Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138322e302f32342d3234203d3e2039303039.roa
File:                     36342e35372e3138322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          svWRmx/k6Op4GoQ1Xxdbhr4I1y3UYpOs7is+UqtscAk=
Subject key identifier:   9C:AC:E2:FB:D3:6D:F1:7E:77:53:98:10:8C:70:3B:8B:54:FB:9B:9C
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       35DAAAA6D6F10979055DB80EC731405A2037CEBC
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138322e302f32342d3234203d3e2039303039.roa
Signing time:             Mon 25 Aug 2025 01:54:08 +0000
ROA not before:           Mon 25 Aug 2025 01:49:08 +0000
ROA not after:            Mon 24 Aug 2026 01:54:08 +0000
asID:                     9009
IP address blocks:        64.57.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 00:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:aa:a6:d6:f1:09:79:05:5d:b8:0e:c7:31:40:5a:20:37:ce:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 25 01:49:08 2025 GMT
            Not After : Aug 24 01:54:08 2026 GMT
        Subject: CN=9CACE2FBD36DF17E775398108C703B8B54FB9B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:71:21:22:ee:15:9e:18:ae:19:4b:9e:73:b7:
                    27:e2:a0:e1:fe:bf:ae:a5:fd:d1:f6:88:1d:32:68:
                    b5:08:23:e9:52:a3:de:7e:01:46:70:26:81:23:17:
                    d4:32:92:59:a6:36:da:12:10:9e:9b:72:3b:c8:ad:
                    cb:14:0a:3d:91:31:c8:e6:22:0e:ef:30:51:2a:fe:
                    a2:fd:cf:ea:ed:7c:0b:ef:e8:79:74:9a:30:0a:11:
                    45:5e:3d:cd:2e:c2:92:a2:ff:5c:63:56:c2:68:09:
                    b1:6c:d5:89:7d:06:fb:aa:99:f0:b5:ce:0b:56:6f:
                    42:41:30:a9:79:c2:ec:6d:7d:63:53:bd:bb:f4:22:
                    1d:6e:89:a1:33:ea:98:93:42:e9:58:1a:b6:8b:4b:
                    56:8a:c8:38:c1:27:35:9e:7f:73:c5:8f:b4:76:3e:
                    91:cc:8d:ce:8e:55:21:19:ff:5a:8d:9f:c7:a3:a7:
                    38:e8:ba:0b:53:38:d4:96:0d:fa:2a:f9:d0:ea:e4:
                    aa:67:63:0e:f8:9b:c7:47:16:2b:0a:5d:ce:e3:81:
                    75:0b:d9:35:f7:28:b5:b5:dc:ce:2d:82:6e:aa:63:
                    24:cf:a7:b8:f8:a3:71:7b:d5:45:ba:ec:cd:e4:48:
                    82:3b:0d:6d:f9:7c:70:fc:cd:a0:50:97:98:48:6b:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:E2:FB:D3:6D:F1:7E:77:53:98:10:8C:70:3B:8B:54:FB:9B:9C
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138322e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a3:75:1e:f6:a5:4d:3a:8b:c4:71:c4:6e:b9:47:f5:b6:b0:
         28:08:9f:0a:54:9c:80:f4:da:dd:7b:1c:cf:ef:77:76:2f:12:
         1a:3c:13:29:73:5d:69:4e:bb:38:75:8b:49:c0:fb:d5:90:b0:
         e5:63:8a:03:2d:ce:5e:9b:fb:fa:1f:67:a6:6d:a0:aa:19:5a:
         f4:d6:da:4e:3d:ae:d9:58:96:c3:58:13:7e:72:60:37:bc:78:
         9f:5d:3d:50:6c:a2:72:87:05:d1:30:34:17:c1:54:5a:56:db:
         2a:c5:0a:48:ed:59:66:da:7e:ca:e2:14:f9:b4:9a:f1:d5:cb:
         96:38:21:11:6c:9e:c2:73:f9:c5:c0:14:d9:8f:41:7b:43:75:
         bc:19:9c:69:b0:21:42:06:61:36:af:5e:7b:c8:69:fe:c7:e0:
         54:86:29:be:19:67:0e:db:3d:97:54:00:dd:53:7a:8b:1c:ba:
         ee:14:81:9a:05:63:fa:28:5b:14:35:3c:a1:c2:1d:73:e7:59:
         3c:70:97:d3:18:00:ff:f2:98:45:46:3e:d3:f9:f2:e9:e2:be:
         e9:1b:df:62:62:02:d5:8e:dd:96:3f:aa:80:86:e1:67:14:8c:
         54:8d:0f:15:03:87:89:d3:45:3a:18:d3:fe:58:33:4f:b3:18:
         16:da:4c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:28:49 2025 by rpki-client