Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa
File:                     36342e342e3136392e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          cL+okzUnopqscELJCVDzrAuZW2uxivWzyBDFteNBfgQ=
Subject key identifier:   98:D1:0E:AD:98:11:22:E4:72:A5:E7:49:36:6B:C3:59:C2:6E:8B:32
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       0E9280DFE45ABE1CEE08AFD6BEE14F272B5A019C
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa
Signing time:             Tue 03 Jun 2025 04:29:01 +0000
ROA not before:           Tue 03 Jun 2025 04:24:01 +0000
ROA not after:            Tue 02 Jun 2026 04:29:01 +0000
asID:                     41095
IP address blocks:        64.4.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 08:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:80:df:e4:5a:be:1c:ee:08:af:d6:be:e1:4f:27:2b:5a:01:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Jun  3 04:24:01 2025 GMT
            Not After : Jun  2 04:29:01 2026 GMT
        Subject: CN=98D10EAD981122E472A5E749366BC359C26E8B32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3a:6c:5e:c7:1d:8f:d8:e3:57:51:78:0f:3f:
                    89:30:15:13:1e:11:86:ca:cd:67:4c:9b:be:9e:92:
                    d2:f0:2e:3f:68:a8:93:ca:c7:49:a9:7a:25:15:55:
                    89:13:44:d9:24:6b:0f:ca:cd:bd:ec:89:d5:4d:ae:
                    f5:92:1d:1f:2f:eb:19:bd:5a:17:40:ac:47:ac:34:
                    73:68:2b:42:c0:5c:ab:93:71:6a:ca:be:9a:c2:f9:
                    b6:27:d7:e1:03:a3:09:40:dd:6a:b1:c1:c7:90:b0:
                    73:aa:d5:ce:24:d4:75:52:f7:c3:4d:7a:59:60:e5:
                    c0:9f:17:cd:2d:4a:e8:20:16:c0:a7:5c:7c:c4:8e:
                    b2:08:9c:6c:07:ca:8a:ce:60:ff:c8:31:66:a4:b9:
                    ad:9e:17:e7:f5:a4:00:20:0f:1e:2c:13:38:13:ff:
                    b4:d8:e0:d4:8d:05:37:32:de:8f:d8:f3:58:92:ea:
                    fc:23:f9:b1:f6:53:35:64:91:10:dc:e3:52:a3:c5:
                    68:04:dc:9f:ee:f2:82:87:5c:4c:93:70:52:90:c9:
                    66:7e:e6:d4:6c:3a:06:f2:34:22:80:fb:a5:6b:3d:
                    2a:57:8e:9d:62:9b:78:32:78:ae:d5:c3:da:ce:c7:
                    f7:21:ec:a2:8d:09:d5:0b:84:d1:5d:b5:5a:cf:bf:
                    45:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:0E:AD:98:11:22:E4:72:A5:E7:49:36:6B:C3:59:C2:6E:8B:32
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/36342e342e3136392e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:66:7e:32:78:4e:7b:7b:eb:d6:c0:57:8f:e6:6e:74:96:2e:
         d9:5b:d4:55:12:e4:42:e9:b9:91:4f:ce:5f:85:d9:d0:47:11:
         26:f9:12:5e:be:86:1c:de:a7:e7:94:f1:ab:67:16:8c:15:96:
         42:7d:57:2e:21:d3:33:b0:79:08:20:16:9a:2b:46:57:8f:ea:
         b1:69:bb:5a:d0:46:5d:3a:d3:68:c3:e8:da:dc:13:6e:7e:79:
         c3:40:d7:0b:e1:df:64:af:be:73:fb:6f:78:70:41:96:8a:ea:
         67:1d:d3:b3:b3:2a:93:70:20:5b:94:b6:15:2d:df:92:74:70:
         9b:fb:34:46:a6:20:61:a8:07:a9:4f:dc:a4:2c:17:79:40:66:
         61:54:e0:e8:0b:44:d6:fa:2c:f9:1a:44:e7:e1:3c:32:ba:86:
         1a:ba:cd:9e:4a:e5:21:51:da:0e:12:5d:9d:a4:18:0e:52:8c:
         d3:e1:95:48:a1:35:fe:39:9d:1f:25:2d:5a:6d:82:87:d9:73:
         37:0b:b9:5f:f1:9f:d6:04:d9:37:9d:8a:79:b5:f0:95:20:63:
         f5:0f:5e:75:08:c5:94:81:40:94:24:8c:62:a1:f4:7b:9e:30:
         74:39:37:a6:cc:21:b6:d4:b2:8f:bc:f3:ff:1f:dd:e5:4c:40:
         12:ea:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:31:01 2025 by rpki-client