Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS36352.roa
File:                     AS36352.roa (raw, json)
Hash identifier:          DBUqkG5bG+hHg34hP89u2d+5MfsBvngiCgLuy2e3hkU=
Subject key identifier:   92:C8:DB:AE:9D:B0:F9:EE:5C:BA:8C:5B:69:F0:52:41:B7:DD:B0:A4
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       2E94F890B1A60B8299DAAE2ECFE99D00C49A84F9
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS36352.roa
Signing time:             Fri 04 Sep 2026 06:25:05 +0000
ROA not before:           Fri 04 Sep 2026 06:20:05 +0000
ROA not after:            Fri 03 Sep 2027 06:25:05 +0000
asID:                     36352
IP address blocks:        40.27.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:94:f8:90:b1:a6:0b:82:99:da:ae:2e:cf:e9:9d:00:c4:9a:84:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Sep  4 06:20:05 2026 GMT
            Not After : Sep  3 06:25:05 2027 GMT
        Subject: CN=92C8DBAE9DB0F9EE5CBA8C5B69F05241B7DDB0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:82:84:d7:ee:40:82:67:8d:eb:e2:b1:2f:
                    f9:93:bc:30:6f:af:61:54:88:b5:92:67:f8:34:d8:
                    a6:00:df:0e:ba:12:6d:45:c6:ec:88:92:e2:5f:e6:
                    56:57:bd:6d:6e:b2:b6:6d:46:a3:5e:12:88:2c:81:
                    a3:79:38:70:bc:ca:5a:cf:a7:d6:c2:92:48:68:f8:
                    fd:35:bc:d1:1f:ab:26:11:64:97:62:36:d5:1e:b6:
                    3e:25:92:2e:ae:48:44:2c:2e:2f:07:25:68:21:39:
                    71:2c:9f:8f:a7:0d:16:36:bc:f9:90:0d:17:74:e2:
                    c6:e8:d0:1b:41:15:6a:c3:76:1d:96:ed:d6:e2:19:
                    00:dc:44:b6:a1:31:a4:cf:35:57:55:8b:b8:ed:da:
                    e4:5e:1b:f3:06:a9:52:52:32:04:b8:a0:71:85:4f:
                    54:b3:10:e3:d3:c1:b2:2d:d4:80:2a:56:c9:46:3b:
                    7a:ca:79:55:06:27:34:c6:4e:c5:c0:d9:94:69:74:
                    51:38:f8:9c:01:c4:c3:18:b9:f9:da:45:e1:47:96:
                    32:5a:d2:d4:07:96:f6:af:a2:3b:23:0d:01:f5:47:
                    60:d6:92:d5:66:01:f9:20:d3:29:5f:04:60:eb:67:
                    51:61:89:12:cb:9e:ad:22:33:79:17:86:2d:8f:9d:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:DB:AE:9D:B0:F9:EE:5C:BA:8C:5B:69:F0:52:41:B7:DD:B0:A4
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS36352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:1b:24:4b:34:00:37:d4:a9:29:69:69:33:5c:37:30:9c:
         62:6d:f9:3e:56:9d:a2:00:5b:d6:c8:25:de:04:3a:47:8b:3c:
         cd:fd:f7:f9:de:40:6f:2a:07:9f:a7:b5:8a:00:89:d1:64:91:
         6e:ce:6e:f3:bb:8b:83:a5:0f:5d:14:e3:c6:04:55:da:01:7b:
         87:2a:91:a9:7e:be:c5:fb:7d:48:5f:09:3b:25:f4:e2:0f:8d:
         59:17:67:7f:2f:d0:c6:ab:9d:51:d9:f6:af:6f:64:a4:1f:1e:
         c8:17:4f:81:03:b1:75:04:79:1a:81:2d:69:60:76:06:6b:00:
         54:70:46:7c:c3:3a:b8:8d:92:30:42:19:52:46:ac:3a:80:e8:
         1e:82:cc:bf:f9:79:4b:e1:fe:95:0b:84:d4:3f:25:95:80:88:
         13:13:45:b7:26:52:ba:18:bd:7a:ec:4f:16:8f:43:87:49:f2:
         45:5f:d9:39:48:d2:52:7a:e7:56:64:22:13:3c:4b:61:3b:fd:
         f1:13:5f:a5:36:2f:43:c7:4d:85:6d:de:19:0c:bc:a9:b0:61:
         a5:92:10:22:fd:d4:c5:21:f8:a9:30:5f:18:3f:b3:e1:3b:ea:
         7b:b5:e0:e2:a2:12:ea:bd:aa:c0:a9:20:9d:c2:ec:d6:24:76:
         1f:f5:cf:b4
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIULpT4kLGmC4KZ2q4uz+mdAMSahPkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTA0MDYyMDA1WhcNMjcwOTAzMDYyNTA1
WjAzMTEwLwYDVQQDEyg5MkM4REJBRTlEQjBGOUVFNUNCQThDNUI2OUYwNTI0MUI3
RERCMEE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6yChNfuQIJn
jevisS/5k7wwb69hVIi1kmf4NNimAN8OuhJtRcbsiJLiX+ZWV71tbrK2bUajXhKI
LIGjeThwvMpaz6fWwpJIaPj9NbzRH6smEWSXYjbVHrY+JZIurkhELC4vByVoITlx
LJ+Ppw0WNrz5kA0XdOLG6NAbQRVqw3Ydlu3W4hkA3ES2oTGkzzVXVYu47drkXhvz
BqlSUjIEuKBxhU9UsxDj08GyLdSAKlbJRjt6ynlVBic0xk7FwNmUaXRROPicAcTD
GLn52kXhR5YyWtLUB5b2r6I7Iw0B9Udg1pLVZgH5INMpXwRg62dRYYkSy56tIjN5
F4Ytj50EqwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJLI266dsPnuXLqMW2nwUkG3
3bCkMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzM2MzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKBvmMA0GCSqGSIb3DQEBCwUAA4IB
AQANZRskSzQAN9SpKWlpM1w3MJxibfk+Vp2iAFvWyCXeBDpHizzN/ff53kBvKgef
p7WKAInRZJFuzm7zu4uDpQ9dFOPGBFXaAXuHKpGpfr7F+31IXwk7JfTiD41ZF2d/
L9DGq51R2favb2SkHx7IF0+BA7F1BHkagS1pYHYGawBUcEZ8wzq4jZIwQhlSRqw6
gOgegsy/+XlL4f6VC4TUPyWVgIgTE0W3JlK6GL167E8Wj0OHSfJFX9k5SNJSeudW
ZCITPEthO/3xE1+lNi9Dx02Fbd4ZDLypsGGlkhAi/dTFIfipMF8YP7PhO+p7teDi
ohLqvarAqSCdwuzWJHYf9c+0
-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:49 2026 by rpki-client