Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3137392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Kh8HR5xQTlkC0L6QDFn+5y7bf/MkPDJGnXOYJ/KagK8=
Subject key identifier:   96:7D:4D:31:8F:76:A0:41:95:0B:23:D9:40:59:44:1D:6E:67:ED:EA
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       29F816C86BC7658934629282F4C2C06D23065EED
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e20383334.roa
Signing time:             Wed 02 Jul 2025 06:55:52 +0000
ROA not before:           Wed 02 Jul 2025 06:50:52 +0000
ROA not after:            Wed 01 Jul 2026 06:55:52 +0000
asID:                     834
IP address blocks:        64.57.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 05:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f8:16:c8:6b:c7:65:89:34:62:92:82:f4:c2:c0:6d:23:06:5e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul  2 06:50:52 2025 GMT
            Not After : Jul  1 06:55:52 2026 GMT
        Subject: CN=967D4D318F76A041950B23D94059441D6E67EDEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:c9:d2:79:f7:bf:35:ae:b0:b6:c3:9c:6e:
                    16:41:9b:a3:8b:d2:e3:cb:17:25:ca:90:4e:48:4e:
                    22:d1:48:3e:1a:d0:19:2d:8b:82:2c:27:da:9c:ca:
                    54:ee:c5:5b:a5:ae:a4:db:6f:b1:9a:80:27:23:c8:
                    1d:3d:84:4c:4a:33:9f:fe:7f:62:d2:cb:39:e1:44:
                    9b:91:97:2d:5d:29:10:fd:e9:89:61:e6:68:5d:29:
                    31:49:43:85:eb:35:c3:f5:31:59:a2:3d:f7:8d:e8:
                    9e:a3:90:7e:8a:1a:8e:21:6d:2b:02:a1:ae:96:c9:
                    8e:11:90:d6:d1:d8:6e:ce:14:95:14:0c:98:e8:5c:
                    b6:1f:1d:ae:cd:06:e6:db:5f:a8:74:38:5a:82:ee:
                    5c:7c:9f:89:a4:6a:d9:bb:52:ed:8c:ce:59:ce:cf:
                    13:eb:a2:51:93:9d:3a:9d:2b:13:68:e5:03:6d:8e:
                    6b:0f:73:a0:57:95:24:8e:7b:25:52:f2:0b:6d:5d:
                    31:a3:a8:b5:27:00:2d:4a:ea:54:d3:b5:a3:78:b5:
                    6f:82:26:d3:28:d9:e7:8b:90:6f:71:9c:03:28:6a:
                    31:55:28:be:fd:89:65:f3:5f:2e:b5:a3:de:58:63:
                    f7:a1:0d:ce:6b:0c:29:7a:49:83:c2:d5:e9:de:e4:
                    6f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:4D:31:8F:76:A0:41:95:0B:23:D9:40:59:44:1D:6E:67:ED:EA
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:57:fe:cd:92:1d:c4:56:fd:c1:fd:24:ff:64:9d:01:a4:b8:
         c5:69:37:af:04:5d:43:5f:44:43:b1:00:34:c7:a4:05:c3:05:
         29:0b:b4:21:51:5a:ae:8a:a7:53:d9:da:db:7c:7b:62:87:c1:
         4d:2c:d5:1e:40:23:88:31:4f:01:91:f9:e8:18:c0:0a:78:57:
         05:23:46:29:07:46:00:42:db:27:e6:59:3e:51:90:61:81:d7:
         3c:ec:10:62:58:56:e0:53:0c:b9:2d:45:cd:48:87:cd:64:6d:
         43:9b:25:48:28:e5:ba:82:e4:0f:c2:9b:b5:f1:cb:fb:47:16:
         0f:a4:85:c7:6f:30:ab:5b:21:f7:45:c0:76:4d:c9:db:3c:be:
         2a:dd:dd:0e:56:84:59:e2:10:a3:30:a6:01:8c:9f:76:7e:9b:
         90:ae:3d:24:5f:dd:e3:61:db:9c:3a:0b:e6:f8:1c:35:53:85:
         0f:e5:e1:38:b6:54:29:db:f3:fe:a6:71:c2:03:9e:28:6f:55:
         66:40:33:42:79:ff:7d:7c:99:fd:5a:c6:66:13:48:97:8c:a2:
         0e:da:45:51:d1:48:da:fb:ef:81:e9:de:db:44:32:37:34:9d:
         49:13:f4:93:64:7b:9e:65:08:f6:a6:d5:ea:30:32:e2:7d:0b:
         9a:07:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:00:24 2025 by rpki-client