Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137372e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3137372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          iFMogDq2+s1XDFE0LvZhdfV6pdlMYd5vMiG7sW02unI=
Subject key identifier:   0E:FF:F2:CE:94:5D:89:20:3F:A1:ED:23:EE:95:48:AB:4C:BE:17:77
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       7501CA7C2EFC1BFDA37BF0F4AB09CD91D6AC9831
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137372e302f32342d3234203d3e20383334.roa
Signing time:             Wed 02 Jul 2025 06:55:54 +0000
ROA not before:           Wed 02 Jul 2025 06:50:54 +0000
ROA not after:            Wed 01 Jul 2026 06:55:54 +0000
asID:                     834
IP address blocks:        64.57.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 05:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:ca:7c:2e:fc:1b:fd:a3:7b:f0:f4:ab:09:cd:91:d6:ac:98:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul  2 06:50:54 2025 GMT
            Not After : Jul  1 06:55:54 2026 GMT
        Subject: CN=0EFFF2CE945D89203FA1ED23EE9548AB4CBE1777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:4a:4e:13:83:84:5d:0d:2c:a8:ff:32:ce:
                    6a:10:32:3b:4e:e6:a1:68:99:32:e3:8d:7b:19:56:
                    72:d3:26:8d:f9:94:e4:e8:e7:f2:ea:b0:7d:8d:f2:
                    24:86:a9:fc:30:17:2b:d0:da:69:d0:0c:8a:31:55:
                    9a:fe:20:82:28:26:48:75:e4:25:50:4c:9f:65:73:
                    5b:84:6a:5b:95:4d:97:f3:5b:4a:b3:3d:30:e1:5f:
                    18:39:3c:7f:2d:fc:bc:c2:1b:33:99:e4:79:44:43:
                    54:23:8a:30:b3:17:e2:b1:ab:b1:34:f8:19:aa:13:
                    bd:d9:eb:fb:24:b9:00:a6:ac:a7:ab:65:d2:db:00:
                    57:22:13:01:74:1f:61:34:cc:a7:36:29:35:ba:a3:
                    a7:05:97:ec:0c:ad:50:74:29:6c:0c:af:c6:5f:b5:
                    13:f3:20:5e:6a:95:8b:fd:bb:86:a9:72:2b:5e:37:
                    1c:fd:53:f1:7c:73:01:79:d5:b2:bb:08:d4:11:3a:
                    48:56:aa:e9:f0:e7:5a:86:73:ca:40:47:36:8d:3b:
                    1a:cc:d3:4a:d2:77:9a:c9:13:7c:10:5b:b3:e9:88:
                    3a:26:6b:b2:91:80:0f:03:38:76:15:57:d6:fb:95:
                    f5:89:2a:27:6c:f8:93:80:d1:91:95:42:65:8b:1e:
                    84:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FF:F2:CE:94:5D:89:20:3F:A1:ED:23:EE:95:48:AB:4C:BE:17:77
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:bf:66:3e:4f:4c:22:55:2c:2f:8f:e7:dd:6d:4f:26:ab:be:
         5d:02:7b:8f:14:fb:0d:3e:0c:e3:17:80:dd:5e:c0:e3:e1:23:
         95:e4:39:4b:48:56:da:f2:1f:9b:c9:f9:51:c5:b9:33:2c:a9:
         6b:21:81:e2:3c:d6:ab:b4:ec:7c:34:17:f7:97:c9:c8:9f:a4:
         94:3c:0a:3c:66:bf:51:dd:11:bc:a6:55:c7:4c:f1:dc:14:da:
         e2:6c:9a:4b:94:1c:76:40:26:84:b0:63:9c:a3:5f:6c:e4:4d:
         9b:b5:9e:c2:19:11:c1:b6:f1:68:f6:61:e7:36:27:b3:4a:46:
         7a:ed:27:cb:a0:c4:c8:32:c6:38:d9:0d:61:32:6b:ab:4d:52:
         69:be:ac:88:86:35:46:c8:f7:02:6e:b2:25:25:b7:d4:f8:7e:
         06:b3:bf:69:b8:c1:4a:1e:87:c6:e1:be:16:87:50:6d:c7:55:
         3a:f0:67:8d:20:b8:9a:84:95:bd:d3:c7:77:db:9c:db:85:13:
         fd:20:b1:d6:a0:d5:7a:2d:0a:f1:98:63:b3:10:c6:08:b9:0b:
         0d:b7:fe:8c:e8:07:37:e8:22:e9:1a:88:6b:ff:dc:1b:e2:08:
         be:06:95:3d:c7:9b:da:ff:46:39:c2:9e:26:6d:25:68:62:7c:
         62:53:e2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:54:05 2025 by rpki-client