Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230352e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          XyD+T0vKsGjgkZkiPvuv9qMnhHD6DXsaNQpkJOG5foA=
Subject key identifier:   22:37:3A:CD:05:2D:A6:9B:9E:22:CB:B0:39:07:6A:E3:EA:2A:68:6D
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       7C594BC299E8A28A43DDB0D39571E041E937CBDA
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 27 Jan 2026 06:03:19 +0000
ROA not before:           Tue 27 Jan 2026 05:58:19 +0000
ROA not after:            Tue 26 Jan 2027 06:03:19 +0000
asID:                     5650
IP address blocks:        47.205.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:59:4b:c2:99:e8:a2:8a:43:dd:b0:d3:95:71:e0:41:e9:37:cb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 27 05:58:19 2026 GMT
            Not After : Jan 26 06:03:19 2027 GMT
        Subject: CN=22373ACD052DA69B9E22CBB039076AE3EA2A686D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:94:da:7c:53:13:e8:be:80:90:3d:b6:e8:
                    91:50:98:17:25:54:29:ba:71:9d:cc:55:7c:0f:cd:
                    f1:4e:4b:25:ec:74:23:3f:de:52:4d:25:e1:9b:a9:
                    9e:c2:90:d3:4f:c0:c0:1b:28:29:f7:4c:a2:7b:88:
                    fd:4b:9b:fb:eb:b3:3c:e9:e7:bd:26:a0:a4:5c:32:
                    ae:8b:09:fa:53:38:99:39:85:4c:c5:79:3b:77:9d:
                    48:b3:1a:56:0b:34:76:e9:07:80:12:2b:a2:ce:84:
                    1f:ca:06:e0:4c:7e:a1:06:4b:83:a9:5f:52:3b:6b:
                    21:8f:f9:13:e3:5f:e7:c5:49:b9:05:89:9b:13:5b:
                    06:3f:f7:dc:10:e2:3f:af:2c:40:fc:ce:a3:2c:fe:
                    6e:f5:7a:4d:48:cf:3d:4e:b7:ee:1d:30:46:33:3b:
                    88:0e:cc:42:bc:9f:24:42:d0:b7:0e:2d:74:22:a7:
                    0f:1c:8f:9a:03:a9:09:31:67:c2:f8:79:5c:1d:ec:
                    a2:98:95:55:de:5b:bf:59:67:fe:6e:40:38:89:c3:
                    cb:4b:a5:33:91:4e:1b:6a:79:3f:3a:e9:fc:b7:df:
                    15:0c:75:f9:ae:4c:34:bf:85:6b:f5:99:e3:ba:92:
                    63:d3:bd:a2:06:15:47:85:fd:76:3d:d6:30:dc:f1:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:37:3A:CD:05:2D:A6:9B:9E:22:CB:B0:39:07:6A:E3:EA:2A:68:6D
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230352e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c0:19:e3:42:37:5a:3f:9f:58:60:de:09:6a:6b:f4:b0:28:4e:
         b9:bd:89:2a:ea:ff:b7:31:06:79:84:53:47:4b:b3:8c:32:c6:
         d9:f0:d1:be:94:02:7f:55:61:30:17:34:21:26:26:8c:fc:5f:
         9c:1c:d7:db:e3:c1:20:cf:84:18:d2:14:5f:1b:0c:67:b7:05:
         7d:df:a2:3d:16:e6:9d:6f:6c:3a:21:84:be:47:25:73:e2:c9:
         ce:ed:8a:19:dc:5c:a8:f0:31:e4:ec:fc:a1:05:d7:82:23:25:
         d3:de:50:00:bf:bf:73:69:31:9d:2e:a7:b6:e1:f4:84:8d:0f:
         2b:68:86:66:df:92:99:90:34:5e:ab:7a:f9:40:82:18:8a:fd:
         1c:ab:5d:67:63:f4:c9:30:a9:1f:3e:21:0b:9d:be:32:66:72:
         00:3a:fd:99:f6:d3:9a:39:68:eb:a7:bf:df:7a:62:31:75:e8:
         61:8e:b8:8a:14:e5:f9:45:65:90:9c:c3:e7:58:66:1f:58:da:
         dc:ee:ad:fc:fa:ea:9d:cd:06:16:0b:ff:df:64:2c:13:9c:a2:
         f3:5a:12:54:78:f5:a3:e5:fe:c1:79:74:fb:d1:db:ba:3b:88:
         6f:76:55:c8:5a:ef:93:20:3a:8a:94:a8:d8:bf:d4:72:92:e9:
         24:1b:67:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:07 2026 by rpki-client