Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32342d3234203d3e20323139333934.roa
File:                     36342e35372e3138342e302f32342d3234203d3e20323139333934.roa (raw, json)
Hash identifier:          UqCqlMLSs/IOSqNs7vx57UfWd3gW4oPtwz15QX5HZbc=
Subject key identifier:   7E:08:00:0A:BF:7B:5E:47:E6:1E:4B:E0:18:19:DF:FE:BE:AE:AE:EA
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       60E8424118FE04130F1BD323701291810A0D690A
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32342d3234203d3e20323139333934.roa
Signing time:             Mon 31 Aug 2026 15:50:29 +0000
ROA not before:           Mon 31 Aug 2026 15:45:29 +0000
ROA not after:            Mon 30 Aug 2027 15:50:29 +0000
asID:                     219394
IP address blocks:        64.57.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e8:42:41:18:fe:04:13:0f:1b:d3:23:70:12:91:81:0a:0d:69:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 31 15:45:29 2026 GMT
            Not After : Aug 30 15:50:29 2027 GMT
        Subject: CN=7E08000ABF7B5E47E61E4BE01819DFFEBEAEAEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:db:17:1a:23:e1:f0:78:b3:33:42:51:9a:4b:
                    54:d5:25:05:65:03:83:dd:33:90:95:c7:8d:f8:8e:
                    81:c5:c1:0e:b2:26:92:bd:30:47:12:fc:a5:4a:36:
                    29:ef:b1:0a:6e:6b:d2:02:50:0f:d5:c4:48:6d:a0:
                    16:82:44:17:8f:11:e5:fe:ac:88:6a:f3:e2:3d:7c:
                    45:43:54:9a:57:65:4c:5b:4f:f9:06:f3:d2:93:30:
                    c5:b3:bf:fa:d8:4a:63:3a:4a:0c:43:f7:d1:ef:99:
                    a9:f6:f6:f3:5c:0f:cd:0c:e9:de:8c:f9:01:f4:ac:
                    f2:92:77:1a:8f:1c:f6:24:e5:5b:4c:6e:af:e0:66:
                    de:46:dc:25:e6:d9:c0:54:95:61:91:4a:be:39:f7:
                    a0:c5:60:19:32:45:1c:af:25:5e:7f:35:6b:67:ce:
                    1b:d8:90:16:95:e7:73:4a:de:71:be:ad:ef:9d:f5:
                    cd:96:2e:99:e0:b6:14:71:2c:f9:dd:82:4e:c7:7c:
                    ba:bc:da:25:80:9f:63:23:31:72:d9:4a:ee:89:75:
                    62:7e:0c:2f:20:8c:50:38:b2:07:9b:e1:fd:02:66:
                    2b:22:2d:b7:16:fa:fc:df:f9:e3:41:0c:cb:57:a8:
                    74:ce:16:c2:c4:c0:9b:ed:b3:2e:a5:a6:91:5f:ec:
                    53:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:08:00:0A:BF:7B:5E:47:E6:1E:4B:E0:18:19:DF:FE:BE:AE:AE:EA
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32342d3234203d3e20323139333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:6c:3c:52:1b:3c:73:ba:9b:9a:00:b4:bb:ab:81:28:ac:d2:
         b8:43:73:ce:3d:10:3c:26:ea:f4:fe:29:3e:09:06:30:1f:7c:
         aa:1b:0f:5a:7c:f4:5e:47:40:90:53:15:54:ab:b9:44:8f:c6:
         9b:72:c8:d4:14:9a:42:0e:34:4d:96:80:12:65:c7:cb:d3:bd:
         a9:fe:29:ac:d7:8a:59:06:73:3f:a5:73:65:ba:a7:d7:5a:fc:
         6c:3b:a4:a7:e0:c7:6d:e3:99:35:c0:92:44:7f:ff:03:31:e8:
         f2:fe:c4:bd:91:2f:94:3a:0f:52:ed:8c:9a:de:40:22:dd:96:
         02:be:2a:67:37:04:e7:b8:a4:90:56:50:d5:62:89:82:f1:89:
         73:e3:d0:b4:7a:52:cc:76:91:27:cd:7f:c0:db:fd:36:2d:a5:
         c1:e2:0a:12:80:34:0d:04:ac:ec:53:de:86:ef:0c:42:a4:24:
         da:29:1c:09:a3:59:67:7b:54:44:c6:6e:ce:9a:d5:1b:58:30:
         4b:22:d1:73:5e:d1:ee:d6:b7:2d:ed:32:7b:d8:d3:69:f5:cf:
         40:69:23:b0:bc:58:5b:a7:02:70:ad:28:b3:07:44:3d:43:7d:
         6f:d7:1d:91:6f:46:ae:b2:80:dd:01:c5:91:1a:d5:85:dc:4f:
         0f:06:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:33 2026 by rpki-client