Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20313432323430.roa
File:                     36342e3235332e39312e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier:          S6vtCsdpNIhlCPc7rYaKx1Ano82PHfbpvuJTBdip7pw=
Subject key identifier:   E6:82:EE:20:38:3C:BE:CB:CD:C7:84:35:04:3B:8A:24:CB:07:BB:35
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       682FFDA519C257FA69F037DB4B52293129372C0F
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20313432323430.roa
Signing time:             Tue 11 Aug 2026 08:37:35 +0000
ROA not before:           Tue 11 Aug 2026 08:32:35 +0000
ROA not after:            Tue 10 Aug 2027 08:37:35 +0000
asID:                     142240
IP address blocks:        64.253.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 15:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2f:fd:a5:19:c2:57:fa:69:f0:37:db:4b:52:29:31:29:37:2c:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 11 08:32:35 2026 GMT
            Not After : Aug 10 08:37:35 2027 GMT
        Subject: CN=E682EE20383CBECBCDC78435043B8A24CB07BB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:6b:5b:62:75:91:97:04:32:53:60:d4:91:
                    ea:81:67:e2:79:9d:07:38:5e:c8:12:64:04:97:74:
                    88:db:aa:c3:cc:8f:92:61:3d:68:a9:76:98:8b:c1:
                    84:94:6a:c2:52:27:6a:27:01:77:fa:59:7b:3b:6d:
                    d6:f9:6a:07:3f:05:07:07:f8:e6:14:0a:dc:c0:a2:
                    95:b3:d5:30:85:e4:38:9e:79:7d:e3:b2:93:a5:7a:
                    5c:ac:9f:e5:e6:d1:3e:fe:65:10:ea:41:7b:93:6c:
                    9d:f1:45:77:56:22:0c:42:ae:a6:97:91:f2:0d:a6:
                    df:3d:e5:cb:6a:e5:c4:65:7e:04:b1:27:59:82:10:
                    2b:b2:73:aa:11:4d:eb:1f:72:de:bb:86:6a:09:95:
                    fc:af:50:63:08:ba:69:38:60:92:d7:a5:43:a8:26:
                    58:26:2f:ad:c4:86:c0:99:d0:11:6f:7f:62:5a:1e:
                    2b:69:05:72:c5:7b:2d:49:28:7a:3f:0a:24:44:5b:
                    02:5c:37:bb:a4:1e:99:17:3b:83:2b:54:40:cf:49:
                    fd:c5:9b:d4:c4:c8:83:55:94:36:c0:1d:74:9f:35:
                    16:86:72:96:e7:7e:68:d7:c2:46:49:a4:b6:80:82:
                    02:d4:85:d1:d8:f0:c1:86:17:42:1b:63:58:92:cb:
                    40:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:82:EE:20:38:3C:BE:CB:CD:C7:84:35:04:3B:8A:24:CB:07:BB:35
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e20313432323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:ba:06:f8:11:91:5f:8f:be:7d:78:04:2a:46:c6:4c:21:d0:
         63:6d:11:91:40:f4:05:0d:44:31:57:1e:bf:81:cd:23:83:60:
         ec:d0:65:62:8f:39:02:71:5a:0f:08:9b:44:28:71:37:a7:72:
         0b:7a:65:f3:77:04:4f:de:d7:10:c8:92:49:3d:32:6f:e3:20:
         26:d7:60:5e:2d:37:21:ff:89:08:01:8a:9c:b0:02:42:18:ef:
         d3:04:d1:87:c5:20:1c:fa:a3:5b:6a:b4:97:29:ce:95:55:38:
         07:ae:cf:ef:4b:b3:25:60:d0:af:2d:9f:37:62:f1:28:0c:7a:
         b4:1c:83:36:9e:6d:1f:f7:12:8c:17:a5:83:c9:b7:b8:7b:5c:
         75:d9:f3:70:aa:0e:c3:07:c0:4a:d1:d8:ee:f8:d4:c4:a9:d8:
         7a:8d:90:bc:54:53:87:58:ba:18:35:2f:90:d4:1c:e5:ab:2b:
         88:34:3f:b3:92:89:11:56:ab:0b:a2:f6:b8:b1:82:76:a7:38:
         bf:e5:cd:9c:7f:36:4f:70:16:d7:0f:09:3d:45:10:67:3f:7c:
         1b:e3:c4:34:3f:3f:32:b3:e5:6b:03:08:a2:0b:ad:77:73:4b:
         99:ed:8a:ec:9f:02:c2:27:f7:3f:6a:fe:00:28:b2:4c:7c:4b:
         27:fb:3e:a3
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUaC/9pRnCV/pp8DfbS1IpMSk3LA8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjYwODExMDgzMjM1WhcNMjcwODEwMDgzNzM1
WjAzMTEwLwYDVQQDEyhFNjgyRUUyMDM4M0NCRUNCQ0RDNzg0MzUwNDNCOEEyNENC
MDdCQjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskVrW2J1kZcE
MlNg1JHqgWfieZ0HOF7IEmQEl3SI26rDzI+SYT1oqXaYi8GElGrCUidqJwF3+ll7
O23W+WoHPwUHB/jmFArcwKKVs9UwheQ4nnl947KTpXpcrJ/l5tE+/mUQ6kF7k2yd
8UV3ViIMQq6ml5HyDabfPeXLauXEZX4EsSdZghArsnOqEU3rH3Leu4ZqCZX8r1Bj
CLppOGCS16VDqCZYJi+txIbAmdARb39iWh4raQVyxXstSSh6PwokRFsCXDe7pB6Z
FzuDK1RAz0n9xZvUxMiDVZQ2wB10nzUWhnKW535o18JGSaS2gIIC1IXR2PDBhhdC
G2NYkstAcwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOaC7iA4PL7LzceENQQ7iiTL
B7s1MB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzQyZTMyMzUzMzJlMzkzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzQzMjMyMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAED9WzANBgkqhkiG9w0BAQsF
AAOCAQEAc7oG+BGRX4++fXgEKkbGTCHQY20RkUD0BQ1EMVcev4HNI4Ng7NBlYo85
AnFaDwibRChxN6dyC3pl83cET97XEMiSST0yb+MgJtdgXi03If+JCAGKnLACQhjv
0wTRh8UgHPqjW2q0lynOlVU4B67P70uzJWDQry2fN2LxKAx6tByDNp5tH/cSjBel
g8m3uHtcddnzcKoOwwfAStHY7vjUxKnYeo2QvFRTh1i6GDUvkNQc5asriDQ/s5KJ
EVarC6L2uLGCdqc4v+XNnH82T3AW1w8JPUUQZz98G+PEND8/MrPlawMIogutd3NL
me2K7J8Cwif3P2r+ACiyTHxLJ/s+ow==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:02:29 2026 by rpki-client