Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138362e302f32342d3234203d3e20323139333934.roa
File:                     36342e35372e3138362e302f32342d3234203d3e20323139333934.roa (raw, json)
Hash identifier:          72e1tOl6Y7qibHaYqDujJBKTiZU4NlL1qwzC6k3Gclo=
Subject key identifier:   E1:1A:A2:F9:4F:A7:11:59:42:27:3B:93:57:C0:2E:D2:3F:B8:55:C7
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       1DF9518796916449E7ADE5BE4426F51029EAA740
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138362e302f32342d3234203d3e20323139333934.roa
Signing time:             Mon 31 Aug 2026 15:50:30 +0000
ROA not before:           Mon 31 Aug 2026 15:45:30 +0000
ROA not after:            Mon 30 Aug 2027 15:50:30 +0000
asID:                     219394
IP address blocks:        64.57.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:f9:51:87:96:91:64:49:e7:ad:e5:be:44:26:f5:10:29:ea:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 31 15:45:30 2026 GMT
            Not After : Aug 30 15:50:30 2027 GMT
        Subject: CN=E11AA2F94FA7115942273B9357C02ED23FB855C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2d:0c:92:42:fd:26:4b:d2:f9:b3:15:b1:09:
                    0f:78:61:3b:bb:8c:a4:84:33:e6:df:4a:8c:56:4d:
                    8a:c0:da:59:35:d1:76:34:66:c0:ba:f5:8d:f4:e1:
                    6d:f0:93:d1:b3:35:bd:37:5b:89:bc:51:f0:01:13:
                    14:9f:49:a8:66:ab:f9:62:9b:39:1f:1b:be:d0:27:
                    26:b5:95:c0:65:85:9a:13:50:8b:b8:0c:c9:1a:bb:
                    ea:8e:c2:54:d3:62:db:fc:59:7c:a9:44:50:bf:7f:
                    c2:47:31:e9:c2:a6:4e:f3:36:de:3d:7b:c8:7d:ea:
                    83:bb:7e:80:0a:d1:74:85:d3:c4:5d:6b:9a:86:d5:
                    50:97:bf:fa:3f:da:71:42:22:60:74:14:23:02:40:
                    4d:f8:38:22:9c:b1:7a:02:ce:68:85:06:3f:fc:c2:
                    c1:e2:19:92:62:cb:ed:6c:bb:9d:b2:fe:c2:ed:7c:
                    56:65:f5:f1:2d:89:9a:4b:4f:fc:54:23:a9:48:4d:
                    7c:de:7c:67:c8:53:71:a6:6e:0d:48:3f:2b:5e:af:
                    37:29:a6:4b:4f:f3:55:50:a5:11:dc:66:5a:41:31:
                    48:dc:1f:9a:0d:7c:c1:16:6f:9e:57:ff:58:28:13:
                    87:1e:89:33:df:41:01:b8:e5:a0:7d:d2:56:63:02:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1A:A2:F9:4F:A7:11:59:42:27:3B:93:57:C0:2E:D2:3F:B8:55:C7
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138362e302f32342d3234203d3e20323139333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:e7:d1:e1:eb:27:74:c0:68:3b:27:d5:d2:ee:01:37:6f:
         a2:72:9c:da:f6:93:1b:8a:c5:b3:61:a7:e5:18:57:64:13:99:
         01:3d:2a:05:03:33:46:60:97:a9:62:b2:c2:a3:30:11:2d:0e:
         ce:2f:56:83:37:27:5a:37:81:9a:2d:cc:bc:b2:d9:aa:d5:eb:
         d5:99:16:3b:11:f1:15:fb:88:db:52:b7:01:f8:b4:53:2d:93:
         ce:98:d6:97:a8:29:3c:75:88:5d:6d:1b:28:7c:c2:55:17:18:
         7b:45:ca:a4:ee:00:22:d6:25:f4:41:e7:08:ba:b6:50:dd:d0:
         84:fd:a8:3c:e5:7f:f8:aa:83:df:2f:b6:5d:f6:7f:e5:70:ad:
         df:2f:2f:c9:bb:32:7d:cc:2a:dc:78:55:e7:4d:7b:da:e5:53:
         e0:12:ac:87:09:85:0f:7d:90:37:15:82:ec:dd:95:ae:4b:7e:
         8c:89:52:af:18:04:45:04:3e:ef:95:73:da:a5:a4:aa:50:22:
         49:22:37:b4:86:31:d4:bc:a4:24:19:78:cd:ab:a7:e8:08:b2:
         f3:ee:2f:a5:5a:98:15:eb:f0:5a:35:4c:38:c8:6f:0f:79:9b:
         73:1b:99:49:7c:0a:27:e5:2d:08:4e:d7:2d:5b:d4:4c:1b:e4:
         70:53:e5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:34 2026 by rpki-client