Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/36342e342e3137302e302f32342d3234203d3e20323030303137.roa
File:                     36342e342e3137302e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier:          g82SlBpVn4dth3yXbjTtqyNV3XEHO3uZLPPENLzfCv4=
Subject key identifier:   A9:AE:28:B0:F2:84:A0:CF:99:FE:3A:1D:10:99:54:43:4A:F8:88:8B
Certificate issuer:       /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial:       44C6B0742CE2F6243AF7DE0498665B7E077C2E62
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/36342e342e3137302e302f32342d3234203d3e20323030303137.roa
Signing time:             Tue 23 Jun 2026 12:15:22 +0000
ROA not before:           Tue 23 Jun 2026 12:10:22 +0000
ROA not after:            Tue 22 Jun 2027 12:15:22 +0000
asID:                     200017
IP address blocks:        64.4.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
                          rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c6:b0:74:2c:e2:f6:24:3a:f7:de:04:98:66:5b:7e:07:7c:2e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
        Validity
            Not Before: Jun 23 12:10:22 2026 GMT
            Not After : Jun 22 12:15:22 2027 GMT
        Subject: CN=A9AE28B0F284A0CF99FE3A1D109954434AF8888B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:66:88:39:b2:41:a8:82:23:b7:76:ed:fb:
                    3f:74:fd:fe:56:40:77:b1:9b:5e:d9:bb:a4:7b:1c:
                    86:60:46:c5:e8:72:bb:48:86:b3:29:d6:5d:8d:bf:
                    b7:34:6a:e6:a1:2e:9b:49:ac:cb:1f:4f:c6:a6:76:
                    10:1b:63:cd:e5:78:85:32:59:19:cc:6b:e3:d1:cb:
                    9b:df:e7:78:04:88:98:5d:74:6d:e5:5e:82:ac:5b:
                    21:e8:1c:88:e0:5c:e3:2d:67:1c:44:a4:42:87:90:
                    b7:a6:d6:13:f8:c5:61:e4:7a:33:cb:6a:14:14:e2:
                    fb:76:1e:62:85:ed:7b:5b:2b:28:9b:04:b3:0f:af:
                    24:4a:cc:18:aa:1c:88:95:14:d1:34:8b:fd:4f:26:
                    e8:e3:ec:60:83:61:68:e8:44:0c:db:cb:78:8a:1d:
                    9d:3c:28:d8:9e:2c:01:fb:28:80:60:05:06:aa:ae:
                    db:cc:bc:fb:4f:79:2f:9e:30:be:ed:24:fa:da:9c:
                    18:9c:8c:ae:75:20:f0:31:9c:3b:a8:23:d9:70:65:
                    1b:33:a7:55:a9:70:50:c9:30:f1:c3:f8:65:31:f2:
                    ec:36:c4:9d:40:19:14:21:10:01:17:9d:2e:49:b3:
                    a8:52:b8:29:f4:b0:7f:39:65:b5:43:eb:64:60:96:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AE:28:B0:F2:84:A0:CF:99:FE:3A:1D:10:99:54:43:4A:F8:88:8B
            X509v3 Authority Key Identifier:
                keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/36342e342e3137302e302f32342d3234203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:7a:fe:db:ac:b3:49:a4:1a:db:17:0f:ad:e2:01:7c:5c:e1:
         a2:f3:ab:7c:c4:02:d7:bd:00:82:96:42:37:3e:b5:8a:a6:4e:
         83:a2:5c:17:eb:88:0f:43:4a:56:22:08:28:1f:56:47:20:5c:
         ee:3a:21:55:44:8b:6e:73:c3:0e:60:22:86:54:88:45:d1:1f:
         1f:b8:15:a7:8c:61:05:dc:76:a0:46:06:b5:25:8e:88:c7:9c:
         5b:29:ff:d5:04:d9:98:63:90:28:02:5e:91:42:8b:b2:62:28:
         74:42:3b:ef:a6:98:00:18:1a:68:5a:c2:e5:4b:f5:ef:0f:84:
         d7:c3:17:a7:26:69:b5:dd:0c:28:5b:dc:c7:e4:79:05:fa:55:
         11:2b:e3:f9:97:e5:b2:a4:35:6f:cf:f7:94:e7:1e:68:82:ae:
         7b:cd:ed:23:87:7f:32:a0:a8:c1:db:1d:cf:67:13:b2:6f:7f:
         3c:1b:85:f4:5f:89:10:65:90:6f:39:eb:7a:d1:df:78:67:07:
         2f:9f:d3:c7:70:8a:88:fa:17:f8:3c:85:0a:36:2b:80:26:be:
         79:25:98:44:c2:fd:c3:94:6e:64:ae:c8:ca:a2:1b:7b:94:cb:
         4b:00:b9:5d:1a:fd:dc:fc:1a:88:a0:28:0b:c9:26:b3:a6:c4:
         d7:f9:39:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:54:01 2026 by rpki-client