Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36744.roa
File:                     AS36744.roa (raw, json)
Hash identifier:          J8jrM91UfbFqsDzf42Hmneo2xK9PZleSX6jcKXUezE0=
Subject key identifier:   DF:CB:06:A7:9E:51:CD:5A:BC:3E:43:17:9C:41:D7:EF:A1:A5:E2:D4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       457FE8B41AD5B2FE94620583E2319F7CA8748C8F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36744.roa
Signing time:             Thu 05 Jun 2025 18:01:37 +0000
ROA not before:           Thu 05 Jun 2025 17:56:37 +0000
ROA not after:            Thu 04 Jun 2026 18:01:37 +0000
asID:                     36744
IP address blocks:        74.50.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7f:e8:b4:1a:d5:b2:fe:94:62:05:83:e2:31:9f:7c:a8:74:8c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  5 17:56:37 2025 GMT
            Not After : Jun  4 18:01:37 2026 GMT
        Subject: CN=DFCB06A79E51CD5ABC3E43179C41D7EFA1A5E2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:4e:e8:77:a6:4b:09:a4:2c:97:7e:8e:f5:
                    23:18:90:80:de:00:6d:05:64:0e:94:e5:aa:33:35:
                    29:5c:db:5d:e9:66:66:93:ea:d0:25:9e:94:50:54:
                    71:44:b1:9b:87:19:49:32:d5:7b:14:f3:1c:d3:4b:
                    b3:5a:8f:36:61:d9:c2:65:38:13:93:b2:5b:a3:7a:
                    77:c3:d1:93:c9:9e:f3:92:8a:d8:d7:82:73:99:5c:
                    ab:1f:f1:8a:a9:bb:3a:09:23:fa:5e:8d:cb:27:8d:
                    6f:2c:33:ab:74:ec:e8:17:35:e0:a0:08:17:9a:c2:
                    59:48:9e:48:ff:92:2e:98:b6:12:7a:7d:ff:95:f7:
                    b1:ff:7d:5a:b8:a5:34:12:b8:3b:71:81:45:90:21:
                    d3:1d:72:ce:ed:87:ce:58:39:f1:64:f5:b1:c7:63:
                    a6:dc:b8:fa:c0:87:12:a1:09:c1:25:22:94:6b:70:
                    32:47:a5:f4:2a:61:a1:cd:c7:a3:7b:f0:34:9a:e0:
                    bd:a8:e6:d4:11:f6:10:fc:e4:d4:ce:dd:08:b4:0a:
                    52:90:4b:5a:fd:2e:8f:f5:c3:e7:a4:06:20:2a:99:
                    90:a7:99:cd:cf:e9:0c:c5:bd:41:3a:a7:d6:0e:32:
                    af:f0:6f:3d:6a:04:1d:18:cf:e8:6f:96:4d:98:3f:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CB:06:A7:9E:51:CD:5A:BC:3E:43:17:9C:41:D7:EF:A1:A5:E2:D4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36744.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:d9:af:81:32:2b:ca:db:13:3e:2d:21:06:af:ef:a0:79:
         33:bb:ac:68:87:95:d4:93:fc:c6:6f:1c:9a:11:31:c6:ec:3d:
         6d:cc:24:f1:f3:50:0f:8d:90:6d:9c:03:5f:82:d9:93:87:18:
         b9:d7:58:50:1b:91:7d:1f:51:84:9d:06:4f:a1:61:15:48:0d:
         5c:c4:56:c6:dc:8e:e9:e2:6a:26:e5:69:6f:bc:f5:7c:5d:bb:
         9a:46:b9:4c:f1:6c:21:61:79:e9:f3:c0:9b:e5:78:d9:46:a2:
         e6:1d:a7:fc:ea:c9:45:ca:b6:46:68:de:b9:1d:40:fe:fe:68:
         a5:28:6b:e7:72:b9:ee:9f:b6:90:7b:24:1d:f1:9b:d2:91:12:
         21:3e:50:e5:77:b1:b5:be:cd:99:b3:ea:b5:34:bf:a0:68:6e:
         cb:1c:35:f7:30:53:1f:2a:ba:28:3f:7e:5f:10:d2:8c:08:5d:
         23:b2:01:ed:2a:b2:94:6b:9b:82:75:ef:40:10:57:42:9c:32:
         5f:18:7d:31:02:a6:98:d3:eb:42:ec:f3:0a:b5:72:c9:d0:69:
         eb:cc:77:8b:e0:77:77:5b:17:ae:5c:e4:eb:d9:88:8d:2e:ff:
         8f:d4:28:c6:cf:09:7a:aa:17:a3:bf:57:50:64:ec:62:49:64:
         b3:50:2f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:59:03 2025 by rpki-client