Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e2039333034.roa
File:                     36342e35372e3137392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          bffFoUjJm2wZWYs1UfZPpGtDJQN+jXVEdmf/FzgJCnc=
Subject key identifier:   FB:FC:12:77:26:8F:DB:C9:5A:33:A1:AD:D5:8A:0F:AE:B7:99:DC:3F
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       3CD60C4A76E16A332092E8F265EE8A410A433348
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 15 Aug 2025 07:52:34 +0000
ROA not before:           Fri 15 Aug 2025 07:47:34 +0000
ROA not after:            Fri 14 Aug 2026 07:52:34 +0000
asID:                     9304
IP address blocks:        64.57.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 20:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d6:0c:4a:76:e1:6a:33:20:92:e8:f2:65:ee:8a:41:0a:43:33:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 15 07:47:34 2025 GMT
            Not After : Aug 14 07:52:34 2026 GMT
        Subject: CN=FBFC1277268FDBC95A33A1ADD58A0FAEB799DC3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:d4:e4:ab:21:34:2c:49:21:a9:c7:63:2e:
                    7d:a6:4f:52:d5:49:06:37:0f:0e:03:64:d2:0a:38:
                    e8:9a:4d:e2:91:ff:34:8e:81:c3:5b:ac:49:19:6b:
                    e2:dc:5d:14:86:dd:b9:55:1d:6a:5f:8a:8a:8d:9e:
                    46:ab:d6:7e:a8:e9:6e:71:e2:9a:f5:69:a7:1a:02:
                    8b:71:71:b9:64:ce:15:7e:0a:2e:25:08:80:1e:75:
                    e3:00:3b:7b:dc:da:23:1d:da:82:0a:af:79:03:31:
                    2c:f3:c3:88:b1:6a:d0:2e:b0:3c:46:38:3c:aa:3b:
                    22:b8:b8:25:5f:9e:d3:09:76:dc:4c:af:3b:ae:18:
                    8e:7a:62:e9:28:ca:44:7c:0f:e1:3a:1d:c2:51:29:
                    ae:1c:ee:39:9b:5c:07:dc:63:56:03:1f:93:6c:58:
                    bb:e4:09:13:36:51:fe:e8:24:51:13:3b:de:c0:19:
                    17:a1:f5:a9:7b:6b:ab:68:30:69:8e:f5:df:32:33:
                    d1:86:54:72:c4:bd:62:b5:8b:d7:16:e5:5f:69:f5:
                    4c:d3:6e:f3:ca:de:32:7b:3d:f2:aa:13:97:32:34:
                    72:1f:bf:fa:97:8d:80:a5:c2:c3:bc:cf:93:ef:56:
                    2e:39:14:66:58:a0:6e:3b:6d:4c:3f:70:e3:3d:55:
                    3a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FC:12:77:26:8F:DB:C9:5A:33:A1:AD:D5:8A:0F:AE:B7:99:DC:3F
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:84:af:fb:64:0b:2c:9a:c4:5f:8e:00:cb:e4:e0:06:cd:4d:
         04:da:62:9e:c5:ee:e9:87:22:af:11:13:f6:0e:c2:7b:b4:49:
         9c:fa:a1:aa:33:69:cc:55:12:48:10:58:99:67:e0:86:49:77:
         34:4f:bf:d0:76:74:ae:ae:0e:e7:7c:6e:2e:c7:f0:3e:31:5d:
         0e:d0:0c:9b:95:8d:57:7a:b6:fa:2d:12:a4:69:48:04:4b:0c:
         72:b9:0f:65:02:5c:ef:e3:bf:0a:13:a0:45:ab:5a:04:bd:88:
         8b:91:24:bf:41:31:83:a5:7b:7a:46:a7:0d:2e:af:97:9f:34:
         a0:1b:1b:1f:32:39:57:37:9a:4b:ca:e9:15:1d:73:13:25:66:
         8e:c9:ba:5b:44:0b:00:d5:82:f4:cc:5e:60:a4:78:a3:4c:00:
         10:d1:0d:ad:9c:b7:bf:ea:db:a6:92:cd:c6:35:90:67:71:85:
         06:e3:3a:8e:d8:85:c8:8a:83:1d:47:7e:ee:ff:c8:8f:dd:a3:
         dc:64:fb:91:8d:c8:53:e9:3f:77:29:75:36:c7:70:a5:5b:13:
         66:70:cb:da:8d:d1:d3:27:c0:c8:30:7f:45:3e:83:83:ae:39:
         1b:ad:83:8c:c9:7f:ec:4e:03:98:da:93:a3:e7:c0:84:65:79:
         64:cf:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:42:15 2025 by rpki-client