Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138372e302f32342d3234203d3e20323138383837.roa
File:                     36342e35372e3138372e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier:          V0NIFJCqbhh7jOcBNMglq947m46uzsbfFX9Mbp4EAbc=
Subject key identifier:   DF:A3:F8:36:DD:88:24:34:49:07:81:91:59:AD:EE:14:4F:90:47:B3
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       250E36D776D3EEFDE97C6541836B32881AF11024
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138372e302f32342d3234203d3e20323138383837.roa
Signing time:             Mon 07 Sep 2026 09:32:50 +0000
ROA not before:           Mon 07 Sep 2026 09:27:50 +0000
ROA not after:            Mon 06 Sep 2027 09:32:50 +0000
asID:                     218887
IP address blocks:        64.57.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 03:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:0e:36:d7:76:d3:ee:fd:e9:7c:65:41:83:6b:32:88:1a:f1:10:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Sep  7 09:27:50 2026 GMT
            Not After : Sep  6 09:32:50 2027 GMT
        Subject: CN=DFA3F836DD8824344907819159ADEE144F9047B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:dc:21:0c:30:a1:23:16:58:8f:96:84:cb:
                    93:6e:7a:38:4c:72:b0:de:01:f2:ac:48:23:e1:77:
                    e0:6c:69:6e:4e:fc:72:39:a2:d8:32:f8:63:0f:76:
                    2d:61:d4:4b:ab:8f:8f:5a:a9:5e:53:0e:4c:c9:72:
                    b1:04:94:0c:5b:0e:dd:c8:ab:73:b4:76:a9:1b:3d:
                    41:a8:d1:0e:dc:94:1e:4d:81:f4:c3:aa:da:b7:e5:
                    0d:5c:37:de:f9:6d:cf:55:7c:32:10:c9:79:62:f7:
                    44:84:b1:3c:e2:de:2d:ca:b6:3a:94:37:66:dc:9c:
                    13:ea:44:1e:49:17:af:47:12:77:f1:be:5d:d2:07:
                    6e:45:18:50:2e:88:1b:b2:47:22:5b:fe:c2:5e:6d:
                    42:b3:59:b9:f5:f9:8b:d1:cd:16:2e:47:ac:c4:fe:
                    52:16:9e:62:fa:04:bf:a0:64:5e:64:f6:a0:49:e2:
                    15:19:94:67:ea:7c:c6:f0:3a:cd:63:3a:fd:21:8a:
                    55:0b:8a:1f:90:ea:9d:fe:14:bb:84:46:33:5b:06:
                    46:82:37:ae:72:1a:a3:df:b9:a2:d5:27:70:d3:07:
                    93:03:45:00:9f:b4:54:0b:97:97:4b:9b:ee:23:79:
                    5f:4d:d5:8b:a4:9a:61:04:21:4a:db:dd:1c:1a:52:
                    a3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A3:F8:36:DD:88:24:34:49:07:81:91:59:AD:EE:14:4F:90:47:B3
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138372e302f32342d3234203d3e20323138383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:52:f8:f3:c6:f4:2b:f1:4a:6a:7c:68:c1:99:0f:9d:08:56:
         98:6c:04:b0:e6:63:9b:7f:d6:7e:a3:6b:df:d3:ff:f1:65:79:
         d3:73:90:95:fe:bd:70:b5:ce:b7:09:3b:92:a9:06:8e:97:3c:
         d9:f6:2e:43:f2:8e:b4:c2:be:15:7a:78:77:5b:e0:3e:2d:e0:
         15:d7:5f:bc:db:4b:81:d1:26:ac:07:00:97:50:a2:e8:d9:6a:
         09:0b:14:f7:47:8c:80:cf:f7:b7:2f:5e:98:70:af:c8:e0:0f:
         6d:8a:c3:f7:f2:35:e3:91:f9:4c:07:22:61:c4:b1:82:73:c0:
         89:e6:a9:69:48:12:f0:cd:c8:27:2d:de:07:53:d0:cb:d0:1f:
         38:c9:fc:27:d1:e1:de:47:ab:2f:23:8c:b8:7c:9c:de:32:4a:
         34:9d:61:24:fc:2d:18:e9:05:56:7d:10:66:62:2b:55:e0:ac:
         3e:3f:39:97:63:6b:0b:bf:11:67:51:fa:09:78:88:51:9b:67:
         ac:0c:dc:b7:ba:0b:4f:bf:52:d0:72:63:be:6c:a2:1d:b1:b0:
         fe:0a:19:12:c2:be:66:41:5f:c5:79:2c:13:54:bd:48:24:ed:
         21:24:fe:a5:ee:e0:ed:73:f6:55:8c:cd:de:52:3f:ea:90:97:
         ee:c5:3a:42
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUJQ4213bT7v3pfGVBg2syiBrxECQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVl
NjZhNzZkOGI3YTY4ZTAwNDIwHhcNMjYwOTA3MDkyNzUwWhcNMjcwOTA2MDkzMjUw
WjAzMTEwLwYDVQQDEyhERkEzRjgzNkREODgyNDM0NDkwNzgxOTE1OUFERUUxNDRG
OTA0N0IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2fcIQwwoSMW
WI+WhMuTbno4THKw3gHyrEgj4XfgbGluTvxyOaLYMvhjD3YtYdRLq4+PWqleUw5M
yXKxBJQMWw7dyKtztHapGz1BqNEO3JQeTYH0w6rat+UNXDfe+W3PVXwyEMl5YvdE
hLE84t4tyrY6lDdm3JwT6kQeSRevRxJ38b5d0gduRRhQLogbskciW/7CXm1Cs1m5
9fmL0c0WLkesxP5SFp5i+gS/oGReZPagSeIVGZRn6nzG8DrNYzr9IYpVC4ofkOqd
/hS7hEYzWwZGgjeuchqj37mi1Sdw0weTA0UAn7RUC5eXS5vuI3lfTdWLpJphBCFK
290cGlKjewIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFN+j+DbdiCQ0SQeBkVmt7hRP
kEezMB8GA1UdIwQYMBaAFH4sk1t1TACx6AQ7u3EhzDtarSSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2Zjg3OTQ1MzAyLzAv
N0UyQzkzNUI3NTRDMDBCMUU4MDQzQkJCNzEyMUNDM0I1QUFEMjQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcwLWMwNGVkNjk5MGMxMy9lYmQx
ZGM0Mzc4Mjg0NDA5NWJmZmVkZTZkY2I0NDI0ZWU2NmE3NmQ4YjdhNjhlMDA0Mi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hOTJhZDI2ZGRkZDY0MTliOTczZTA1
NmY4Nzk0NTMwMi8wLzM2MzQyZTM1MzcyZTMxMzgzNzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzEzODM4MzgzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEA5uzANBgkqhkiG9w0BAQsF
AAOCAQEAVVL488b0K/FKanxowZkPnQhWmGwEsOZjm3/WfqNr39P/8WV503OQlf69
cLXOtwk7kqkGjpc82fYuQ/KOtMK+FXp4d1vgPi3gFddfvNtLgdEmrAcAl1Ci6Nlq
CQsU90eMgM/3ty9emHCvyOAPbYrD9/I145H5TAciYcSxgnPAieapaUgS8M3IJy3e
B1PQy9AfOMn8J9Hh3kerLyOMuHyc3jJKNJ1hJPwtGOkFVn0QZmIrVeCsPj85l2Nr
C78RZ1H6CXiIUZtnrAzct7oLT79S0HJjvmyiHbGw/goZEsK+ZkFfxXksE1S9SCTt
IST+pe7g7XP2VYzN3lI/6pCX7sU6Qg==
-----END CERTIFICATE-----
Generated at Wed Sep 16 07:32:53 2026 by rpki-client