Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa
File:                     34372e3230372e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          5ZMi75+GhZauhbp9WgR0EMF53GSOjLR0Y7qPEKmdP/g=
Subject key identifier:   15:CA:0D:12:F8:CD:D5:CC:16:82:CB:31:C3:9A:9C:EE:9F:4B:AD:18
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       245AB0B2196C162091B4B61510A84098A231BACB
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 27 Jan 2026 06:03:19 +0000
ROA not before:           Tue 27 Jan 2026 05:58:19 +0000
ROA not after:            Tue 26 Jan 2027 06:03:19 +0000
asID:                     5650
IP address blocks:        47.207.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:5a:b0:b2:19:6c:16:20:91:b4:b6:15:10:a8:40:98:a2:31:ba:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 27 05:58:19 2026 GMT
            Not After : Jan 26 06:03:19 2027 GMT
        Subject: CN=15CA0D12F8CDD5CC1682CB31C39A9CEE9F4BAD18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:5e:ca:ed:cc:6a:5c:13:43:67:41:7e:99:
                    7d:b9:0e:9b:fd:c6:0b:38:de:7f:09:cf:cb:5b:57:
                    9f:c5:d3:e2:d4:2c:d7:24:a9:bc:ea:c0:34:a4:a3:
                    eb:0b:a1:39:5c:ca:1b:9a:cc:82:3f:77:09:cc:3d:
                    8c:3e:c6:a8:9e:e9:8e:21:b5:d1:8d:6f:5e:98:87:
                    7d:69:bc:47:bf:05:c6:66:eb:98:89:a6:d7:c5:9e:
                    64:52:fc:48:a2:46:ef:ea:30:e7:ad:a0:89:28:97:
                    ff:ec:04:62:49:e4:7c:0b:52:1c:62:f4:9e:ed:53:
                    d0:68:c6:38:7a:16:73:af:32:29:1b:13:5b:50:a5:
                    b5:e1:d5:a4:dd:4c:b7:b3:9b:52:a9:17:94:aa:ce:
                    05:a7:c0:b8:49:cc:08:2b:69:15:1c:e7:75:06:24:
                    43:9a:ba:2f:76:5f:f1:56:c2:12:38:5d:78:67:f3:
                    5c:ac:26:08:70:8b:8b:be:ef:b0:a4:65:c4:5b:36:
                    68:20:3b:f6:fb:6e:29:37:da:5d:d5:b5:39:8b:24:
                    9e:a8:79:f1:89:e3:a2:72:43:8a:df:54:9a:bc:b4:
                    32:37:19:eb:1a:b7:1d:d1:27:34:f1:41:49:42:0e:
                    d0:37:eb:da:65:45:de:88:ce:65:52:03:79:ac:27:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CA:0D:12:F8:CD:D5:CC:16:82:CB:31:C3:9A:9C:EE:9F:4B:AD:18
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3230372e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:9a:0a:0a:ee:94:04:e3:19:a4:5f:02:74:88:52:4b:70:
         02:07:fe:52:e7:ef:a5:35:c6:10:06:b6:71:fe:55:ea:9e:30:
         81:26:24:91:4c:c8:95:d2:f9:37:ab:77:ea:70:d3:ce:81:0c:
         7f:ea:4b:ef:13:9b:e1:bb:ac:91:e1:57:af:51:ab:80:42:de:
         a7:e9:c3:3d:ab:fc:ac:6a:4c:4c:9b:23:0d:7e:cb:42:87:15:
         9f:98:e1:c9:79:8e:da:c9:e8:33:b7:00:f5:96:79:37:85:56:
         3d:f9:5b:41:37:f3:ab:e9:cf:66:bb:f8:86:c9:f6:ff:c2:dc:
         eb:fb:49:55:e3:e4:be:0f:05:c1:d9:55:b9:1c:0d:30:6a:43:
         a7:9f:56:ab:06:22:f4:a3:7f:f7:20:5a:da:c6:e5:bd:7d:6b:
         d5:30:f0:7e:90:c5:39:b1:04:c7:f1:4f:2d:00:af:ac:be:fd:
         8e:09:00:2e:32:a5:2b:11:27:05:7c:e3:f9:8d:a3:ec:46:29:
         a2:4d:bf:4f:8c:a6:f4:aa:2e:fc:82:5a:40:ba:5c:05:c8:e4:
         4f:1d:e8:23:ee:1a:32:f8:4e:dd:5b:27:b6:82:57:0f:f9:32:
         e0:1e:93:61:fb:dc:4a:d8:27:e2:20:f3:60:7d:c3:8e:5a:9c:
         50:b1:ba:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:20:11 2026 by rpki-client