Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138372e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3138372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9UHPM0W7vnwMZGWkPUnscm4vL2PDnz5I6Ntvgi76wFc=
Subject key identifier:   4F:54:01:22:A1:DF:9E:41:3C:06:A8:80:20:32:2C:E8:C7:47:4E:DC
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       1D75604BBE8C739E8AA5DF382F58C4C6DD581995
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 31 Aug 2026 15:52:09 +0000
ROA not before:           Mon 31 Aug 2026 15:47:09 +0000
ROA not after:            Mon 30 Aug 2027 15:52:09 +0000
asID:                     834
IP address blocks:        64.57.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:60:4b:be:8c:73:9e:8a:a5:df:38:2f:58:c4:c6:dd:58:19:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 31 15:47:09 2026 GMT
            Not After : Aug 30 15:52:09 2027 GMT
        Subject: CN=4F540122A1DF9E413C06A88020322CE8C7474EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:87:e6:e4:d5:25:cb:25:eb:3b:c3:ca:a4:
                    2d:f0:38:e2:81:56:fa:12:d6:cd:ac:c5:f3:82:05:
                    03:c0:81:28:9b:24:6d:00:c7:2e:a3:c0:9e:83:bf:
                    14:c1:b8:60:8d:79:e1:3b:1e:b0:1f:11:a6:7c:b0:
                    1b:9d:aa:89:40:cb:19:63:27:ed:ad:24:df:fe:7a:
                    c1:be:59:88:35:a3:4d:e8:f2:cf:98:34:6e:38:77:
                    aa:b8:04:a8:e2:b4:f0:4d:d6:ec:58:5f:17:49:5f:
                    69:03:f6:fa:0d:c6:57:b6:7c:d8:6d:fe:40:24:a0:
                    d2:7a:6b:c9:35:03:59:de:91:fb:a1:aa:ed:75:53:
                    e4:ab:2f:23:9a:d6:3d:97:55:66:d6:21:10:cd:ae:
                    75:37:51:d7:c4:0f:e0:1f:2c:d1:94:5f:9f:f3:86:
                    c0:d3:03:fb:1a:79:89:ce:6d:58:56:84:75:14:cc:
                    9e:3a:dd:4d:1b:67:c7:ac:21:4a:fb:e6:26:c6:c2:
                    7b:b9:c1:c5:1d:f5:b4:be:76:69:c4:9a:7c:2c:7b:
                    ff:68:2f:f6:3d:86:e9:20:8b:f9:3e:0b:d4:f5:15:
                    b1:b1:64:7f:41:db:8b:23:3f:b8:be:64:32:24:f2:
                    75:20:f1:3d:b6:b3:19:60:ed:0f:2c:17:5e:72:f3:
                    bc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:54:01:22:A1:DF:9E:41:3C:06:A8:80:20:32:2C:E8:C7:47:4E:DC
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:30:49:ec:7e:b2:b4:d4:a4:fe:c0:ba:ec:bc:c3:eb:1a:e1:
         76:bd:5b:63:a7:ab:79:46:0b:f5:38:3e:db:9b:e6:23:96:c9:
         25:b9:aa:42:7d:f1:59:46:1a:be:78:78:63:06:e5:37:01:64:
         6e:5b:b2:a5:b4:5c:df:29:29:7b:43:26:6c:e8:88:2c:85:0f:
         e3:38:98:03:43:8a:27:d2:b7:5a:7e:8e:36:bc:b5:d9:6b:03:
         ff:1c:c1:9a:09:38:f6:c0:e9:ac:b5:dc:f9:31:25:90:d9:4d:
         e0:8b:0d:29:9f:e6:e0:80:47:51:cd:15:25:57:ad:55:c3:0b:
         f9:76:5c:4e:20:4f:ab:1a:52:33:bc:93:81:65:e7:59:62:6f:
         72:ef:cf:2b:e1:0b:80:a2:53:de:ea:00:bc:7b:be:c3:75:fe:
         17:d0:38:32:73:87:36:68:b2:17:b0:33:8c:41:a5:3a:3c:de:
         45:dc:2d:c6:f0:57:00:7f:b9:94:1d:e7:45:a4:b1:df:c9:f5:
         e1:57:81:da:08:0f:52:22:ea:f6:8b:40:11:5a:c4:4f:81:85:
         fa:ed:97:1d:fc:a1:78:4d:6e:33:41:c8:4e:da:4c:79:7a:21:
         5b:85:bb:a8:52:f9:0d:fa:85:38:1d:5c:d4:6f:ec:70:4d:40:
         3e:8e:ec:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:26 2026 by rpki-client