Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e20313532363938.roa
File:                     36342e35372e3137392e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier:          0wcN6OxMC1w/knHMUDfzuhCLYdPxmK/iHCtq1CW/EZ4=
Subject key identifier:   F0:8E:59:89:76:22:A4:5D:0E:A2:19:D0:0C:CA:5A:15:C3:6D:CA:5D
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       42EAAB88F11FF4284AB56A00206F3D95A633BE36
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e20313532363938.roa
Signing time:             Tue 01 Sep 2026 05:23:32 +0000
ROA not before:           Tue 01 Sep 2026 05:18:32 +0000
ROA not after:            Tue 31 Aug 2027 05:23:32 +0000
asID:                     152698
IP address blocks:        64.57.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ea:ab:88:f1:1f:f4:28:4a:b5:6a:00:20:6f:3d:95:a6:33:be:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Sep  1 05:18:32 2026 GMT
            Not After : Aug 31 05:23:32 2027 GMT
        Subject: CN=F08E59897622A45D0EA219D00CCA5A15C36DCA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6e:7c:d0:e9:88:75:56:80:c8:cd:28:31:aa:
                    ed:2d:a6:1c:0b:b3:61:82:54:f5:9c:7d:b6:5e:27:
                    e4:0e:1a:76:26:53:73:5c:52:91:04:9e:f3:46:cc:
                    ad:aa:01:fa:20:51:51:57:2b:8b:68:5e:c2:c3:92:
                    20:5a:37:1f:fb:60:2f:bd:f2:02:10:9c:d4:07:da:
                    75:5b:cc:f8:fd:53:41:53:45:e9:57:4e:d7:45:b2:
                    53:3b:12:35:fe:a5:f7:5b:42:5a:d6:11:4f:b3:f5:
                    e5:b2:ac:ec:15:8c:95:3c:ec:a4:57:40:39:9d:7f:
                    79:69:65:ad:db:e6:68:93:5f:26:6c:cc:55:47:8d:
                    fa:32:0f:ce:45:72:2d:00:14:8d:e0:0a:68:c9:55:
                    9f:9f:1f:42:8c:5b:c5:61:cb:81:26:19:1e:b9:d1:
                    b8:f1:da:99:66:33:29:63:d4:0c:96:df:6c:6a:c9:
                    9a:9b:13:de:0c:5f:72:d2:e5:77:d5:31:a3:09:96:
                    90:e5:2d:bb:59:aa:3c:7f:49:53:42:dd:e6:00:68:
                    c4:48:d4:3c:52:96:12:4b:ec:11:9e:99:ae:ae:5f:
                    62:d5:90:2c:05:98:02:b7:3b:f7:80:42:d3:87:33:
                    2a:9f:c6:d8:e1:b9:b3:7b:70:98:48:3f:85:10:28:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:8E:59:89:76:22:A4:5D:0E:A2:19:D0:0C:CA:5A:15:C3:6D:CA:5D
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e20313532363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:70:a6:4c:6d:82:b8:97:18:c6:f4:ea:8a:92:f8:34:5f:46:
         e2:1a:76:98:8c:a0:b6:e1:64:13:d7:49:c7:63:46:33:8f:eb:
         51:6b:33:2a:40:37:a8:bc:8a:ea:1e:54:b4:71:9f:1f:01:b3:
         e3:62:1e:a8:64:87:33:c7:54:e7:47:1d:6b:b4:36:9a:81:50:
         0f:5c:63:e0:14:d9:c9:d7:be:9c:6f:57:17:c8:2c:e0:06:bb:
         af:73:aa:b3:69:2f:97:d6:63:51:84:11:7f:dd:ad:21:e5:f8:
         3f:d2:f0:38:8f:70:42:f3:2e:b1:54:66:bb:73:40:1a:01:7f:
         5c:a1:b7:53:f3:73:ed:e3:ba:9e:6f:2e:e8:97:75:5e:58:88:
         e4:ec:7b:05:8c:20:d7:52:ac:4d:ff:75:fd:77:12:c2:62:98:
         aa:6e:cf:27:f3:f0:c4:a1:86:dd:d6:f2:5f:8a:39:8d:a4:0d:
         07:4b:69:bc:69:d8:e6:ac:63:bd:a2:be:f8:f4:e4:04:c1:63:
         bf:f3:09:32:47:10:ba:08:66:60:1e:7a:2f:db:a1:2f:a5:58:
         61:44:95:b2:61:54:7a:14:5e:23:bc:ab:af:b3:a4:99:ba:e4:
         7e:4c:b1:ab:d1:f5:2d:3c:7e:6e:1f:df:10:bd:53:6b:b6:21:
         fa:4e:d4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:33 2026 by rpki-client