Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e20323633343434.roa
File:                     36342e35322e31342e302f32342d3234203d3e20323633343434.roa (raw, json)
Hash identifier:          aMmDR/gqU/jwzdow5+CddjcbM8H+JULeLleCIBsiuJA=
Subject key identifier:   E7:29:5A:25:84:56:82:F6:50:37:E2:BF:92:10:29:81:1D:0D:61:2D
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       7AC611DE51A01075C0E02B0DBF8EF37AB9EACA5C
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e20323633343434.roa
Signing time:             Fri 30 May 2025 16:33:14 +0000
ROA not before:           Fri 30 May 2025 16:28:14 +0000
ROA not after:            Fri 29 May 2026 16:33:14 +0000
asID:                     263444
IP address blocks:        64.52.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Jun 2025 13:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c6:11:de:51:a0:10:75:c0:e0:2b:0d:bf:8e:f3:7a:b9:ea:ca:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: May 30 16:28:14 2025 GMT
            Not After : May 29 16:33:14 2026 GMT
        Subject: CN=E7295A25845682F65037E2BF921029811D0D612D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9c:57:4b:87:cc:2b:fa:61:ce:80:d0:6f:69:
                    89:66:a5:37:2f:49:a1:6a:75:64:ca:a1:7e:61:7a:
                    84:63:87:c4:e9:af:5e:c3:51:f1:b5:81:5c:a6:f1:
                    f0:5c:07:30:de:8c:37:8b:74:c7:3a:b9:5a:c7:18:
                    ff:a5:6c:34:79:c0:38:c3:79:68:ea:cf:2a:99:09:
                    91:1f:f3:b7:66:17:eb:f0:0d:7b:28:14:b3:4a:5b:
                    ed:8d:f0:27:52:2f:4b:ce:89:46:8b:f8:1b:1c:65:
                    c8:92:0b:e4:a3:a0:c4:ec:76:b9:ac:a8:d3:c9:d6:
                    2c:0e:84:f0:31:46:f5:85:e7:8c:d1:b0:8c:ff:b1:
                    78:1f:39:ea:cc:f4:b0:4c:b4:40:b3:32:85:73:a7:
                    07:95:f1:0c:02:68:37:4b:a9:fe:f4:d8:d7:33:82:
                    9c:1c:f3:29:57:07:2d:0d:32:85:40:a1:19:6e:6b:
                    16:d0:1c:b5:74:f1:4e:0a:7f:ba:31:d9:1e:7d:3c:
                    2d:f8:8d:b1:91:45:d1:ce:75:55:1e:a3:78:49:cd:
                    8e:7f:87:36:bb:a5:15:2d:49:1b:77:03:7c:49:e4:
                    bc:8f:e3:c3:43:8f:38:10:0e:01:6c:59:89:d4:5a:
                    ae:59:10:de:04:53:8d:02:f8:b2:c9:63:ab:cf:73:
                    1a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:5A:25:84:56:82:F6:50:37:E2:BF:92:10:29:81:1D:0D:61:2D
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e20323633343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:34:8a:14:8d:ff:17:70:70:f9:0b:49:f3:3c:13:7e:fb:2e:
         09:e4:1e:06:c4:0a:d4:c4:53:af:79:6a:c4:43:a5:86:33:7d:
         d1:dd:07:d0:d8:ca:de:e5:a9:82:53:c6:e2:21:ba:e6:cc:b9:
         f5:c3:59:e8:0e:69:6a:56:d7:e2:fb:46:0a:cb:50:57:57:a4:
         1c:e6:c9:45:39:5a:c2:7c:eb:e7:0f:84:4d:d0:da:53:e4:93:
         eb:4d:03:a3:80:fb:5a:c4:7c:37:30:c0:f9:05:4c:a0:aa:71:
         69:32:7b:ec:9c:f7:48:75:1f:94:f7:8e:c1:dd:7b:ef:47:ab:
         b5:62:46:d6:9a:e6:09:51:47:d5:af:dd:b6:69:4f:d8:13:5d:
         cb:bf:45:52:bc:ad:09:60:75:18:82:ad:aa:7d:14:14:a3:b5:
         fc:53:bb:73:9c:a4:a4:0f:cf:00:07:6c:25:4a:ad:21:84:11:
         d5:24:bf:ee:4a:ca:35:3f:04:bf:49:11:2e:71:d5:7e:1c:aa:
         fd:15:8a:1c:d9:a5:33:90:3e:c9:37:e2:32:ba:b8:36:bb:c4:
         b2:9a:67:a5:fa:1a:34:7b:91:89:cf:a4:67:24:05:87:6c:16:
         08:af:69:27:a1:92:b7:9a:1a:4d:74:41:00:b6:03:1b:ba:7c:
         7c:e0:26:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 01:52:14 2025 by rpki-client