Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138392e302f32342d3234203d3e203136353039.roa
File:                     36342e35372e3138392e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          N1K3X9bypJJqT9lmqtpSxwOxrcAFStOvHOuLM8zo408=
Subject key identifier:   16:7C:53:60:0F:FD:77:8D:AC:78:25:5B:F0:22:6B:51:BD:B9:95:61
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       7FF36C3B80556137E4145D83F560D58FD8A994A7
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138392e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 16 Jul 2026 16:03:58 +0000
ROA not before:           Thu 16 Jul 2026 15:58:58 +0000
ROA not after:            Thu 15 Jul 2027 16:03:58 +0000
asID:                     16509
IP address blocks:        64.57.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f3:6c:3b:80:55:61:37:e4:14:5d:83:f5:60:d5:8f:d8:a9:94:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul 16 15:58:58 2026 GMT
            Not After : Jul 15 16:03:58 2027 GMT
        Subject: CN=167C53600FFD778DAC78255BF0226B51BDB99561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a7:43:a8:f5:77:27:ec:58:98:fc:76:12:b6:
                    83:38:01:7e:eb:b4:30:5e:f4:10:78:92:84:f8:4b:
                    c6:3f:4e:e5:4c:4f:d2:d9:22:9d:b0:11:54:e3:f9:
                    56:03:16:de:7f:a5:55:b7:59:0e:73:99:51:ca:44:
                    28:14:87:c0:4f:35:f1:be:3f:8a:8f:51:b6:04:10:
                    65:3b:dc:77:55:7c:a2:0f:9e:15:1a:12:2d:82:90:
                    38:00:7b:15:2f:d0:58:9c:b2:46:47:4e:50:05:f4:
                    65:df:a2:fd:f2:42:73:67:aa:ef:9d:64:c8:b8:e7:
                    70:87:09:0d:4a:1f:59:bc:69:17:5a:20:06:49:2d:
                    95:7b:00:55:81:0b:ed:ed:f0:a3:3a:53:5a:d3:43:
                    30:da:c4:50:5d:9d:c8:47:85:98:65:f6:05:1f:08:
                    b7:15:52:04:9a:73:1e:09:17:54:50:bc:b3:5b:32:
                    84:39:30:1c:d4:56:26:d2:12:bd:8c:b9:4a:13:24:
                    5a:31:86:a5:a5:8e:55:8c:eb:66:95:09:3d:40:3a:
                    b0:26:b2:96:b3:52:5a:87:f1:fb:9e:cf:42:a1:00:
                    95:a2:88:9a:fc:91:99:5b:41:3d:c1:db:0c:c6:90:
                    49:d5:18:7b:09:21:fb:f7:60:fd:c0:8d:05:c5:05:
                    8f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7C:53:60:0F:FD:77:8D:AC:78:25:5B:F0:22:6B:51:BD:B9:95:61
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138392e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:44:a6:90:ec:44:a8:7c:a7:2e:18:b1:6f:e0:08:3c:3e:
         9f:b3:f4:f2:1d:33:de:75:6c:11:93:f7:1b:c0:b6:91:7d:01:
         ed:ee:15:a4:b8:81:9e:9c:87:ca:0e:e8:d5:e0:52:61:34:1c:
         51:4f:9f:ac:f0:7f:82:eb:5a:27:08:a2:7f:97:dc:7c:b6:19:
         b6:9e:a1:99:c6:bf:b7:43:bc:b3:fa:75:28:7a:2b:f5:db:1c:
         46:9c:8f:09:08:d2:61:0e:50:c0:87:85:7e:83:f7:fa:53:38:
         f3:23:1a:fe:ab:7a:b8:78:be:4f:bc:9e:ef:2e:e5:95:e7:33:
         b6:48:bf:37:56:9e:53:e4:b1:29:74:a9:f7:08:9e:ea:2a:d1:
         8b:6e:7c:ca:90:13:43:85:81:42:05:a2:46:63:63:3f:5f:c4:
         a7:24:c2:df:e0:6f:5d:62:01:4e:f4:93:37:24:a5:62:67:1b:
         40:52:cf:4c:57:0d:8c:f7:91:dd:6a:39:49:27:25:c3:36:39:
         da:fe:cb:cc:b4:11:7e:56:9f:2a:26:be:e1:81:4c:86:44:2a:
         67:78:a3:47:a8:3a:a3:9f:6b:8e:75:c2:5d:ce:51:15:42:18:
         45:aa:b3:ff:b9:c0:15:7c:61:65:f8:8d:f8:b4:d3:2a:e5:67:
         03:07:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:10:51 2026 by rpki-client