Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa
File:                     36342e342e3136392e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          boBVp1LolByceJ1yI4iP2fhR7FQxtFRq97DHHwAECsA=
Subject key identifier:   16:5A:75:2C:70:2D:64:27:B4:BA:BA:CC:50:A0:4F:2B:6F:EC:D5:63
Certificate issuer:       /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial:       56A421CE4760B3BE287AA49C880578DCB386FF6E
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa
Signing time:             Tue 23 Jun 2026 12:14:23 +0000
ROA not before:           Tue 23 Jun 2026 12:09:23 +0000
ROA not after:            Tue 22 Jun 2027 12:14:23 +0000
asID:                     41095
IP address blocks:        64.4.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
                          rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a4:21:ce:47:60:b3:be:28:7a:a4:9c:88:05:78:dc:b3:86:ff:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
        Validity
            Not Before: Jun 23 12:09:23 2026 GMT
            Not After : Jun 22 12:14:23 2027 GMT
        Subject: CN=165A752C702D6427B4BABACC50A04F2B6FECD563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6c:d6:88:52:f1:80:e4:de:d1:8d:3d:8e:44:
                    9f:2a:4b:6f:9b:52:d6:43:da:af:c4:05:e9:53:db:
                    cb:9d:72:6d:54:d5:86:2b:cb:77:ab:bd:02:98:e1:
                    a8:c1:61:53:1f:ae:70:60:1e:9d:7e:ff:08:ef:26:
                    da:a2:3f:1a:42:13:a9:da:c4:d1:61:3c:e6:3c:b2:
                    75:7a:5c:be:14:a5:5d:8a:3f:e3:ea:24:72:2b:f2:
                    be:4b:01:16:09:a3:1b:4d:39:60:a6:50:fa:00:2a:
                    5f:ce:6e:04:65:52:bd:b1:1e:65:02:a3:77:4d:9d:
                    30:2b:70:15:3b:62:96:d0:03:62:53:f5:b9:ff:2f:
                    53:27:07:88:99:f7:60:14:47:0f:ad:12:45:a9:12:
                    81:4d:6e:cd:00:92:a4:82:5f:e5:21:11:81:5f:65:
                    09:10:a3:ef:99:86:f1:d9:78:1c:91:86:2a:d3:ef:
                    61:7b:b1:13:a8:b9:73:39:ff:21:67:ed:fe:be:3f:
                    2f:42:1c:0b:b9:77:ec:77:12:2e:9b:7e:d2:15:f5:
                    17:d4:5d:66:f4:1b:5f:1a:75:12:e7:92:5f:b3:2a:
                    ef:f8:08:5f:dd:23:22:07:2e:ba:50:86:dd:d5:fb:
                    e5:0f:ea:8e:3d:1d:98:e9:d0:0c:d5:08:82:36:39:
                    65:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5A:75:2C:70:2D:64:27:B4:BA:BA:CC:50:A0:4F:2B:6F:EC:D5:63
            X509v3 Authority Key Identifier:
                keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:0f:e3:16:12:0b:7d:08:cc:e3:69:29:df:a3:5c:f7:3c:
         f1:97:de:ed:7f:9d:68:75:81:37:31:b1:4b:1c:a3:99:1f:04:
         a0:0a:d8:52:80:10:ac:a6:10:6b:f8:97:23:c3:d7:b7:5d:98:
         b9:a6:5b:18:bb:0a:0b:39:e2:bb:3f:41:86:79:d8:7e:da:33:
         8c:f9:2e:c4:89:78:8e:6e:aa:85:fb:08:0a:5e:12:bb:0e:42:
         95:52:6f:50:1e:a8:22:88:e0:63:79:f4:e7:79:54:a4:ef:e9:
         f5:87:e1:53:b8:ea:62:83:9e:5b:99:81:e0:4a:04:74:24:b2:
         4d:86:8d:f2:e3:dc:36:54:d8:50:5b:60:a7:dd:e0:c2:5d:1d:
         24:07:cc:44:60:ae:a0:1e:72:79:74:01:28:7f:35:f6:bc:db:
         ec:4d:41:08:77:6e:b9:3c:c8:fe:3c:e2:f8:75:a7:e2:1d:c1:
         5e:29:05:bf:ad:a9:e2:91:73:e5:f7:15:2a:2d:4a:75:1c:92:
         a6:9b:0a:b7:b9:71:9e:20:9f:76:8c:d8:cb:f0:06:39:35:18:
         75:b6:60:ff:e4:d6:15:8d:94:32:2c:5f:6f:b5:e0:58:01:7f:
         d3:ab:90:82:d0:d0:66:01:07:26:64:f3:6f:e6:fb:17:ea:09:
         58:fc:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:18:00 2026 by rpki-client