Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e2038323230.roa
File:                     36352e38372e382e302f32342d3234203d3e2038323230.roa (raw, json)
Hash identifier:          2yaTLUZEi0CFZP/soAjTmj+yn9lHCTSx3xIr0eEbHjo=
Subject key identifier:   05:BB:53:FD:3E:03:A5:4F:45:0C:B4:86:0F:91:24:14:5A:CA:47:1B
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       5BAD2E4FE92BF3561D34C670AEDDD17F4E56E2F4
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e2038323230.roa
Signing time:             Fri 03 Jul 2026 06:07:58 +0000
ROA not before:           Fri 03 Jul 2026 06:02:58 +0000
ROA not after:            Fri 02 Jul 2027 06:07:58 +0000
asID:                     8220
IP address blocks:        65.87.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ad:2e:4f:e9:2b:f3:56:1d:34:c6:70:ae:dd:d1:7f:4e:56:e2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: Jul  3 06:02:58 2026 GMT
            Not After : Jul  2 06:07:58 2027 GMT
        Subject: CN=05BB53FD3E03A54F450CB4860F9124145ACA471B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:5f:3d:99:8b:3e:1c:1f:c8:56:7c:ff:27:
                    28:dd:68:bb:85:e2:19:53:61:f6:cf:97:79:55:4f:
                    6d:cf:a0:76:2c:fd:e4:7d:6e:bd:30:a1:f6:a2:a3:
                    b0:55:60:89:8a:35:5c:be:72:78:90:a5:ea:51:c5:
                    1a:a6:29:47:ef:2e:77:2b:12:d9:dd:5b:ca:b8:96:
                    b1:4a:10:93:4b:93:a8:f9:8c:fc:b8:b2:fb:48:c8:
                    1a:d7:37:5d:e6:4c:24:39:1c:7c:54:07:cc:1f:69:
                    5f:d6:c9:49:44:51:ed:ae:d3:ea:27:e5:f6:73:31:
                    c2:5c:4b:d3:99:88:eb:60:07:95:dd:6a:e1:b5:61:
                    93:dc:f0:11:4f:28:06:c3:42:52:56:ee:48:08:3c:
                    04:86:58:b8:f4:6b:39:7c:14:8e:a7:90:14:01:5b:
                    f8:fa:dc:66:58:77:aa:4f:7a:86:a9:bb:76:46:47:
                    80:50:90:bf:17:e7:e5:a0:b8:3c:01:9c:56:17:19:
                    49:11:cc:26:8c:eb:27:bf:b4:fe:fe:a7:1b:71:32:
                    08:ea:77:29:fa:62:a9:84:36:4a:29:0a:26:68:5d:
                    e8:ae:b5:b7:72:34:7c:61:ed:34:f6:2c:27:80:ee:
                    d1:e5:e4:78:48:e3:71:d1:8a:62:0d:b0:9b:02:b5:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BB:53:FD:3E:03:A5:4F:45:0C:B4:86:0F:91:24:14:5A:CA:47:1B
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e2038323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:dd:d6:76:92:9e:50:35:db:0d:d6:e2:95:ba:18:ed:f2:35:
         20:f5:43:74:87:e2:a4:e7:c5:7c:58:b0:61:e6:ce:5d:d5:72:
         d8:e9:7d:e3:08:ef:c3:20:c7:78:6b:5e:fb:57:c7:cc:a9:cf:
         ba:72:6d:e9:02:2a:e8:26:1f:5c:37:e5:c3:09:8e:43:b3:94:
         51:6c:41:cb:3b:6a:69:4b:bf:ef:b6:1c:1a:3f:78:9f:50:c9:
         9b:02:37:a0:92:c3:36:be:57:5f:53:10:d9:bc:bb:e3:18:d4:
         b2:19:d7:78:cc:42:1a:83:6e:6b:07:c7:24:c7:ee:55:8f:49:
         b6:88:f9:e0:31:88:d4:34:c2:a5:5b:f9:49:d7:59:75:c6:b9:
         7a:68:a7:45:3c:2f:07:62:ab:97:35:83:1a:12:53:94:a3:dc:
         7e:c2:b2:7a:b4:92:71:e3:b0:4b:d5:05:fa:ec:76:13:d3:26:
         05:a8:96:fc:a1:27:ce:74:dd:8c:7c:af:31:88:49:55:2c:d0:
         1e:37:ff:78:e2:56:36:b0:2c:da:3c:bd:8c:e1:46:06:2d:a7:
         d2:3e:f7:9a:0f:08:23:32:49:48:f6:99:61:73:1b:0d:c7:8c:
         68:63:93:85:e7:48:8e:c2:f1:90:c9:70:c3:86:f3:9b:2c:3c:
         02:ff:5e:da
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUW60uT+kr81YdNMZwrt3Rf05W4vQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTVjNGM2NTViMmM2OTlmMTcwYzcyYTkyOTUzNDVmMGJh
ODYyY2U4NTMwMjU0YzNjZTMwHhcNMjYwNzAzMDYwMjU4WhcNMjcwNzAyMDYwNzU4
WjAzMTEwLwYDVQQDEygwNUJCNTNGRDNFMDNBNTRGNDUwQ0I0ODYwRjkxMjQxNDVB
Q0E0NzFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8VfPZmLPhwf
yFZ8/yco3Wi7heIZU2H2z5d5VU9tz6B2LP3kfW69MKH2oqOwVWCJijVcvnJ4kKXq
UcUapilH7y53KxLZ3VvKuJaxShCTS5Oo+Yz8uLL7SMga1zdd5kwkORx8VAfMH2lf
1slJRFHtrtPqJ+X2czHCXEvTmYjrYAeV3WrhtWGT3PARTygGw0JSVu5ICDwEhli4
9Gs5fBSOp5AUAVv4+txmWHeqT3qGqbt2RkeAUJC/F+floLg8AZxWFxlJEcwmjOsn
v7T+/qcbcTII6ncp+mKphDZKKQomaF3orrW3cjR8Ye009iwngO7R5eR4SONx0Ypi
DbCbArVscQIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFAW7U/0+A6VPRQy0hg+RJBRa
ykcbMB8GA1UdIwQYMBaAFAdL6FDbEF8/TqivGMsSkkes+bhpMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcyODYxMmMwYjE2LzAv
MDc0QkU4NTBEQjEwNUYzRjRFQThBRjE4Q0IxMjkyNDdBQ0Y5Qjg2OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzU2ODZhZmFjLTgwYjYtNDRlMy05OGIyLTczZmI2Y2QyYjE0Yi9lNWM0
YzY1NWIyYzY5OWYxNzBjNzJhOTI5NTM0NWYwYmE4NjJjZTg1MzAyNTRjM2NlMy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcy
ODYxMmMwYjE2LzAvMzYzNTJlMzgzNzJlMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNl
MjAzODMyMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAEFXCDANBgkqhkiG9w0BAQsFAAOCAQEAHd3W
dpKeUDXbDdbilboY7fI1IPVDdIfipOfFfFiwYebOXdVy2Ol94wjvwyDHeGte+1fH
zKnPunJt6QIq6CYfXDflwwmOQ7OUUWxByztqaUu/77YcGj94n1DJmwI3oJLDNr5X
X1MQ2by74xjUshnXeMxCGoNuawfHJMfuVY9Jtoj54DGI1DTCpVv5SddZdca5emin
RTwvB2KrlzWDGhJTlKPcfsKyerSSceOwS9UF+ux2E9MmBaiW/KEnznTdjHyvMYhJ
VSzQHjf/eOJWNrAs2jy9jOFGBi2n0j73mg8IIzJJSPaZYXMbDceMaGOThedIjsLx
kMlww4bzmyw8Av9e2g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:35 2026 by rpki-client