Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          w6+Ql2eAR9L/9XQJbXE8+XIu61tqGiHdUPjbRLsZ1jc=
Subject key identifier:   9D:EA:C2:79:39:8B:65:09:B8:E7:B3:FE:E8:00:EC:A1:24:DF:BC:D8
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       68FAC43D32C1C6BCAF6FACD57C520078861C73F2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
Signing time:             Mon 21 Jul 2025 00:01:59 +0000
ROA not before:           Sun 20 Jul 2025 23:56:59 +0000
ROA not after:            Mon 20 Jul 2026 00:01:59 +0000
asID:                     36530
IP address blocks:        67.210.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fa:c4:3d:32:c1:c6:bc:af:6f:ac:d5:7c:52:00:78:86:1c:73:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 20 23:56:59 2025 GMT
            Not After : Jul 20 00:01:59 2026 GMT
        Subject: CN=9DEAC279398B6509B8E7B3FEE800ECA124DFBCD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:89:88:38:9d:fd:d7:5f:2a:48:40:57:28:
                    dc:23:b3:16:34:5a:81:b5:3a:d7:6c:dc:92:01:ed:
                    74:75:fa:59:64:4e:12:36:f9:a8:cc:69:37:28:cc:
                    0c:02:2e:66:8b:5d:2a:99:4b:c6:ec:34:14:cb:0e:
                    a6:36:49:97:f1:1f:5e:e5:e7:7a:09:bc:7a:bd:81:
                    b8:81:df:23:62:df:81:88:d1:08:5c:ec:6e:ca:86:
                    b6:93:c2:ca:f2:3c:3c:51:83:b7:40:d1:80:7c:be:
                    5d:ad:43:3b:92:da:c2:df:94:2b:0d:dc:12:3d:49:
                    b2:ab:c6:1f:7a:d3:09:49:34:6b:98:54:14:53:0e:
                    be:3c:d7:95:ef:2b:2f:3e:84:ac:5a:f7:80:40:9e:
                    e4:5b:ee:cd:36:fa:96:88:58:a2:69:fa:54:5d:74:
                    c4:aa:a9:50:d3:9b:f6:6a:27:1a:bc:92:0c:88:32:
                    4d:a2:3c:23:6f:23:7d:b0:0b:c4:9c:0e:dd:dd:e7:
                    74:19:0a:b6:15:1c:e7:eb:4b:23:48:82:b1:f7:49:
                    1a:c8:c9:5a:2c:50:06:31:3a:f6:c6:fb:a0:44:64:
                    9b:b5:df:b7:0f:26:e9:8f:d0:6e:91:c3:b5:46:40:
                    39:d9:e9:80:b7:3a:da:f1:60:75:af:c3:64:04:70:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EA:C2:79:39:8B:65:09:B8:E7:B3:FE:E8:00:EC:A1:24:DF:BC:D8
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:a5:ac:16:c1:79:18:fb:55:00:d6:ea:d1:32:81:9a:be:2f:
         a0:6b:04:da:7a:78:a6:9d:05:00:06:e6:fd:23:6b:9e:44:90:
         09:a3:46:ac:d8:eb:80:e3:cf:ec:27:51:81:81:75:24:50:4f:
         be:e3:dd:e4:d6:2f:57:17:06:67:c9:47:0c:c0:7e:02:c0:e8:
         de:48:03:5b:af:8e:4e:58:1f:d5:39:18:fd:97:f5:6e:47:79:
         7b:38:f4:00:16:a1:28:60:e4:63:82:ce:59:ca:e8:a3:c2:c2:
         d4:85:5c:49:f2:86:24:7a:29:23:3f:e5:3e:18:3a:78:ca:eb:
         ff:9b:d9:6c:38:18:68:20:dc:f6:34:b2:bc:21:33:53:9c:d1:
         2f:80:33:2a:c4:e1:58:df:d7:eb:f9:5a:07:75:1a:1a:13:6b:
         2e:87:c2:eb:47:ea:ac:53:80:ea:d8:55:30:f6:be:bb:d7:b2:
         37:70:97:65:97:7d:bb:2f:df:36:9f:d9:90:72:fc:86:af:66:
         c4:3f:e9:6c:66:96:8e:01:5f:1f:60:4f:b5:8d:00:6a:31:68:
         08:f5:e1:e9:4a:fa:eb:1c:84:98:ee:76:2f:9d:0d:47:1b:e7:
         ed:2c:88:0e:40:ec:87:a7:a5:73:36:d8:a4:ce:71:2c:bb:8b:
         ed:d7:1d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:44:02 2025 by rpki-client