Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138322e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          cBADQF+bvR2J12aWIt30VyMlBiOA3VubFA9bBkQqVWM=
Subject key identifier:   36:46:81:99:A1:B0:12:28:EB:B8:16:CF:CA:17:CA:14:62:F4:18:46
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       18C62DF183646FCE52042A43C578A074888071B3
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138322e302f32342d3234203d3e20383334.roa
Signing time:             Wed 02 Jul 2025 06:55:50 +0000
ROA not before:           Wed 02 Jul 2025 06:50:50 +0000
ROA not after:            Wed 01 Jul 2026 06:55:50 +0000
asID:                     834
IP address blocks:        64.57.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 05:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c6:2d:f1:83:64:6f:ce:52:04:2a:43:c5:78:a0:74:88:80:71:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul  2 06:50:50 2025 GMT
            Not After : Jul  1 06:55:50 2026 GMT
        Subject: CN=36468199A1B01228EBB816CFCA17CA1462F41846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:05:0b:ae:72:af:ce:b5:66:62:c3:7b:06:
                    90:a9:d3:39:31:8f:70:b4:56:4c:85:52:aa:8d:98:
                    31:a6:2e:d4:b8:86:26:5c:64:cf:e8:ce:0f:1c:ff:
                    31:21:fd:10:b3:f9:95:3a:e4:e0:73:cc:75:cb:7a:
                    3b:01:4a:b0:10:71:36:83:c1:fe:94:7c:f8:10:7c:
                    fe:72:93:c1:a1:07:53:f0:60:d3:d7:e2:9d:e8:3a:
                    4f:75:65:8f:46:79:31:8c:f4:46:42:c6:7a:b8:a9:
                    d5:13:2c:7e:3d:14:d0:d6:1e:88:1c:46:ad:4a:dd:
                    ca:31:5a:b6:a4:8e:87:cf:4b:43:29:47:c5:53:eb:
                    52:f7:62:8a:6b:0c:ba:84:d1:82:c1:41:1c:45:73:
                    5a:83:6c:46:3c:5f:30:d1:4c:bc:bf:fa:e0:17:64:
                    87:f9:ec:1e:af:14:4e:c0:12:8a:b1:ec:68:22:58:
                    d2:72:22:ad:fc:0a:d9:e6:27:6a:63:36:23:5f:12:
                    46:46:7e:30:7a:6b:bd:e5:23:aa:dc:04:6b:73:a5:
                    2b:46:08:4a:47:89:ca:f7:67:fd:e5:00:83:00:d3:
                    e5:8c:ce:6b:7a:58:fd:69:68:d9:61:04:67:c3:ce:
                    87:ba:f2:13:32:d9:f2:ab:c0:84:14:53:1c:4c:58:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:46:81:99:A1:B0:12:28:EB:B8:16:CF:CA:17:CA:14:62:F4:18:46
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:56:b2:35:8e:52:cc:e3:a7:3c:96:c7:88:ba:e5:9f:5b:9b:
         97:19:37:9d:fa:2f:77:c8:a7:d2:f9:db:0d:d8:e9:aa:c4:f8:
         50:1d:83:a8:63:be:0e:1c:a9:2a:ad:c3:f5:70:36:99:bd:48:
         77:07:a3:3a:1a:3e:03:70:99:43:ed:0e:d4:91:4e:47:bc:fb:
         40:32:23:7a:58:ec:58:65:c3:0e:3d:30:b3:55:95:23:00:0b:
         b1:64:52:24:32:9f:ce:df:e3:30:59:72:67:02:5a:3e:dc:8d:
         74:d0:2b:6f:b5:f4:b7:d7:17:fc:96:40:59:5e:ec:a9:bb:c8:
         25:e9:37:13:9b:8b:a9:05:80:7e:04:ba:0e:73:52:fb:ba:52:
         9f:5b:8b:55:8a:0f:97:74:19:6d:c5:fa:ad:4d:7b:97:16:c4:
         a4:93:39:dc:28:fe:77:05:8d:f6:c1:54:56:05:90:67:b8:9d:
         36:c1:f4:59:70:d6:2a:82:d9:1d:83:48:5d:84:31:32:fc:3e:
         48:a8:aa:5f:4f:34:3b:db:81:50:44:ee:7a:c7:84:b6:82:9f:
         93:cd:eb:38:53:b0:3f:04:6d:01:22:be:b4:ae:59:59:78:e7:
         1b:e5:65:a9:49:78:7e:11:57:26:3f:91:c9:96:45:85:2b:76:
         9b:2e:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:55:02 2025 by rpki-client