Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32382e302f32332d3234203d3e20323132343737.roa
File:                     36342e38342e32382e302f32332d3234203d3e20323132343737.roa (raw, json)
Hash identifier:          DEIeyvDLoB1KPQUQ6sWHFQbEvQxwHKPNmxoISqwF0w4=
Subject key identifier:   C4:27:54:98:62:72:70:4E:94:9D:AB:83:5C:66:F8:9D:12:6D:F4:7F
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       4AADBA23B3230B5F534460A8C33FF7E79754B00F
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32382e302f32332d3234203d3e20323132343737.roa
Signing time:             Thu 15 Oct 2026 07:08:55 +0000
ROA not before:           Thu 15 Oct 2026 07:03:55 +0000
ROA not after:            Thu 14 Oct 2027 07:08:55 +0000
asID:                     212477
IP address blocks:        64.84.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 00:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ad:ba:23:b3:23:0b:5f:53:44:60:a8:c3:3f:f7:e7:97:54:b0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Oct 15 07:03:55 2026 GMT
            Not After : Oct 14 07:08:55 2027 GMT
        Subject: CN=C42754986272704E949DAB835C66F89D126DF47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:e6:9e:d9:cc:b2:99:fa:a2:1b:34:52:3b:
                    56:45:cf:25:d9:5d:95:3c:bb:84:b0:c4:13:c2:39:
                    40:10:85:fa:52:02:a3:fc:5a:48:7b:62:fc:53:1d:
                    c8:9d:39:74:33:fe:34:41:d3:15:fc:e2:92:27:d1:
                    2f:b3:29:3a:70:b0:de:82:54:07:b6:51:30:a0:d1:
                    11:92:62:e1:f2:f9:30:19:46:40:61:e4:1a:0f:bc:
                    c2:ba:03:b1:52:d7:96:0d:db:a7:b4:1d:ee:4d:e3:
                    9c:87:bf:d9:2c:ff:bb:64:30:da:35:87:c5:ac:75:
                    f3:57:c1:60:99:39:e2:1f:2f:7b:57:78:3f:56:cc:
                    62:3e:db:2b:9f:9d:c1:bb:a4:72:92:0b:ab:31:0b:
                    33:67:fc:56:6d:0a:d8:a9:9e:7a:f9:cd:02:75:c7:
                    70:f9:02:22:5d:3c:c8:2c:69:1f:97:e5:ae:41:c3:
                    14:89:2f:45:5e:bb:65:b6:ca:d7:81:43:16:16:b4:
                    69:2a:93:4b:b4:6a:d3:dc:aa:a2:f2:f0:f4:77:5f:
                    12:e7:d3:fe:72:ed:15:a0:f4:6c:99:c9:d1:68:a2:
                    99:3d:c8:87:bd:04:16:64:bb:b1:db:e0:0e:d2:f3:
                    76:46:af:04:6f:9f:03:ff:9a:e7:14:d3:b8:6a:b8:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:27:54:98:62:72:70:4E:94:9D:AB:83:5C:66:F8:9D:12:6D:F4:7F
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32382e302f32332d3234203d3e20323132343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:d4:2b:05:be:ab:70:91:3e:55:f8:74:ce:5e:71:f7:6c:5b:
         74:85:c7:53:e6:87:dd:b8:14:85:12:f5:1a:07:27:ee:96:9e:
         a5:b1:d6:95:1a:ed:5e:bc:66:6f:76:57:7b:8f:d4:41:84:63:
         ce:c5:68:cd:f6:ed:9f:80:e9:e2:dd:31:41:52:1d:31:fa:45:
         fa:a1:ef:e1:ce:d7:ab:8d:a6:6d:11:89:21:6a:83:e7:37:e3:
         4f:0a:f6:69:3e:03:80:a0:81:bc:65:eb:4c:10:5f:26:f2:aa:
         87:5a:2b:00:34:60:e7:b3:0c:32:04:6d:c8:90:0d:f5:38:ab:
         76:b1:40:9b:ae:8a:86:3e:88:9f:27:2a:cf:b3:f1:25:91:7a:
         c6:2a:c5:79:c9:dd:83:58:59:e3:74:ae:0e:f9:62:9a:70:46:
         4b:ab:3e:8a:4f:f2:bc:69:2d:16:dd:a8:61:90:ab:66:15:f9:
         25:12:45:3c:97:da:9a:a4:c5:31:1e:fa:7e:4e:c8:de:61:77:
         e6:73:4c:c4:3f:5b:d8:d7:b5:f4:5c:50:69:2d:c9:1b:01:62:
         b7:ea:d2:9e:68:7c:f6:36:e5:8d:e6:af:73:89:8e:eb:9a:b5:
         12:fd:b6:ad:0f:e0:7d:c7:ce:ef:6f:d3:39:82:b7:26:5b:5a:
         10:7b:dc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:52:26 2026 by rpki-client