Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230362e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          vY9DxQfnP0Qv31aMLXNCP5EcVlGbSLQnjd44XHjEEd4=
Subject key identifier:   18:B1:EE:61:F5:D4:F9:E4:4F:68:8D:34:58:07:27:B8:36:1F:2B:33
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       521C59611A2B64483CB2A8F46359C9335C9CC628
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 27 Jan 2026 06:03:19 +0000
ROA not before:           Tue 27 Jan 2026 05:58:19 +0000
ROA not after:            Tue 26 Jan 2027 06:03:19 +0000
asID:                     5650
IP address blocks:        47.206.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1c:59:61:1a:2b:64:48:3c:b2:a8:f4:63:59:c9:33:5c:9c:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 27 05:58:19 2026 GMT
            Not After : Jan 26 06:03:19 2027 GMT
        Subject: CN=18B1EE61F5D4F9E44F688D34580727B8361F2B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:88:9b:98:5d:d6:62:27:c1:5e:63:1f:f1:
                    ca:12:25:ee:e0:00:0b:64:81:e4:8e:e6:5e:6a:7b:
                    d5:65:1b:9f:09:12:c9:87:9b:12:9c:13:0e:e1:62:
                    c7:53:37:11:3a:d8:5c:a3:cb:80:04:5e:1c:bf:c6:
                    d4:8c:3d:8e:8d:c3:be:cb:4d:8a:e8:bf:bf:8d:8e:
                    43:66:f1:0f:84:61:d7:28:a6:02:d9:c0:bf:1d:76:
                    42:d8:ee:32:8d:d9:2c:58:f0:dc:b4:21:a4:6e:ce:
                    6f:2b:6d:97:80:c1:38:fd:a9:b7:52:41:e9:23:ec:
                    66:95:3b:7f:45:77:02:c5:cb:92:13:5c:cf:33:43:
                    7c:5e:9e:12:cb:94:77:c1:e2:d1:6c:04:23:56:c6:
                    09:27:61:db:57:96:a4:5d:e3:79:65:74:b8:d0:88:
                    44:73:19:1f:b6:51:08:21:04:c6:2f:f0:fb:6b:1b:
                    ed:c7:64:38:a4:d9:34:23:a1:54:4a:49:63:08:e9:
                    79:c1:6d:0e:af:e8:cc:93:c5:79:15:3c:18:57:7d:
                    b5:3f:c0:4b:b6:28:46:b5:7c:e1:5d:fe:f6:6a:35:
                    ad:6b:ca:ea:33:69:b9:c2:c4:a9:ab:c2:c5:c1:62:
                    81:80:0c:31:03:71:cd:3a:59:f3:db:f4:d4:aa:b1:
                    41:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:EE:61:F5:D4:F9:E4:4F:68:8D:34:58:07:27:B8:36:1F:2B:33
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230362e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:05:f6:97:81:07:23:eb:cd:7e:2b:1b:af:bd:52:d2:60:2f:
         a7:7b:6a:a3:1b:0d:75:64:d5:49:f6:76:e8:08:77:d1:3f:5a:
         0e:fc:51:47:23:0f:10:fe:2c:d2:b4:84:4a:42:08:62:f0:e1:
         a4:2c:4f:35:bc:8f:0b:99:56:a8:19:71:28:7f:85:fd:6b:da:
         34:98:d4:34:6f:ce:d4:5e:4d:29:0a:bf:3d:70:89:98:19:25:
         d1:b9:bd:97:a3:31:e8:28:00:1f:0c:a4:0e:ca:b2:bf:c7:f4:
         4c:6b:5c:81:4a:08:87:14:40:d2:a3:74:78:94:43:2b:e8:06:
         d5:c3:27:94:93:f8:fc:e6:de:66:c8:11:5a:d4:b6:eb:62:f9:
         c5:40:57:2a:b0:cf:07:61:2c:92:ac:fb:b1:a7:4e:74:44:20:
         0a:88:1a:c6:94:3e:4e:eb:19:e3:8b:57:53:31:45:4c:39:bd:
         52:bf:bd:fe:ae:15:96:8b:28:fd:a0:c4:a7:8e:10:d1:ee:98:
         04:41:f4:d2:aa:e4:d7:8d:db:07:98:7b:67:db:09:bc:42:60:
         2f:02:23:c7:12:c2:99:5b:27:8d:48:3a:6a:56:79:5c:2e:32:
         d9:1f:66:b9:ac:e8:25:95:68:33:0b:5b:5c:6d:bc:b9:de:ed:
         1b:65:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:16 2026 by rpki-client