Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e2039333034.roa
File:                     36342e35372e3137382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          ddL+0K7Il7wyv3NUz3ryZoVt/45qvtJ3o5YS0ADmnuE=
Subject key identifier:   2C:C0:D6:0C:0F:4B:2B:6E:4A:2E:99:B5:B1:78:60:6F:CE:CE:BB:1F
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       23F3B3DF151DC18CC85DE3C5FB0CE2C43FB03AB2
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:52:30 +0000
ROA not before:           Sun 19 Oct 2025 12:47:30 +0000
ROA not after:            Sun 18 Oct 2026 12:52:30 +0000
asID:                     9304
IP address blocks:        64.57.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f3:b3:df:15:1d:c1:8c:c8:5d:e3:c5:fb:0c:e2:c4:3f:b0:3a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Oct 19 12:47:30 2025 GMT
            Not After : Oct 18 12:52:30 2026 GMT
        Subject: CN=2CC0D60C0F4B2B6E4A2E99B5B178606FCECEBB1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:54:e7:85:8c:8e:d6:d2:1b:a2:f3:6f:2e:f5:
                    44:ad:ae:fc:b1:1f:b6:18:06:5a:e9:8a:23:19:c1:
                    70:73:14:aa:c3:fc:bd:11:8a:ae:2a:4a:17:6a:89:
                    7a:e5:4e:de:42:a4:2a:e0:e6:ce:02:5d:e9:b2:4c:
                    13:ec:da:f2:50:ef:63:e4:76:2b:30:43:f9:0c:a4:
                    e0:2a:0d:02:3c:fc:83:4d:c0:0f:ba:87:4e:83:d2:
                    ee:2e:6a:47:ea:e0:cb:b7:06:d7:9b:89:c8:f5:19:
                    4f:79:26:42:76:97:1d:b0:f3:25:55:2c:be:3d:45:
                    1c:02:84:f4:2a:ea:c3:b8:31:74:b8:c8:d1:6d:87:
                    19:c0:ed:a0:be:53:32:27:54:b9:8a:04:80:73:67:
                    01:42:e2:fd:59:0f:40:89:2c:01:32:88:5c:5b:95:
                    2d:4c:ab:34:88:d5:5e:fc:b5:d5:81:74:a9:12:86:
                    fb:d0:3f:43:b2:66:83:61:a7:b8:af:03:78:8b:08:
                    d8:20:de:f6:03:92:ec:bb:c9:73:00:2b:82:d7:87:
                    42:26:f9:6d:48:a9:39:71:4b:eb:9a:04:a4:51:7b:
                    b1:4d:b9:de:31:ce:78:77:b5:f2:e5:49:ff:54:c1:
                    e9:d6:0e:8f:94:ce:61:f3:52:a5:cf:8f:1a:74:42:
                    30:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C0:D6:0C:0F:4B:2B:6E:4A:2E:99:B5:B1:78:60:6F:CE:CE:BB:1F
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:cc:4e:db:75:bf:cc:bb:ee:58:2e:e4:10:85:4c:1a:c7:
         26:7b:33:13:a9:3d:8f:8e:17:c7:83:20:81:5a:81:7e:ed:59:
         04:ce:99:44:9c:42:76:01:29:90:d7:d0:01:bb:df:25:aa:b2:
         dc:2a:fb:66:6b:a1:95:92:b2:43:2e:2a:ab:f7:35:15:b8:51:
         95:11:59:92:62:fc:de:2c:72:f5:a8:46:f0:b5:d1:eb:d6:b9:
         61:d6:d7:b0:c9:44:4b:b0:0a:ec:9e:08:df:b3:69:46:65:03:
         b8:2f:c1:b4:d1:e3:52:97:e5:b5:07:77:4a:2b:51:da:0e:f1:
         67:a0:f0:8f:0c:91:e7:a2:bf:ec:cb:85:98:6a:37:ab:4b:ab:
         1d:9e:54:ba:f4:d9:07:ce:f3:4a:32:6a:32:e3:42:53:0e:aa:
         fb:95:4c:c0:56:ca:49:37:6d:53:7e:33:5b:7b:93:95:b0:1c:
         fb:69:d5:2f:26:fa:83:b0:73:2e:03:12:ec:be:9a:c7:b7:4d:
         2f:90:79:5a:65:c3:03:48:c9:ca:be:ab:9b:c7:a3:48:6e:f1:
         86:b9:76:31:bc:67:d2:67:e7:57:c1:52:ec:5a:96:9b:a6:5a:
         e1:d3:3d:38:df:7f:4d:be:67:fb:17:67:ea:36:a2:bc:7c:d6:
         d3:12:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:04 2025 by rpki-client