Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138382e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ccHaMfKJ/KzaZxsZoL9q3G9BOuCMtW/y+otsxOg/FhE=
Subject key identifier:   84:CD:62:E2:15:FF:34:97:2E:3F:48:EB:F8:2E:4A:9C:49:50:46:AE
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       0E2393A138034588B4A32E6DE0E22F34334A400F
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138382e302f32342d3234203d3e20383334.roa
Signing time:             Thu 16 Jul 2026 16:06:16 +0000
ROA not before:           Thu 16 Jul 2026 16:01:16 +0000
ROA not after:            Thu 15 Jul 2027 16:06:16 +0000
asID:                     834
IP address blocks:        64.57.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:23:93:a1:38:03:45:88:b4:a3:2e:6d:e0:e2:2f:34:33:4a:40:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul 16 16:01:16 2026 GMT
            Not After : Jul 15 16:06:16 2027 GMT
        Subject: CN=84CD62E215FF34972E3F48EBF82E4A9C495046AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d7:ad:bd:e3:18:63:22:0d:f5:61:6e:3b:c8:
                    40:56:12:25:59:be:8e:f0:90:f8:cb:fd:48:ef:35:
                    b7:a1:dd:5c:c2:a8:1d:86:15:c8:be:a4:0b:14:4e:
                    4c:3b:f8:2f:f4:ab:ea:d4:a5:fb:c3:63:96:0f:36:
                    29:16:ad:c0:b2:52:3e:fe:41:24:33:f8:ec:39:46:
                    98:85:78:ff:29:91:74:7f:06:68:90:6e:f2:9f:8a:
                    3c:e7:66:58:a8:a5:2c:a1:a6:49:28:b0:f6:9c:f8:
                    22:1e:73:9c:63:0e:5d:75:b9:98:6b:06:e0:44:49:
                    18:d8:eb:6a:c3:20:a2:f1:e6:43:84:fe:ec:e0:4e:
                    2f:82:68:fc:4b:db:f5:8b:60:04:37:a5:86:b8:d5:
                    9e:57:d2:7d:64:61:0a:6e:9b:ba:0e:c0:1f:e6:6d:
                    1d:ca:d2:5a:10:40:f7:4c:5d:e5:a0:7d:8f:75:cb:
                    99:18:d6:24:49:05:eb:9f:5a:f8:bc:d4:00:f3:e1:
                    b8:58:4e:e2:a2:28:4e:bd:4e:bc:32:c4:88:d7:fd:
                    25:25:69:bb:ee:d4:c8:d4:be:b5:7e:60:2b:c2:90:
                    de:64:5e:2b:d9:47:f1:84:43:55:92:f9:0a:d2:7a:
                    e7:97:0d:da:2f:3a:dd:ea:7a:8f:15:6c:e8:00:57:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:62:E2:15:FF:34:97:2E:3F:48:EB:F8:2E:4A:9C:49:50:46:AE
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:cc:41:99:d5:fe:0b:bd:5b:3d:ea:ec:0b:3a:b4:42:33:71:
         79:be:cb:de:d6:90:77:d4:49:2b:45:70:71:a4:45:72:64:36:
         75:fa:44:a3:9e:ee:d1:ac:8a:e7:c0:c7:c6:e5:e1:86:64:47:
         68:ee:ff:85:30:92:f2:53:d7:c5:6c:c7:63:d2:43:1f:6c:28:
         11:ff:39:b3:61:da:d9:f4:06:48:fa:21:6e:e8:67:0c:f6:fa:
         0b:fc:9a:58:2d:61:f6:f0:ee:28:14:bb:45:00:74:c2:8d:23:
         be:be:31:fa:5e:3d:18:1e:99:6d:a7:62:5f:81:e7:24:fd:fd:
         58:0c:40:bc:de:1e:d3:49:96:61:f7:32:d8:b5:bb:0f:27:48:
         91:aa:65:24:de:70:04:58:7c:bb:b6:21:8b:e5:35:17:c8:1c:
         08:59:63:a2:30:ef:24:0a:58:1d:2b:93:52:21:db:90:ee:d3:
         b9:0a:07:51:51:d9:29:d4:d8:4a:49:50:b2:a5:01:50:74:d6:
         7b:ea:1f:a3:e8:0c:55:f2:52:0f:e4:08:84:da:41:9d:8f:5c:
         cc:ac:6e:65:9b:fd:c3:c6:36:bc:d1:1f:8f:f2:7b:aa:c4:d7:
         31:a0:b0:91:fe:ea:52:76:c4:5b:6e:f2:83:1b:9b:f6:6d:1d:
         15:6e:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:10:51 2026 by rpki-client