Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31332e302f32342d3234203d3e20323133353335.roa
File:                     36342e34392e31332e302f32342d3234203d3e20323133353335.roa (raw, json)
Hash identifier:          ybnu8YkB/0qNxkT5bpNAodqjuQ/tgjuiemlM1+Q+LUo=
Subject key identifier:   60:3E:AB:A5:2F:DC:02:6B:03:1E:7E:68:0D:F3:61:36:9D:A0:D3:5A
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       3579E503C914062571D4D02BB1EF278429BB84AC
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31332e302f32342d3234203d3e20323133353335.roa
Signing time:             Tue 07 Jul 2026 23:01:18 +0000
ROA not before:           Tue 07 Jul 2026 22:56:18 +0000
ROA not after:            Tue 06 Jul 2027 23:01:18 +0000
asID:                     213535
IP address blocks:        64.49.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 21:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:79:e5:03:c9:14:06:25:71:d4:d0:2b:b1:ef:27:84:29:bb:84:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul  7 22:56:18 2026 GMT
            Not After : Jul  6 23:01:18 2027 GMT
        Subject: CN=603EABA52FDC026B031E7E680DF361369DA0D35A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:8c:8e:fe:7e:97:a6:3e:7f:82:87:d3:bd:
                    b7:d9:79:af:46:e6:26:21:5e:8f:e7:bb:00:57:3e:
                    73:99:bd:02:44:d7:9c:ca:99:01:27:97:9b:91:99:
                    81:77:91:50:49:1d:24:9d:8b:b5:a7:f8:2b:2d:14:
                    f0:58:c5:ac:88:66:a9:05:42:38:70:a2:54:78:bd:
                    30:b6:3c:df:ed:86:6a:df:bd:f7:43:8f:b7:c5:90:
                    fe:09:5f:0e:07:95:58:37:b1:00:41:53:47:1c:28:
                    9f:a5:f2:8d:93:c1:b1:c4:4e:66:73:85:20:da:f2:
                    00:9e:7c:77:49:95:68:ea:a7:e6:67:3e:1d:32:bd:
                    ee:17:1e:c8:0d:7b:6a:3c:26:8b:f2:73:a6:d7:5a:
                    f9:6c:bb:39:ac:0a:7e:8a:6e:b4:9e:a3:78:e2:2f:
                    30:15:66:d4:ac:d2:f3:87:fb:62:46:49:c6:b5:fb:
                    c8:00:bd:ce:51:02:04:ae:24:6f:88:de:32:60:fd:
                    03:1f:3f:6d:3d:8b:0f:3f:d0:ba:f0:95:69:16:91:
                    21:d0:41:5d:70:68:86:6a:e0:af:55:1c:a1:b4:06:
                    99:70:b4:f5:5d:d8:f5:29:0e:5d:5e:8c:0c:79:a0:
                    60:44:95:40:12:b6:6d:b7:8e:86:8b:6d:d2:b6:9f:
                    bc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3E:AB:A5:2F:DC:02:6B:03:1E:7E:68:0D:F3:61:36:9D:A0:D3:5A
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31332e302f32342d3234203d3e20323133353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9d:66:7b:8d:c2:40:e3:db:af:d4:fd:9f:b2:be:27:5d:71:
         06:d3:3c:98:aa:4b:ee:9c:30:b0:86:50:b7:72:6c:93:b7:ca:
         44:36:18:ca:3f:d4:47:c6:eb:b5:17:57:40:69:e1:ac:a2:bc:
         fe:a4:94:51:44:44:b1:fa:d8:cd:39:82:54:f5:61:58:64:9b:
         84:17:49:93:28:1c:07:e1:af:05:fa:2b:f0:ea:90:b9:4f:24:
         65:ef:5d:4c:da:f4:28:49:03:eb:6e:6d:be:f2:04:ad:3b:39:
         c4:1c:27:bf:5f:70:e0:94:b9:7e:31:85:f8:d2:40:2d:68:eb:
         7f:5c:d0:db:fc:c3:8c:be:fd:d2:20:d8:2f:59:f0:fa:92:6d:
         f1:43:61:e9:da:f5:b7:30:8a:7a:fe:3e:a4:2e:c6:77:e6:d8:
         13:6e:b8:6e:d2:89:ec:65:51:cd:01:a0:0e:7a:f9:f9:34:5f:
         2d:1a:f6:f1:0b:5b:c7:17:5e:9e:6d:d3:05:cb:e4:01:f9:a0:
         8b:d0:a9:17:40:a2:80:b8:50:7f:fc:e6:2d:d8:f1:7c:fc:47:
         d1:da:e0:fc:91:b8:96:c2:2f:71:5c:a4:ec:19:46:81:11:0b:
         04:c7:a4:56:06:97:3f:4e:f7:ce:06:3b:84:12:50:f5:cd:a6:
         f2:e0:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:41 2026 by rpki-client