Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137362e302f32342d3234203d3e2039333034.roa
File:                     36342e35372e3137362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          1/jFMgoymxdn/63Xx9YKavGBheVKvMBGeWDD7NZcYcc=
Subject key identifier:   DF:D9:94:88:98:C3:A9:61:A9:0D:62:3D:20:C6:B9:41:38:2F:A1:A5
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       7D8EFEBE885B34FB1C4482AE97E7E05A6B2F9EC7
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137362e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:52:29 +0000
ROA not before:           Sun 19 Oct 2025 12:47:29 +0000
ROA not after:            Sun 18 Oct 2026 12:52:29 +0000
asID:                     9304
IP address blocks:        64.57.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:8e:fe:be:88:5b:34:fb:1c:44:82:ae:97:e7:e0:5a:6b:2f:9e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Oct 19 12:47:29 2025 GMT
            Not After : Oct 18 12:52:29 2026 GMT
        Subject: CN=DFD9948898C3A961A90D623D20C6B941382FA1A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:ba:50:a5:c4:43:0d:33:ef:84:66:ca:8f:
                    ad:78:82:36:0d:8c:fc:9e:c9:4b:08:94:94:ad:5a:
                    0b:e5:bd:b9:1c:ea:f8:a2:d6:9e:e0:bd:af:e8:53:
                    a1:72:50:05:7a:fe:0f:10:1e:78:fa:de:01:71:9e:
                    e2:84:95:ea:d5:f5:ea:9b:4c:52:15:1a:6b:ff:4c:
                    72:fb:54:76:3e:7f:b6:f9:7e:1d:c4:a0:2c:df:b5:
                    76:a8:a0:b0:e7:c2:6a:cc:4d:01:2f:63:d9:bb:fd:
                    84:22:87:d1:d4:a7:dc:f9:32:e0:74:fd:7e:d3:4a:
                    67:9c:74:73:4b:9d:5b:53:0e:92:5c:23:4e:37:1e:
                    2e:61:89:69:37:ac:6b:2c:d5:e9:c7:3b:07:03:3f:
                    e3:3d:f1:0a:69:e3:b4:4b:9a:6a:a6:e4:28:d0:3c:
                    10:35:db:f5:29:ec:fc:90:dd:81:4c:42:db:86:86:
                    0d:98:56:3b:e5:42:3b:94:76:e4:c9:ab:be:75:3f:
                    24:24:75:4b:81:a2:b9:10:83:aa:0a:f3:bb:f9:62:
                    ca:50:ac:aa:c1:68:1f:11:9b:c7:8f:82:64:a9:db:
                    83:b0:01:34:9c:30:3f:01:4d:ed:64:1e:78:6c:2e:
                    c5:da:a4:cf:9e:33:af:9d:b6:c0:6d:94:de:a1:5e:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:94:88:98:C3:A9:61:A9:0D:62:3D:20:C6:B9:41:38:2F:A1:A5
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:80:ed:df:36:f4:74:c3:b1:77:02:b5:78:bd:7f:1c:bc:4b:
         e9:35:e3:1c:1c:c6:84:7a:1f:29:d7:bc:cd:17:50:ba:ed:d0:
         52:6f:84:28:21:19:e4:bc:1f:3b:31:ad:3d:02:6d:f9:5d:e6:
         50:4f:3e:8e:f7:f9:28:5e:06:fb:44:6c:f9:4b:c7:1c:e8:da:
         05:eb:4f:1c:45:eb:39:0c:59:12:bc:5e:0d:10:2c:6e:9c:c6:
         fe:9d:c3:4a:ce:f2:f2:8e:d2:f2:54:a3:7c:4a:e5:ac:6a:68:
         d3:28:7d:be:b3:dc:04:9c:4d:57:cd:a8:7a:79:2f:9b:37:3a:
         48:19:f9:c5:92:bc:33:f4:66:c6:65:e2:1e:d5:e5:9a:22:7b:
         d7:86:32:4d:e5:4f:1d:91:6c:7f:70:64:a7:18:d6:e7:5f:e0:
         c7:37:6a:ff:3c:e9:46:2b:15:32:b0:8e:5f:87:87:5d:bc:fb:
         c4:10:b9:c8:65:ab:50:90:4f:5e:9a:a6:3b:c7:7b:93:a7:a2:
         69:c5:32:30:84:26:e9:f7:b8:0d:fd:2f:78:9f:14:45:7a:58:
         63:b5:85:2c:24:d8:a0:47:d0:de:5a:80:e9:f5:99:2e:61:b9:
         ec:16:16:e0:9d:4c:0c:79:70:f1:82:5e:4b:c7:b9:33:6d:a9:
         97:8e:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:04 2025 by rpki-client