Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138352e302f32342d3234203d3e20323139333933.roa
File:                     36342e35372e3138352e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier:          5QHnGwUHEq3EiX7+XjEQ3HpqMPixNs08Ob+38u3Ho7Q=
Subject key identifier:   03:45:6B:05:49:43:15:85:52:9D:E3:D8:31:AC:DC:E8:EA:9B:48:97
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       4F7311BD406867F9DEE8EF243C93A85F8469006A
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138352e302f32342d3234203d3e20323139333933.roa
Signing time:             Sun 30 Aug 2026 15:44:28 +0000
ROA not before:           Sun 30 Aug 2026 15:39:28 +0000
ROA not after:            Sun 29 Aug 2027 15:44:28 +0000
asID:                     219393
IP address blocks:        64.57.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:11:bd:40:68:67:f9:de:e8:ef:24:3c:93:a8:5f:84:69:00:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 30 15:39:28 2026 GMT
            Not After : Aug 29 15:44:28 2027 GMT
        Subject: CN=03456B0549431585529DE3D831ACDCE8EA9B4897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:9c:80:36:29:80:a1:cd:7e:12:d5:f7:e8:
                    24:d0:45:6e:9e:b5:ef:15:ed:f6:be:93:bd:09:22:
                    f3:b5:67:92:38:97:9a:f6:3c:6e:f0:c6:b9:fb:98:
                    27:d5:63:26:8b:e1:45:cc:58:31:a8:3f:eb:5d:27:
                    6b:9d:a7:d1:9a:c2:ab:cc:b2:0f:d4:47:59:32:9a:
                    1c:bd:4a:5d:c1:3b:6e:4e:68:16:da:ba:e6:01:f1:
                    e1:94:f9:ad:8f:1f:93:b6:d1:03:1c:3b:d0:a5:b5:
                    b2:88:66:4f:91:a0:75:ac:f0:77:08:19:be:40:c0:
                    91:fe:1c:a9:ad:bc:8a:9c:b8:a4:35:3b:1a:48:cd:
                    22:53:7f:3c:36:cf:be:cb:66:03:5d:ff:47:67:be:
                    39:f6:4b:bb:e6:07:3c:85:89:f5:54:df:ac:68:4b:
                    82:d8:e1:17:cc:5a:ec:d4:22:99:75:e9:c0:8d:aa:
                    7b:b3:8c:23:a7:8c:88:cb:5b:7f:16:4f:a7:87:27:
                    df:a7:7a:1a:fa:05:54:f7:0b:67:6d:52:c1:7f:dc:
                    ee:0b:69:39:9b:ed:7d:0f:98:74:15:96:06:54:0d:
                    73:25:a0:87:ae:99:38:85:44:b9:5e:5f:0e:47:ea:
                    06:56:27:fc:6f:4b:91:ad:9a:b6:d5:b8:5a:e5:3a:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:45:6B:05:49:43:15:85:52:9D:E3:D8:31:AC:DC:E8:EA:9B:48:97
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138352e302f32342d3234203d3e20323139333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:45:93:dc:3c:96:0e:fe:eb:d9:ef:86:e9:0b:97:1a:dc:22:
         69:13:b8:99:ba:3c:f1:0e:2b:59:1d:67:3a:27:5e:72:34:8b:
         df:db:10:1c:fe:df:3f:27:08:0c:2f:b2:38:9b:54:34:31:91:
         7d:1c:8b:32:45:50:0f:fb:96:f2:3e:a7:db:8e:8c:cd:ba:af:
         c5:7c:29:22:81:ad:ee:a1:04:d0:79:9a:84:f0:e6:d0:db:2d:
         ef:54:29:5a:bb:63:45:ff:4d:80:9a:ea:58:04:af:c7:6e:45:
         87:f1:25:48:53:99:cd:24:ce:b0:43:bc:7a:95:65:d8:75:c6:
         0e:33:1e:53:3c:18:2e:96:d5:04:fb:c4:10:4e:ac:0c:ab:1f:
         79:63:5a:6f:0d:c3:fa:cc:fb:92:37:77:f6:0d:f4:c9:2e:73:
         31:5a:39:db:fe:f5:83:f1:06:17:3d:ea:3b:d6:65:58:59:b6:
         fd:ea:f4:17:67:1a:a7:31:40:7d:47:61:d4:d3:c5:bd:8b:b4:
         97:5e:db:a1:bb:90:0d:0c:af:4f:04:97:98:37:6f:ad:cb:18:
         56:be:22:2b:60:f2:2f:c8:93:f4:70:2d:94:f7:30:e7:54:f7:
         0b:28:c8:1a:74:b2:d2:c2:09:4e:f8:5a:ac:66:2a:a3:00:7c:
         18:83:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:31 2026 by rpki-client