Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
File:                     36342e3235332e39322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          aGFZIKkEinKgQc1F6W/nFdN2ctKGEuhSvsozGPXEOv8=
Subject key identifier:   35:F3:DC:84:45:5C:EC:8F:D4:A3:4A:D1:F1:46:4D:F8:3D:C1:5B:EC
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       16AB4E87E23D2626769CAE584A0F21187D8F8F48
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 21 Aug 2026 07:36:20 +0000
ROA not before:           Fri 21 Aug 2026 07:31:20 +0000
ROA not after:            Fri 20 Aug 2027 07:36:20 +0000
asID:                     21859
IP address blocks:        64.253.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 19:38:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ab:4e:87:e2:3d:26:26:76:9c:ae:58:4a:0f:21:18:7d:8f:8f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 21 07:31:20 2026 GMT
            Not After : Aug 20 07:36:20 2027 GMT
        Subject: CN=35F3DC84455CEC8FD4A34AD1F1464DF83DC15BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:56:36:58:c0:3b:72:ce:6f:45:6d:15:1e:
                    66:ef:2c:b1:8f:8d:51:d7:1f:db:e7:29:cb:99:90:
                    e4:cd:cc:bf:09:e9:eb:3a:36:db:58:e4:77:6a:0e:
                    5c:c1:03:43:64:d2:a9:ce:8c:31:a6:16:67:be:d1:
                    19:bc:47:60:b2:4e:43:1f:90:19:99:22:d4:8b:94:
                    c7:ef:86:70:f3:bb:32:00:fa:42:41:3f:35:29:f9:
                    53:3e:76:1c:d9:c1:2b:b3:c3:19:0e:c5:f6:cc:99:
                    3d:3c:b3:fb:98:e9:65:af:69:79:41:de:f1:7e:d0:
                    b6:0f:91:91:c6:37:f7:8c:86:c5:47:1e:64:3a:c5:
                    10:73:de:ab:d2:36:f9:7f:d4:fc:14:2d:b8:fd:9b:
                    67:c7:a3:01:9a:81:4d:4b:b7:60:d6:b2:a8:8c:ae:
                    8f:94:68:34:ac:77:ef:9e:c6:4c:7c:cc:34:f6:2f:
                    51:9d:77:75:f5:0b:5e:2f:95:8a:ba:f6:32:66:74:
                    88:e3:ec:7b:88:ee:eb:49:3d:0a:c3:3d:be:3e:46:
                    8b:ac:45:f3:dc:e5:f1:87:b8:ad:74:e0:9c:cc:28:
                    3b:c7:3b:90:bc:9c:40:b6:99:24:8b:01:d7:0d:cc:
                    e0:1f:d7:09:1b:29:cc:f1:9f:34:f9:f8:fd:78:9f:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F3:DC:84:45:5C:EC:8F:D4:A3:4A:D1:F1:46:4D:F8:3D:C1:5B:EC
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:36:df:30:24:9e:10:37:0d:36:7a:25:5e:0f:55:6e:6c:b9:
         08:9c:8c:1c:66:d3:7a:5b:5b:a8:64:ce:95:f2:3b:8b:b4:a5:
         41:cd:9a:88:2d:d8:54:c5:b4:7a:3f:b8:af:8d:d2:b8:78:bc:
         76:5e:b7:52:8b:7b:e7:48:f4:1a:bc:d0:eb:c2:1c:05:25:b9:
         0e:4c:6b:6b:23:8c:9e:bf:6c:42:bc:96:1d:06:46:27:87:2b:
         e0:d4:f7:6e:f3:cc:ea:d2:fb:35:15:e2:bd:cf:af:62:ac:96:
         9e:a4:de:66:79:4e:47:7e:e7:0a:fc:06:55:07:28:b2:98:7a:
         ca:fe:a9:7b:1a:8a:8c:de:29:00:58:ee:2a:fa:90:fd:9c:d3:
         6c:c2:27:1a:2e:06:10:b8:54:a5:b4:9b:6c:a2:b7:da:aa:a1:
         3e:7b:f5:7f:db:84:14:a6:42:66:81:9c:22:04:2d:59:93:d3:
         3c:1e:1c:88:54:b1:70:6a:06:29:5e:ea:6f:61:e5:8c:0a:57:
         7e:01:6a:f2:5e:84:61:d7:84:0d:7d:8d:d9:48:26:3f:9a:35:
         b3:99:4c:3b:9b:ab:ca:7b:b1:80:f4:70:47:c5:a6:a6:5b:8b:
         a9:83:f6:ce:bb:09:f1:3d:61:c9:f0:cb:e4:ac:42:9d:33:88:
         33:60:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:35:14 2026 by rpki-client