Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31332e302f32342d3234203d3e20343030333034.roa
File:                     36342e34392e31332e302f32342d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          ku8lSBWtGmBGDZ/cGP1mzHiCX4hVbyBkqTX21l4SOdo=
Subject key identifier:   2B:0C:B0:EA:96:D0:CD:58:62:D6:D7:36:CD:66:68:6E:FF:46:0D:E7
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       445605F66B70BA4EA5748A35DC1FDD9D58B51E64
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31332e302f32342d3234203d3e20343030333034.roa
Signing time:             Tue 01 Jul 2025 01:44:34 +0000
ROA not before:           Tue 01 Jul 2025 01:39:34 +0000
ROA not after:            Tue 30 Jun 2026 01:44:34 +0000
asID:                     400304
IP address blocks:        64.49.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:56:05:f6:6b:70:ba:4e:a5:74:8a:35:dc:1f:dd:9d:58:b5:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul  1 01:39:34 2025 GMT
            Not After : Jun 30 01:44:34 2026 GMT
        Subject: CN=2B0CB0EA96D0CD5862D6D736CD66686EFF460DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e8:ed:89:b9:da:af:f8:29:39:52:dd:02:4e:
                    7e:28:72:26:57:76:77:b6:9a:1c:ee:11:70:47:ed:
                    7c:be:e8:1b:25:1f:09:ae:99:15:b4:97:a3:f2:36:
                    e4:a4:5c:92:14:85:8d:82:a3:02:73:6f:c5:2f:34:
                    98:b6:ce:40:48:64:dc:a8:88:44:49:1d:da:29:53:
                    c0:fa:5a:b4:67:52:26:0b:0b:f4:6f:db:b6:1d:9c:
                    69:2f:6f:04:87:34:76:a6:28:5e:45:1f:8a:77:be:
                    af:86:24:2f:e5:fb:5c:41:0b:c5:9d:01:a6:d6:90:
                    c6:3b:ba:fa:0a:54:d4:0b:ba:0d:d7:ab:9b:44:32:
                    50:76:64:31:c2:72:a3:ca:e2:39:d2:4d:fd:42:4b:
                    a6:53:10:1c:02:09:95:b1:b1:cb:b7:0a:a1:22:78:
                    60:79:26:2c:45:06:b2:a9:85:9b:ab:be:ff:a7:37:
                    81:59:dc:e7:dd:a5:6b:27:66:fa:fa:6e:95:6b:8f:
                    0c:88:8a:96:d9:6c:3d:4e:b5:69:d4:cf:0a:9f:80:
                    da:fc:bb:c6:06:86:2d:dc:0f:57:60:fe:7e:22:a7:
                    b0:f4:eb:7e:1a:08:1c:4d:d9:cb:8d:96:e0:83:f4:
                    43:bb:f0:59:9e:4a:fd:73:29:51:76:24:48:60:f2:
                    2a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0C:B0:EA:96:D0:CD:58:62:D6:D7:36:CD:66:68:6E:FF:46:0D:E7
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31332e302f32342d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f0:b6:86:79:fa:37:62:ea:7e:2f:24:5a:ae:00:8f:93:7f:
         ec:29:d9:e1:83:05:0c:54:41:fe:b3:5f:ee:2f:73:81:d4:53:
         42:16:05:3e:50:24:55:7f:ed:04:1b:90:ee:80:5d:f5:48:51:
         ee:8a:f6:ab:8b:f7:8f:9b:f0:36:cf:a9:b5:ab:9a:ab:d9:4d:
         78:47:8f:31:22:78:01:d2:26:19:ae:90:c7:1b:11:00:15:a3:
         b6:34:92:fb:e3:d5:97:9b:65:d6:36:f4:43:81:5c:9e:bb:cc:
         0c:8a:3b:b6:80:c4:93:86:4a:28:b6:c3:93:f6:af:41:7d:6d:
         f8:d2:0e:af:80:69:ec:e9:52:a6:e6:0b:3e:a8:bb:06:b6:d9:
         9d:e9:80:73:3d:5a:7c:1f:b0:f4:dd:b0:29:7b:14:07:26:58:
         2c:e5:dc:06:f2:c7:d6:8f:3f:47:36:4a:51:07:ed:b0:77:88:
         71:3d:82:5d:c3:fe:06:b3:db:f7:6e:78:13:48:a1:7f:bb:7e:
         88:be:88:18:eb:06:d6:78:79:4e:77:b2:e6:fe:78:ca:32:27:
         26:d7:37:c6:10:08:1a:80:7a:82:06:ed:e5:08:6d:42:55:7a:
         e2:80:d9:fe:5e:25:67:04:49:1a:c3:ba:cc:c8:4a:39:f0:80:
         ed:13:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:18:08 2025 by rpki-client