Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e2039333034.roa
File:                     36342e35372e3137382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          801nwkQGmLW97AQhywOAn1FgsaOqnqBcOelnFO5bbGg=
Subject key identifier:   99:C4:0A:BB:F5:1D:80:1F:F0:AE:CF:D2:8D:43:35:5A:EB:D7:11:5F
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       56C1033466C4EBFF6C91CFBC7B0D6E9A527678A8
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 17 Aug 2025 16:26:55 +0000
ROA not before:           Sun 17 Aug 2025 16:21:55 +0000
ROA not after:            Sun 16 Aug 2026 16:26:55 +0000
asID:                     9304
IP address blocks:        64.57.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c1:03:34:66:c4:eb:ff:6c:91:cf:bc:7b:0d:6e:9a:52:76:78:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 17 16:21:55 2025 GMT
            Not After : Aug 16 16:26:55 2026 GMT
        Subject: CN=99C40ABBF51D801FF0AECFD28D43355AEBD7115F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:c9:83:34:a8:28:0f:8b:2c:3f:27:44:04:
                    c8:50:66:57:39:20:5c:73:72:03:78:05:85:f9:ea:
                    d1:34:d8:6e:46:74:4f:18:78:e4:a8:8f:02:e9:99:
                    43:8f:54:e7:90:00:82:63:3d:d3:94:c0:54:e2:19:
                    d3:dd:54:99:63:d4:11:d9:a5:5c:a8:73:e3:d3:da:
                    0a:e3:6b:2a:ef:38:8f:a8:c4:91:2f:de:6a:10:62:
                    86:b4:16:0a:24:ed:22:e8:73:43:6b:48:d2:4f:b1:
                    8b:78:cd:9f:b3:4c:b3:1e:e9:8e:0e:3f:91:09:8c:
                    53:b0:e0:b5:92:63:8b:db:b4:e2:44:95:ff:ae:0b:
                    32:e8:6c:27:ce:8f:db:a5:44:b8:11:9b:0b:2f:58:
                    b4:48:4c:56:7e:85:75:2e:4f:d5:cc:a1:9a:c4:e2:
                    f9:09:53:11:1f:6f:0e:83:9c:63:98:a2:d6:c8:be:
                    ff:ff:d5:5b:db:c4:4f:8e:dc:0b:d9:bd:6a:94:e8:
                    a8:65:44:77:26:1f:c5:b1:6f:ca:8e:78:41:18:2f:
                    cd:4d:61:73:bb:e3:ab:4f:b7:d5:2c:bd:be:be:bf:
                    77:25:97:26:3e:95:c7:f0:fa:b7:5d:64:68:9f:65:
                    1a:70:19:24:41:6a:76:2e:ff:41:df:2c:ae:17:d1:
                    0e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C4:0A:BB:F5:1D:80:1F:F0:AE:CF:D2:8D:43:35:5A:EB:D7:11:5F
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:5e:4e:88:41:1b:03:5a:5e:8f:51:26:25:8f:ee:c8:80:12:
         a9:ad:15:24:c5:09:13:ac:b6:46:0e:77:15:97:30:45:99:40:
         03:b8:e8:c0:db:3d:8c:94:87:a8:ea:de:b8:ce:33:e9:ee:a5:
         19:a9:c7:72:71:96:8f:f4:b2:90:23:d0:e3:d2:90:73:90:c7:
         e1:fd:ba:78:dc:f9:0f:19:b1:e5:0f:d2:61:8a:86:79:ee:04:
         be:d6:6e:83:47:d5:80:60:5b:70:2a:b9:4c:98:16:4d:72:10:
         07:0a:36:90:55:95:e9:42:63:de:a0:6a:c6:1c:50:7d:d0:ce:
         eb:87:4f:4f:11:66:fa:05:8e:66:c6:a9:6c:43:ca:cf:04:08:
         16:40:2d:da:dc:03:5e:ad:35:87:3c:f4:44:4b:50:d3:83:c3:
         c1:a0:71:5a:5f:f2:7b:1b:55:66:ef:ad:5d:90:88:cb:e3:9d:
         08:1a:07:a8:40:1e:a3:b0:c3:29:81:77:06:a4:2e:34:f9:2e:
         b9:bd:f2:34:bc:5a:b0:a8:5c:c1:af:7d:63:d8:89:d0:42:ef:
         87:30:fd:62:f9:7b:6e:e1:26:70:c0:19:05:06:40:3f:49:41:
         ee:7b:92:89:7a:11:0f:66:36:9d:5c:bb:60:5c:4a:09:04:ff:
         3d:7f:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:42:15 2025 by rpki-client