Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32342d3234203d3e20323139333933.roa
File:                     36342e35372e3138342e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier:          91bVf+Mvn4dVyvaWo5JZbJrH2qPvipSCw0IT8clL2Dg=
Subject key identifier:   83:A0:80:C9:1C:28:ED:A8:FA:59:3B:3B:F2:AD:E8:E2:DE:29:1D:A9
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       02E52F1CEF97AE4E6D242BC31319958ECFE9F364
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32342d3234203d3e20323139333933.roa
Signing time:             Mon 31 Aug 2026 15:50:30 +0000
ROA not before:           Mon 31 Aug 2026 15:45:30 +0000
ROA not after:            Mon 30 Aug 2027 15:50:30 +0000
asID:                     219393
IP address blocks:        64.57.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e5:2f:1c:ef:97:ae:4e:6d:24:2b:c3:13:19:95:8e:cf:e9:f3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 31 15:45:30 2026 GMT
            Not After : Aug 30 15:50:30 2027 GMT
        Subject: CN=83A080C91C28EDA8FA593B3BF2ADE8E2DE291DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:ed:fa:3d:e1:f1:df:49:6e:47:aa:83:54:
                    5b:4b:be:56:c2:05:4e:a7:bc:52:67:97:bb:88:66:
                    bd:d9:1e:a6:82:ed:ce:c1:32:63:c6:74:8d:a1:f1:
                    98:70:4a:16:a1:d1:af:a4:f2:08:dc:a9:d4:f9:9c:
                    27:9b:2f:2a:fe:9c:48:f9:7b:55:68:54:5b:84:69:
                    44:bd:a8:47:32:32:a4:6a:94:0a:5d:83:5a:81:f6:
                    d6:1d:ab:6f:c5:90:d9:30:31:cd:81:1c:4c:b2:f1:
                    01:f1:3c:73:e1:49:71:af:9a:37:67:64:cf:97:1c:
                    8b:11:87:4b:d5:d3:d8:0c:88:5a:6d:ed:7e:d9:68:
                    3c:81:3c:4f:1d:61:db:0e:bc:ee:38:6a:69:a5:3f:
                    b6:57:a9:86:5a:54:01:0d:97:72:66:09:ed:e4:90:
                    fd:8c:e3:1a:2b:1d:1f:bf:36:47:e8:3e:03:44:c5:
                    ae:c5:36:c0:98:58:a5:c7:8b:ff:a1:41:e1:d2:cb:
                    e5:8e:a5:ac:84:24:96:5b:bc:f3:fc:00:28:50:72:
                    7a:85:1a:88:d0:59:f1:6c:cc:ae:e3:d4:96:37:9e:
                    34:25:73:2c:56:89:89:50:87:75:ae:81:1e:5f:a3:
                    88:e2:87:5c:38:31:f5:f0:b6:47:18:72:1d:5c:90:
                    7b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:80:C9:1C:28:ED:A8:FA:59:3B:3B:F2:AD:E8:E2:DE:29:1D:A9
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32342d3234203d3e20323139333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:0f:e8:14:ed:c9:f9:e5:c0:52:f7:92:21:25:4c:57:4f:
         fa:4f:d0:8e:9a:53:c6:e0:8c:55:5f:d9:a4:d8:f2:ce:c8:ff:
         00:ad:48:b9:ad:8d:d9:c9:b7:d8:2d:2d:85:da:a6:e3:a1:0a:
         65:83:82:67:45:8b:f9:0c:4c:a7:0e:36:ec:0d:41:19:b1:71:
         55:db:34:35:18:81:65:13:3f:db:ed:6c:f0:4f:29:9e:cd:35:
         cb:01:d5:ca:04:c3:8d:81:93:b0:25:36:41:bf:f2:0a:ca:b2:
         fe:9b:b0:76:06:e2:18:e8:22:37:fa:6e:ef:bf:9f:55:5f:b3:
         78:5d:4a:b3:6a:cc:f3:b5:f7:67:33:92:f2:7f:6c:be:4b:65:
         bc:a2:12:c1:65:94:30:51:76:75:0d:86:90:6d:5f:6b:63:b4:
         cb:d0:52:9b:1a:d4:0d:eb:dc:5c:12:8c:1c:53:04:39:22:cb:
         03:d9:b7:5d:28:29:21:c6:6e:bb:e6:b4:fd:65:a7:2c:81:ff:
         3e:36:6c:79:a5:fd:02:da:7e:a2:0f:4f:13:4a:a7:66:53:e5:
         08:07:5b:bb:90:a4:e0:a0:c0:4a:47:41:7f:27:72:36:c0:26:
         a3:02:4e:b6:8d:c9:76:f7:9c:f4:49:eb:72:ee:0e:30:b9:b9:
         56:f9:1b:92
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUAuUvHO+Xrk5tJCvDExmVjs/p82QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVl
NjZhNzZkOGI3YTY4ZTAwNDIwHhcNMjYwODMxMTU0NTMwWhcNMjcwODMwMTU1MDMw
WjAzMTEwLwYDVQQDEyg4M0EwODBDOTFDMjhFREE4RkE1OTNCM0JGMkFERThFMkRF
MjkxREE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XLt+j3h8d9J
bkeqg1RbS75WwgVOp7xSZ5e7iGa92R6mgu3OwTJjxnSNofGYcEoWodGvpPII3KnU
+Zwnmy8q/pxI+XtVaFRbhGlEvahHMjKkapQKXYNagfbWHatvxZDZMDHNgRxMsvEB
8Txz4Ulxr5o3Z2TPlxyLEYdL1dPYDIhabe1+2Wg8gTxPHWHbDrzuOGpppT+2V6mG
WlQBDZdyZgnt5JD9jOMaKx0fvzZH6D4DRMWuxTbAmFilx4v/oUHh0svljqWshCSW
W7zz/AAoUHJ6hRqI0FnxbMyu49SWN540JXMsVomJUId1roEeX6OI4odcODH18LZH
GHIdXJB7MQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIOggMkcKO2o+lk7O/Kt6OLe
KR2pMB8GA1UdIwQYMBaAFH4sk1t1TACx6AQ7u3EhzDtarSSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2Zjg3OTQ1MzAyLzAv
N0UyQzkzNUI3NTRDMDBCMUU4MDQzQkJCNzEyMUNDM0I1QUFEMjQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcwLWMwNGVkNjk5MGMxMy9lYmQx
ZGM0Mzc4Mjg0NDA5NWJmZmVkZTZkY2I0NDI0ZWU2NmE3NmQ4YjdhNjhlMDA0Mi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hOTJhZDI2ZGRkZDY0MTliOTczZTA1
NmY4Nzk0NTMwMi8wLzM2MzQyZTM1MzcyZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzOTMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEA5uDANBgkqhkiG9w0BAQsF
AAOCAQEAIWsP6BTtyfnlwFL3kiElTFdP+k/QjppTxuCMVV/ZpNjyzsj/AK1Iua2N
2cm32C0thdqm46EKZYOCZ0WL+QxMpw427A1BGbFxVds0NRiBZRM/2+1s8E8pns01
ywHVygTDjYGTsCU2Qb/yCsqy/puwdgbiGOgiN/pu77+fVV+zeF1Ks2rM87X3ZzOS
8n9svktlvKISwWWUMFF2dQ2GkG1fa2O0y9BSmxrUDevcXBKMHFMEOSLLA9m3XSgp
IcZuu+a0/WWnLIH/PjZseaX9Atp+og9PE0qnZlPlCAdbu5Ck4KDASkdBfydyNsAm
owJOto3Jdvec9Enrcu4OMLm5Vvkbkg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:31 2026 by rpki-client