Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32322d3234203d3e20383334.roa
File:                     36342e35372e3138342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          r1pEO8qqKTR269JRmmqmWD2lHHk1myu2ve5ONXaAcOg=
Subject key identifier:   38:D8:5B:11:D2:68:14:E7:FD:E5:01:4D:8E:98:B6:AB:FE:AF:35:BA
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       352C47522414AF7B063ED2626D97227875586E0B
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32322d3234203d3e20383334.roa
Signing time:             Wed 07 Oct 2026 06:50:13 +0000
ROA not before:           Wed 07 Oct 2026 06:45:13 +0000
ROA not after:            Wed 06 Oct 2027 06:50:13 +0000
asID:                     834
IP address blocks:        64.57.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 17:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2c:47:52:24:14:af:7b:06:3e:d2:62:6d:97:22:78:75:58:6e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Oct  7 06:45:13 2026 GMT
            Not After : Oct  6 06:50:13 2027 GMT
        Subject: CN=38D85B11D26814E7FDE5014D8E98B6ABFEAF35BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:62:cb:69:9c:4b:64:94:8b:69:be:72:1d:
                    d6:56:1a:7e:6d:75:f8:f9:bc:94:89:dd:22:97:1d:
                    f9:13:ac:81:ab:1c:32:5e:3b:06:a9:95:9f:90:af:
                    9d:d7:79:80:cb:a2:63:a2:8b:38:51:48:2d:c7:1b:
                    29:32:df:9d:be:0e:36:70:f9:5d:8f:4d:76:96:e4:
                    36:9e:5e:8e:3a:a9:17:3b:5a:f2:f6:1f:0a:ad:5b:
                    9a:90:38:e4:f1:45:97:e1:7c:84:be:0d:6d:ce:9d:
                    46:92:91:68:a7:34:35:b8:b9:3d:41:9f:85:cb:76:
                    ad:c7:29:21:f0:57:45:c3:50:8b:c7:aa:f0:11:e6:
                    7a:1f:0b:2c:f8:e6:08:c7:3f:d7:95:35:c0:21:71:
                    6d:6b:79:05:7d:b3:0a:d7:e3:e7:e7:87:52:0a:8e:
                    68:cf:f4:ec:7b:01:96:c5:ed:34:82:35:ce:5d:34:
                    f5:04:57:c2:ec:34:df:19:04:68:7e:72:6e:e7:0a:
                    6e:03:dd:4a:d4:b7:e4:03:3f:42:ed:d5:93:39:82:
                    05:83:52:da:03:6e:b0:4c:d8:9b:bf:12:07:c4:12:
                    16:33:6c:fc:6e:14:a9:dd:57:f6:cb:2b:5a:09:1b:
                    17:17:42:5d:c0:3b:07:6d:44:19:22:88:4f:31:e7:
                    5c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D8:5B:11:D2:68:14:E7:FD:E5:01:4D:8E:98:B6:AB:FE:AF:35:BA
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:52:4a:ab:61:55:8e:c9:5a:8b:a5:3c:19:e4:a5:4f:9b:ff:
         81:09:c1:d1:7e:51:4c:c4:75:d7:dd:31:0f:70:db:b8:fd:df:
         d2:60:35:f9:46:15:b5:1e:10:af:24:06:58:da:e0:a4:49:c9:
         35:cb:01:8c:36:1e:65:52:fc:28:af:84:08:b5:84:8d:71:98:
         c9:4d:21:b6:04:d9:a2:f4:fd:24:80:12:4e:f7:95:e7:91:aa:
         3e:05:7b:0d:a7:10:26:9b:c2:c9:60:13:cd:c2:07:0b:b4:1e:
         13:a8:57:24:b2:17:f3:64:11:4f:99:a9:0f:6f:d4:c9:f8:27:
         9a:82:b7:1f:84:56:d2:aa:d1:fa:3e:6b:fd:50:8d:7d:0c:2c:
         ea:01:b9:58:a7:97:bd:4b:98:1f:fc:85:af:7e:f0:52:e4:74:
         59:27:cd:3e:7d:aa:68:fa:d5:3c:75:13:69:bc:9c:ab:df:c5:
         5b:0a:25:a9:fd:e9:b4:c3:3e:34:08:33:72:0e:df:5a:48:82:
         10:a6:bb:2a:8e:ff:ed:33:28:27:f0:40:7b:d1:52:66:01:bc:
         9c:91:22:16:f9:21:68:b2:70:41:91:20:2f:be:0f:79:3b:b6:
         52:dc:76:16:59:41:0f:fb:35:23:79:94:71:6d:29:33:ca:11:
         c0:28:01:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:33:48 2026 by rpki-client