Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e20343032323336.roa
File:                     36342e3235332e38362e302f32332d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          h179xyUaFfv5nhUp0aTRMbeb/DtT/FXfn79nBFuts8w=
Subject key identifier:   E1:BD:9E:28:18:0D:23:29:CE:86:B5:15:AE:70:E7:61:CF:A3:D6:4F
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       737FF0B910C1EF38A0643867E48871CA182C695B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:22:58 +0000
ROA not before:           Mon 06 Jul 2026 18:17:58 +0000
ROA not after:            Mon 05 Jul 2027 18:22:58 +0000
asID:                     402236
IP address blocks:        64.253.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 17:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7f:f0:b9:10:c1:ef:38:a0:64:38:67:e4:88:71:ca:18:2c:69:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jul  6 18:17:58 2026 GMT
            Not After : Jul  5 18:22:58 2027 GMT
        Subject: CN=E1BD9E28180D2329CE86B515AE70E761CFA3D64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4e:f1:57:03:ea:92:46:1f:4d:33:5b:c6:3b:
                    e4:d8:35:71:ee:7b:12:31:e8:c7:fc:2c:91:3d:2c:
                    5e:1e:eb:0a:7d:c1:a7:d1:0c:1f:2d:80:59:1a:47:
                    72:89:c7:57:af:2e:c0:73:68:66:9e:3d:c8:5e:28:
                    2b:8d:99:bf:ee:86:37:6c:69:04:bb:3e:e1:b1:69:
                    41:ba:35:21:18:ac:11:1e:91:22:db:a2:a9:22:d9:
                    16:83:d6:40:47:01:c6:47:e8:ca:0b:f9:15:4a:b2:
                    5d:e5:1d:ae:cf:60:ea:c9:04:2a:ac:63:ab:13:02:
                    b4:39:fd:ef:53:bc:82:a6:dd:ac:64:0c:db:f2:e0:
                    7b:26:09:d8:86:48:8e:2c:3a:d6:64:6c:85:e8:16:
                    24:0b:f8:ea:fc:80:f4:a3:1c:76:b2:a1:42:8e:5f:
                    c2:8b:0d:f0:c5:07:5b:86:70:a5:1b:a4:02:c8:58:
                    0b:12:95:30:05:1f:c1:a9:62:db:94:df:1c:8f:61:
                    de:23:87:44:ac:ea:bb:3a:5e:35:4c:d6:f0:02:df:
                    d2:4a:63:5e:07:fb:ec:a6:1a:18:1f:4d:23:d5:85:
                    3c:16:4f:5d:7f:88:b8:50:fd:53:23:91:cc:36:89:
                    e1:53:67:47:96:e1:d1:8c:f0:b3:0d:79:7f:7a:20:
                    9d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:9E:28:18:0D:23:29:CE:86:B5:15:AE:70:E7:61:CF:A3:D6:4F
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:6f:53:e3:cd:4f:8f:57:9d:6a:61:73:ca:2f:a7:8f:38:
         e0:ab:ca:f1:93:b1:c1:de:0c:1e:12:51:ed:c6:ed:01:62:92:
         4c:71:f0:da:bf:f7:77:1e:29:0a:99:fb:47:b3:d2:ea:ee:22:
         9c:39:a5:47:d2:50:09:12:bc:87:d2:7c:4c:31:46:89:6a:e2:
         fd:dc:24:ca:69:0c:36:41:4a:68:61:a1:e8:61:cb:42:23:70:
         41:96:d1:be:38:64:48:0f:44:73:00:63:d8:22:28:5a:62:7d:
         51:bd:6e:06:ee:fa:75:0e:13:c0:55:a3:e5:33:dc:5f:39:71:
         76:ea:e4:0f:b8:1a:dc:bb:99:b5:57:1b:10:a7:7f:1e:aa:7f:
         7a:7a:1e:9f:11:a2:7c:a2:69:7d:55:1e:52:ba:6b:df:8b:19:
         c5:c1:36:e8:ea:95:68:f2:dd:8c:a0:58:a0:8c:25:e3:8e:41:
         d1:f2:9f:9b:f7:a4:d8:54:8e:d2:e1:74:84:17:e0:5a:c4:f4:
         6d:6b:2f:36:80:78:0a:24:a3:b2:12:45:0e:0b:98:9c:1c:be:
         2d:65:a7:91:d5:71:f2:69:54:4c:46:1d:53:26:9f:b1:4f:d4:
         36:85:01:24:cc:46:27:4f:54:69:60:40:a0:00:57:b0:3d:ed:
         6d:79:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:30 2026 by rpki-client