Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20333936333536.roa
File:                     36342e34392e31342e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          J3mkd3LEF1ognyP65FOi6NBVYzW9kMw46AQxZG7PjUc=
Subject key identifier:   52:DD:60:33:C4:F2:09:C1:E5:D8:AB:CF:0B:08:25:5C:52:75:F5:67
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       0BBE4F3D1F94E689B48017E1D05B7634B7EAD6A5
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20333936333536.roa
Signing time:             Thu 10 Jul 2025 19:49:43 +0000
ROA not before:           Thu 10 Jul 2025 19:44:43 +0000
ROA not after:            Thu 09 Jul 2026 19:49:43 +0000
asID:                     396356
IP address blocks:        64.49.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 12:02:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:be:4f:3d:1f:94:e6:89:b4:80:17:e1:d0:5b:76:34:b7:ea:d6:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul 10 19:44:43 2025 GMT
            Not After : Jul  9 19:49:43 2026 GMT
        Subject: CN=52DD6033C4F209C1E5D8ABCF0B08255C5275F567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:50:bc:18:f3:ca:da:e0:cd:20:60:0e:0f:
                    07:76:cc:b0:e5:26:c1:3d:ab:d3:d0:ec:7b:2f:e1:
                    9e:eb:40:2d:90:9b:3e:86:c0:1e:e4:a2:22:cd:79:
                    ad:4e:c6:be:f7:58:81:78:1f:6a:64:0c:c3:81:c8:
                    e8:58:2f:18:95:f7:2a:05:ed:0e:3d:22:39:a9:9b:
                    a5:aa:ab:98:fc:c1:3b:73:65:63:c7:64:91:95:9b:
                    c7:df:11:f4:85:70:6a:a0:a9:38:c4:00:93:20:34:
                    50:e5:43:94:ba:74:6c:0c:fe:9a:4b:9f:9e:81:a7:
                    2a:1e:95:00:4f:3c:9b:3d:e5:c2:72:3b:a0:af:57:
                    bc:a7:28:65:df:1a:c5:2b:cf:de:28:99:2f:fb:da:
                    3f:84:71:38:43:43:95:2d:56:45:fc:21:34:f5:fe:
                    a4:c8:a5:03:64:3d:cb:fe:41:af:15:9b:d5:b1:16:
                    22:37:13:99:a1:83:e2:1b:64:de:b8:27:b7:ec:77:
                    e8:2f:87:4a:64:12:ed:10:3b:56:4f:07:9a:7d:93:
                    52:94:07:99:db:9f:c9:60:cb:7d:0e:a2:0a:88:5d:
                    9c:88:42:d4:f2:58:11:67:af:50:ca:82:55:85:09:
                    f3:ba:0b:55:8e:1e:72:46:69:d1:99:d3:5d:f2:03:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DD:60:33:C4:F2:09:C1:E5:D8:AB:CF:0B:08:25:5C:52:75:F5:67
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:ec:4e:4e:cd:ed:1e:63:80:dc:13:db:7c:9a:f1:30:65:10:
         d7:97:88:7a:a3:de:de:76:b1:0e:79:db:59:6b:94:5f:fc:a0:
         24:72:28:c5:a9:9f:96:19:45:95:1d:e1:14:aa:ce:c7:fc:72:
         8a:0a:a1:d0:c5:27:15:b2:49:a7:53:25:5e:44:c5:63:e1:f3:
         e2:bf:0e:98:44:3d:b7:76:22:7c:f7:ec:16:70:c7:2b:b5:76:
         04:c0:de:03:6a:4e:53:b7:59:79:9b:41:37:41:82:db:e7:94:
         53:52:b2:31:16:43:06:de:d1:aa:d7:b9:ae:d3:29:9d:a5:83:
         35:ea:22:04:b5:97:33:5b:c0:b3:0c:ab:eb:36:51:c5:91:6b:
         e7:58:15:f7:f0:85:25:6e:c5:6c:4c:6c:68:f1:13:cf:d9:1a:
         aa:2c:c3:c9:fb:53:dd:b2:49:d2:ae:2d:fd:2c:b2:9d:4c:a6:
         c5:49:f0:12:f1:dc:48:12:c0:c3:39:1f:7e:db:02:52:a8:62:
         de:b3:19:db:34:ed:8a:4e:d6:f8:81:82:a3:67:5a:b3:b4:f8:
         49:9e:7d:16:1b:e8:b6:db:29:b4:30:e9:cf:91:cf:c5:e3:bf:
         9e:bb:14:ab:c7:9f:c6:b7:25:fa:36:22:22:ef:26:26:08:34:
         6e:56:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:50:23 2025 by rpki-client