Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          LT2rsRzbwsdvoQRv2naAk9I/ps/kXNdgY9uJ5x7TjfA=
Subject key identifier:   A5:0B:66:21:D8:F6:2B:E9:03:C0:26:CE:4E:C6:88:2F:18:01:13:1A
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       62034D41F9A19717318233F497B324B2BF1325BD
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS36352.roa
Signing time:             Wed 06 May 2026 07:17:17 +0000
ROA not before:           Wed 06 May 2026 07:12:17 +0000
ROA not after:            Wed 05 May 2027 07:17:17 +0000
asID:                     36352
IP address blocks:        207.180.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:03:4d:41:f9:a1:97:17:31:82:33:f4:97:b3:24:b2:bf:13:25:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:17 2026 GMT
            Not After : May  5 07:17:17 2027 GMT
        Subject: CN=A50B6621D8F62BE903C026CE4EC6882F1801131A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:f8:80:09:49:38:5e:86:9d:77:32:9d:04:
                    5e:ab:27:6c:b3:11:23:ae:2c:4b:0c:02:f8:e9:9e:
                    84:3a:79:06:f4:21:7b:af:79:6e:66:85:f5:81:49:
                    66:0e:2c:fe:e2:3d:e5:4f:d3:00:ba:73:68:6c:0a:
                    02:60:0d:6a:03:77:f4:cf:3b:19:2d:b8:40:4f:e2:
                    66:45:41:a3:f9:ce:a2:1b:7d:ff:aa:bb:94:e8:fb:
                    42:19:03:0b:9d:19:ce:17:12:a6:80:5a:d2:c1:00:
                    aa:13:b2:bf:e6:a7:e5:3b:da:ec:de:f3:ef:86:ce:
                    27:a3:fc:51:7b:67:41:76:09:c4:d4:f1:cf:12:82:
                    e4:cf:3c:f3:dd:7a:88:28:3d:26:28:24:b7:47:7f:
                    8a:3d:46:07:e5:73:37:c5:79:36:68:c8:80:1f:7a:
                    5b:a2:48:1d:29:e2:cb:71:2d:5a:46:f2:5b:f9:a3:
                    8c:e5:d9:06:97:ac:9f:28:a8:46:26:db:3a:c7:12:
                    26:61:3c:aa:f0:c7:8c:06:9c:9c:28:bc:7d:04:c0:
                    47:7a:0a:51:1d:7c:be:91:4b:14:5b:be:bd:92:ef:
                    be:78:0e:50:4a:28:1e:21:ab:2a:c6:eb:9c:39:c8:
                    b5:4e:ad:b7:85:7c:bd:c7:55:6d:35:02:dc:26:b0:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0B:66:21:D8:F6:2B:E9:03:C0:26:CE:4E:C6:88:2F:18:01:13:1A
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:71:4c:be:99:5d:74:e2:2d:4b:19:f7:3a:97:59:e4:2b:3d:
         2e:04:1a:b4:b6:26:11:1f:9d:f5:ba:e7:91:0d:c4:66:3b:d1:
         7d:c2:31:0b:09:76:bc:20:43:f5:c5:af:a1:89:70:a8:16:75:
         45:cc:ac:28:8c:80:3c:0a:04:9e:e9:b6:b6:2b:76:12:25:89:
         62:17:2a:f8:80:bc:6f:e5:b4:9a:08:b7:be:75:36:4e:7b:86:
         ee:52:e1:a6:d4:d5:cf:4e:6a:46:38:32:51:93:53:06:95:b5:
         be:d7:9e:47:42:8b:eb:5f:35:0c:e6:25:5d:e1:dd:f1:93:e7:
         53:62:e3:6d:5f:35:16:1a:6f:10:28:84:49:b9:10:3a:8c:bb:
         0c:10:96:97:ec:93:50:43:21:62:a4:35:c0:d2:96:bb:a0:c4:
         e6:08:15:92:6c:f3:f5:2d:5f:dc:a2:84:46:f5:fc:1f:15:76:
         01:36:77:93:5a:c7:74:78:70:ad:6d:8e:16:1b:24:f6:38:2c:
         82:c8:0c:fd:c6:1d:74:b6:24:63:ae:d5:5d:c2:e5:26:81:2d:
         b7:39:49:bf:45:ec:1e:22:80:3b:6e:f4:8d:d2:ca:fc:68:17:
         16:3b:d3:9f:ae:82:0d:a5:cf:57:ea:f2:c2:17:ee:2c:e7:9f:
         4b:8c:fc:64
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUYgNNQfmhlxcxgjP0l7Mksr8TJb0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE3WhcNMjcwNTA1MDcxNzE3
WjAzMTEwLwYDVQQDEyhBNTBCNjYyMUQ4RjYyQkU5MDNDMDI2Q0U0RUM2ODgyRjE4
MDExMzFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBz4gAlJOF6G
nXcynQReqydssxEjrixLDAL46Z6EOnkG9CF7r3luZoX1gUlmDiz+4j3lT9MAunNo
bAoCYA1qA3f0zzsZLbhAT+JmRUGj+c6iG33/qruU6PtCGQMLnRnOFxKmgFrSwQCq
E7K/5qflO9rs3vPvhs4no/xRe2dBdgnE1PHPEoLkzzzz3XqIKD0mKCS3R3+KPUYH
5XM3xXk2aMiAH3pbokgdKeLLcS1aRvJb+aOM5dkGl6yfKKhGJts6xxImYTyq8MeM
BpycKLx9BMBHegpRHXy+kUsUW769ku++eA5QSigeIasqxuucOci1Tq23hXy9x1Vt
NQLcJrBufwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKULZiHY9ivpA8Amzk7GiC8Y
ARMaMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzM2MzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz7QzMA0GCSqGSIb3DQEBCwUAA4IB
AQBhcUy+mV104i1LGfc6l1nkKz0uBBq0tiYRH531uueRDcRmO9F9wjELCXa8IEP1
xa+hiXCoFnVFzKwojIA8CgSe6ba2K3YSJYliFyr4gLxv5bSaCLe+dTZOe4buUuGm
1NXPTmpGODJRk1MGlbW+155HQovrXzUM5iVd4d3xk+dTYuNtXzUWGm8QKIRJuRA6
jLsMEJaX7JNQQyFipDXA0pa7oMTmCBWSbPP1LV/cooRG9fwfFXYBNneTWsd0eHCt
bY4WGyT2OCyCyAz9xh10tiRjrtVdwuUmgS23OUm/ReweIoA7bvSN0sr8aBcWO9Of
roINpc9X6vLCF+4s559LjPxk
-----END CERTIFICATE-----
Generated at Thu May 7 04:12:21 2026 by rpki-client