Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138392e302f32342d3234203d3e203134363138.roa
File:                     36342e35372e3138392e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          CuRgjHQyiqYO8/Ra8UNUTCx1u9JZ3SVH/8/BZ+cZRvM=
Subject key identifier:   EE:19:33:4A:C8:F6:56:C8:DF:E7:8B:1D:75:91:2D:DF:03:99:F4:96
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       15F678006C976354FD35E4C78B5BF5A79EC7E8CB
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138392e302f32342d3234203d3e203134363138.roa
Signing time:             Thu 16 Jul 2026 16:03:58 +0000
ROA not before:           Thu 16 Jul 2026 15:58:58 +0000
ROA not after:            Thu 15 Jul 2027 16:03:58 +0000
asID:                     14618
IP address blocks:        64.57.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f6:78:00:6c:97:63:54:fd:35:e4:c7:8b:5b:f5:a7:9e:c7:e8:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul 16 15:58:58 2026 GMT
            Not After : Jul 15 16:03:58 2027 GMT
        Subject: CN=EE19334AC8F656C8DFE78B1D75912DDF0399F496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:37:5c:17:ef:75:54:f5:00:cb:bb:db:5d:
                    ee:7a:15:1d:31:03:4d:02:69:98:7c:3c:63:d2:c6:
                    57:08:b1:aa:01:2c:6d:7c:eb:78:dd:b9:26:9f:46:
                    08:c5:c6:50:d6:63:82:14:8d:dc:13:2c:78:98:e7:
                    0e:05:67:9f:3e:1e:ff:cc:0f:7f:7f:ea:c0:fe:52:
                    83:6a:17:c7:f6:85:12:78:18:0b:bb:47:b5:2b:98:
                    0d:31:88:e7:1e:ad:19:87:b1:9c:b0:7b:49:b9:d8:
                    0f:f9:53:75:19:c4:dd:0d:9a:bf:1c:ed:4b:31:0b:
                    6e:06:81:b9:05:2c:05:2b:28:fb:4c:a6:e6:c1:41:
                    31:3e:46:18:87:01:e7:ed:46:71:bd:e6:5b:d6:c5:
                    8b:34:a1:77:ee:56:63:cb:39:e0:21:23:db:cf:d0:
                    d2:54:f0:5a:f3:77:17:01:42:a6:39:10:c5:ca:ef:
                    c7:e4:c4:83:09:17:24:99:9a:37:76:f1:87:74:fe:
                    83:3c:42:8e:51:2f:0a:47:72:0a:2a:f6:b7:54:18:
                    c2:02:c4:4a:6d:3d:cd:b7:d9:bc:9c:f5:98:1d:ab:
                    0a:ed:8f:28:19:1a:55:e8:a7:2a:72:d0:74:82:35:
                    58:3d:07:a1:d1:64:01:9d:40:b4:21:32:84:90:35:
                    da:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:19:33:4A:C8:F6:56:C8:DF:E7:8B:1D:75:91:2D:DF:03:99:F4:96
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138392e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:7a:60:2c:3c:13:23:92:fb:39:a8:8f:a3:88:6b:c8:7c:
         df:8b:eb:b0:b5:da:35:f2:4c:d4:63:d1:f6:6a:25:7f:01:14:
         5e:d7:a9:64:7f:55:42:2e:63:c8:46:ad:5f:27:2f:69:cf:f6:
         ba:79:0c:78:67:23:38:ff:81:06:06:4f:d0:29:7e:45:d8:e7:
         8b:b2:92:9b:f4:9e:07:06:50:5e:e8:84:85:74:c7:ea:b4:65:
         c3:f3:0f:59:07:37:de:04:84:32:2a:69:4b:74:c6:69:4c:06:
         d0:c8:da:8b:c5:9d:fa:16:99:dd:c6:83:8a:c6:fd:51:cb:9f:
         0c:12:a3:9f:0c:d7:72:0d:b6:bd:16:bf:2f:68:e7:1b:e5:28:
         21:35:8d:ce:f4:1b:83:cf:e3:7a:83:61:ea:a6:fd:c6:ec:39:
         eb:2d:c7:d2:62:0c:0c:d8:fa:ab:cd:56:0e:76:3e:69:ca:81:
         ca:cb:56:14:02:6b:5d:3d:30:f3:3e:48:d3:31:44:c7:09:5c:
         4e:25:c3:c1:7d:ff:e9:34:46:97:aa:97:39:fb:3f:f7:8d:25:
         42:10:3d:d2:fd:0e:2f:e3:be:b8:c1:95:dc:ff:31:36:d1:5e:
         35:e7:16:ec:b7:f5:04:ea:d8:91:d8:6b:5c:a2:14:54:f9:48:
         f3:99:39:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:10:51 2026 by rpki-client