Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230342e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230342e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          6a8gXFVrRFUE1GHe+JfC8JpIbbopDVnj7x7SlDh2tDM=
Subject key identifier:   3D:6B:6A:9F:23:46:13:EB:3B:EE:FC:13:84:91:1B:9B:2B:12:01:66
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       249834A511C1F4D4712EB8FF68F39D2FBDC35A02
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230342e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 27 Jan 2026 06:03:19 +0000
ROA not before:           Tue 27 Jan 2026 05:58:19 +0000
ROA not after:            Tue 26 Jan 2027 06:03:19 +0000
asID:                     5650
IP address blocks:        47.204.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:98:34:a5:11:c1:f4:d4:71:2e:b8:ff:68:f3:9d:2f:bd:c3:5a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 27 05:58:19 2026 GMT
            Not After : Jan 26 06:03:19 2027 GMT
        Subject: CN=3D6B6A9F234613EB3BEEFC1384911B9B2B120166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9a:e5:f5:26:f2:ea:b3:ff:f5:07:d7:4d:93:
                    bf:e4:c2:da:23:33:31:ca:b8:a1:8d:6f:e4:71:67:
                    20:cd:f3:7c:4f:0d:43:d3:d8:a1:5e:fa:7c:30:c2:
                    4e:32:d0:21:5b:ad:05:57:4f:aa:57:b9:eb:a0:ec:
                    25:b3:2f:95:b7:7a:51:6d:42:1e:ad:56:f7:64:01:
                    9c:8e:5f:b9:52:96:8b:ad:8a:7e:70:96:5a:f4:0f:
                    6a:34:ac:ae:bc:f0:ba:5a:66:9f:e8:a6:43:4b:0f:
                    b6:f0:16:a1:d3:0c:97:57:7b:2f:6f:0c:50:dc:3a:
                    f9:ea:43:bd:f7:46:d1:8a:eb:0d:fa:42:ad:f4:77:
                    36:0e:6a:ba:ea:87:62:e4:c0:f2:1b:b7:4f:08:a9:
                    ce:95:2e:49:96:29:66:4d:bd:1c:50:28:6a:34:a8:
                    9d:a9:78:b9:95:4b:51:ed:ad:d3:db:80:90:8a:67:
                    34:71:97:de:e4:6f:04:b4:c2:9c:00:a7:9d:14:33:
                    5a:e1:58:69:63:a3:86:49:a0:77:87:9d:b3:1a:97:
                    ba:fe:0a:db:98:ae:ba:1f:3f:f2:b4:75:1d:93:82:
                    36:f6:11:ac:a2:5f:70:e6:a3:d9:6a:db:74:4e:ae:
                    48:69:9a:19:04:08:c7:ce:b9:e1:87:59:7d:79:44:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6B:6A:9F:23:46:13:EB:3B:EE:FC:13:84:91:1B:9B:2B:12:01:66
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230342e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.204.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bc:16:af:8d:04:76:b5:87:0f:0c:06:a7:4a:ed:b2:3b:e3:5e:
         38:18:bc:a5:25:26:7e:bb:36:ea:ad:8a:b3:8a:44:aa:c4:09:
         d1:b9:38:fd:a3:12:94:3a:21:97:aa:26:54:d3:0e:cd:76:f2:
         a1:c4:09:7c:1f:d9:f0:7d:3d:9e:e5:a1:b6:f2:cf:f7:13:29:
         1e:80:15:b7:da:60:bc:23:1e:fd:92:f4:1e:a4:f5:8b:ac:15:
         d8:d3:94:f8:8b:3d:bc:11:67:87:e9:e0:d1:c6:f1:e4:3e:b6:
         2f:20:67:2a:29:c7:e0:14:ca:32:4a:b4:76:4c:2f:7a:8e:25:
         3e:57:6f:2e:eb:a5:30:b9:80:66:ae:ee:0a:b7:af:ba:ab:85:
         50:6b:0f:8a:83:b3:94:4e:4d:02:63:d0:ef:e5:54:f1:37:90:
         fb:fa:91:1f:d0:a2:10:48:74:93:2a:d4:8b:d0:de:75:1d:96:
         17:b7:16:c8:e2:e7:52:51:2e:9d:4c:3e:ec:7a:5a:fe:21:28:
         8b:c6:e0:3f:da:75:f4:0c:6d:b0:0d:2d:cc:8f:af:d4:f6:20:
         6c:c7:c7:42:87:05:68:89:f1:43:8c:9c:8b:36:a7:89:93:d0:
         b8:cc:bc:e5:48:f9:4f:e0:71:ef:40:b0:13:62:f3:80:fd:a5:
         f2:e9:a6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:45 2026 by rpki-client