                    bc:94:0d:26:da:d7:78:d5:fd:28:3a:fb:9b:f2:8b:
                    01:0d:e8:56:2a:86:f2:0f:db:0b:be:7d:88:c3:2a:
                    42:8d:4b:9d:ca:7c:dd:87:f6:2d:9b:49:ab:ba:01:
                    d6:01:59:3d:c2:96:f4:57:11:25:16:08:ec:27:68:
                    92:5f:4b:fd:bd:fc:e1:d1:05:67:d4:ce:70:7e:c5:
                    ba:58:06:e9:3e:63:e8:b8:db:75:a2:b0:07:e1:75:
                    91:c6:cd:ac:90:30:1f:19:d1:8f:97:34:0b:8a:8e:
                    21:55:dd:9e:24:d5:73:b4:11:45:97:12:f0:6a:ea:
                    48:ba:26:06:86:2c:ec:40:48:a3:2b:77:04:00:fe:
                    68:1a:93:d7:89:ea:61:fc:31:23:96:be:5b:fa:d6:
                    cf:48:b3:48:b1:c4:64:fa:cf:ef:80:2c:bc:6a:58:
                    c1:35:c6:e0:97:f7:0e:9c:c0:3d:47:24:18:f7:3d:
                    92:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:56:40:3A:24:04:05:B3:F9:71:A2:8B:17:A3:EE:F4:B7:CA:CF
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230302e302e302f31342d3134203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.200.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         ae:c7:ff:6f:d1:fe:79:81:3f:ba:59:30:7e:45:66:e6:b6:fd:
         40:7b:12:f7:fb:e1:aa:b9:4c:71:2f:81:dd:fe:f5:44:01:82:
         97:82:1a:6e:59:bb:a5:7c:46:0a:fe:5e:a9:93:a9:34:b9:db:
         9d:2d:41:99:3a:7b:ef:0f:fe:05:b6:ae:60:1d:2d:be:d8:b5:
         db:84:9f:bb:37:35:b3:e6:44:88:78:00:a7:aa:dc:9e:2b:6b:
         6e:20:de:c1:d1:22:3b:6b:f5:ce:8f:28:8e:63:06:1b:32:09:
         86:d0:9b:c9:46:d1:b5:ba:8f:14:a8:b4:7e:ce:48:c1:07:53:
         73:b9:cc:ec:4e:9a:7c:6f:de:39:f0:c2:c5:3f:65:2c:e7:4f:
         b6:af:65:dc:99:78:45:a4:ab:c5:48:25:40:bc:d8:97:93:6e:
         9a:c4:2d:b3:28:ae:12:c8:88:23:41:18:01:98:fb:1b:b0:e8:
         b9:1d:02:c3:90:db:bd:f5:02:35:49:93:b0:81:ac:b1:30:9d:
         35:59:56:37:55:50:38:93:0c:f1:a7:10:04:50:fb:ef:38:96:
         4e:ed:31:f0:63:92:6e:bb:98:ba:44:d4:5c:28:45:2a:52:40:
         36:92:c5:69:66:48:a4:25:b7:a2:6e:f7:1a:c9:bd:07:ab:ac:
         05:9e:2a:07
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIUREngrnnVLPyHz6n+OTy9EnFemfswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx
N2I3MjY5NjIwM2RjODNhOTAwHhcNMjYwMTI4MDU1ODIwWhcNMjcwMTI3MDYwMzIw
WjAzMTEwLwYDVQQDEyg1RUQxNTY0MDNBMjQwNDA1QjNGOTcxQTI4QjE3QTNFRUY0
QjdDQUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OsV1BsJ+gYM
iNdGs+ip3Ej5goSFeBgIAuKxaayUQDgs3F1X3SdTv2M1FDSQmQhaiewe06IjOj5P
BvjmlM7jgtP1DHVAbRLSf2u8lA0m2td41f0oOvub8osBDehWKobyD9sLvn2IwypC
jUudynzdh/Ytm0mrugHWAVk9wpb0VxElFgjsJ2iSX0v9vfzh0QVn1M5wfsW6WAbp
PmPouNt1orAH4XWRxs2skDAfGdGPlzQLio4hVd2eJNVztBFFlxLwaupIuiYGhizs
QEijK3cEAP5oGpPXieph/DEjlr5b+tbPSLNIscRk+s/vgCy8aljBNcbgl/cOnMA9
RyQY9z2ScwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFF7RVkA6JAQFs/lxoosXo+70
t8rPMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv
ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw
MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJh
OTBhMmYwOTdmLzAvMzQzNzJlMzIzMDMwMmUzMDJlMzAyZjMxMzQyZDMxMzQyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMCL8gwDQYJKoZIhvcNAQELBQADggEBAK7H
/2/R/nmBP7pZMH5FZua2/UB7Evf74aq5THEvgd3+9UQBgpeCGm5Zu6V8Rgr+XqmT
qTS5250tQZk6e+8P/gW2rmAdLb7YtduEn7s3NbPmRIh4AKeq3J4ra24g3sHRIjtr
9c6PKI5jBhsyCYbQm8lG0bW6jxSotH7OSMEHU3O5zOxOmnxv3jnwwsU/ZSznT7av
ZdyZeEWkq8VIJUC82JeTbprELbMorhLIiCNBGAGY+xuw6LkdAsOQ2731AjVJk7CB
rLEwnTVZVjdVUDiTDPGnEARQ++84lk7tMfBjkm67mLpE1FwoRSpSQDaSxWlmSKQl
t6Ju9xrJvQerrAWeKgc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:09:02 2026 by rpki-client