Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138382e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3138382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ZSSXRsw1PqvouW2FBhJQxqCsFUVbI00mHIS2E+a7TWA=
Subject key identifier:   02:95:23:B4:AA:44:99:F2:80:19:0C:D0:CA:3B:E0:85:1C:35:56:65
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       3E695C2FE91B44E9995894BB43A5DDCEED8E7E26
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138382e302f32342d3234203d3e20383334.roa
Signing time:             Sun 30 Aug 2026 12:18:29 +0000
ROA not before:           Sun 30 Aug 2026 12:13:29 +0000
ROA not after:            Sun 29 Aug 2027 12:18:29 +0000
asID:                     834
IP address blocks:        64.57.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:69:5c:2f:e9:1b:44:e9:99:58:94:bb:43:a5:dd:ce:ed:8e:7e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 30 12:13:29 2026 GMT
            Not After : Aug 29 12:18:29 2027 GMT
        Subject: CN=029523B4AA4499F280190CD0CA3BE0851C355665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fe:d4:49:93:04:f0:af:cc:43:55:80:e3:eb:
                    95:83:4c:3a:b8:74:8f:8c:43:6b:e7:73:02:33:58:
                    94:11:29:ff:df:e2:04:c6:c2:d2:3e:63:51:f3:07:
                    1d:8a:61:6e:3e:5b:af:11:c5:b6:e6:35:d2:84:47:
                    65:56:df:58:a6:6e:c7:a7:6a:c5:7b:94:37:eb:ba:
                    76:ed:ba:ff:11:e8:37:5c:69:dd:89:d7:26:ae:26:
                    89:e5:1d:a8:1b:76:23:96:9b:b2:6f:ec:57:8e:50:
                    30:f0:ab:2b:f5:6e:5d:58:0b:74:cf:4b:6f:a3:28:
                    cb:84:00:d2:d6:7c:c3:78:4b:cd:8c:5d:d0:bb:97:
                    bd:ea:2b:ea:41:a2:d3:10:19:4c:37:52:c1:ae:1e:
                    18:c5:fa:45:6a:41:54:3f:8d:2f:0a:28:1f:6a:67:
                    80:32:e7:4d:38:d6:44:99:9e:e6:44:46:97:84:00:
                    6e:40:05:4f:c9:ca:c3:cc:7b:b4:b0:62:23:ae:27:
                    5e:c1:7f:32:c1:3f:d3:c0:8e:98:be:29:71:59:1c:
                    26:a9:1b:8c:d4:2b:1f:72:ff:a0:f0:bc:0c:28:b3:
                    b0:87:18:fd:c7:a8:1a:f0:19:aa:11:61:d0:38:c8:
                    c3:a6:94:97:8c:81:39:1f:37:1b:9d:27:15:26:12:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:23:B4:AA:44:99:F2:80:19:0C:D0:CA:3B:E0:85:1C:35:56:65
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:bf:c8:a6:3c:d1:e1:f1:fa:b7:05:be:50:fe:f5:d5:99:
         7e:78:75:97:60:09:3d:5c:3c:de:ff:36:90:56:a3:9c:c6:73:
         7c:97:3a:8d:f7:b2:44:13:87:fa:58:5f:3b:f2:4f:df:82:4d:
         12:15:81:2a:e7:a8:2b:1c:73:69:f7:31:12:72:92:3c:eb:06:
         fa:e9:63:14:25:4a:50:d3:8c:67:02:f0:2b:71:ba:ea:60:ff:
         06:72:fa:33:07:b6:56:4b:48:0d:02:b6:74:48:8e:19:67:77:
         df:33:af:c5:d9:4a:39:de:45:10:7a:17:27:ee:de:f6:c6:c4:
         c1:10:ab:97:cc:c7:86:50:04:a8:2e:89:f0:dc:9e:95:c6:41:
         90:7c:c9:86:a7:19:a7:d7:c8:b9:af:d7:c3:19:37:d5:66:9c:
         94:5a:4a:41:0f:10:26:2b:84:fc:62:35:c9:db:eb:a5:ec:b3:
         25:eb:87:94:2b:58:ff:38:b1:c7:55:87:58:f5:ce:60:17:54:
         16:7c:c6:57:60:c9:88:aa:fe:4e:42:82:7e:8d:7e:66:cc:b2:
         63:f7:7f:68:18:5d:39:a1:51:e8:c6:0f:59:e2:36:ef:1e:2f:
         f5:2d:cf:4d:a7:81:03:73:33:87:53:45:bd:53:31:7d:36:68:
         1b:da:a4:de
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUPmlcL+kbROmZWJS7Q6Xdzu2OfiYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVl
NjZhNzZkOGI3YTY4ZTAwNDIwHhcNMjYwODMwMTIxMzI5WhcNMjcwODI5MTIxODI5
WjAzMTEwLwYDVQQDEygwMjk1MjNCNEFBNDQ5OUYyODAxOTBDRDBDQTNCRTA4NTFD
MzU1NjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f7USZME8K/M
Q1WA4+uVg0w6uHSPjENr53MCM1iUESn/3+IExsLSPmNR8wcdimFuPluvEcW25jXS
hEdlVt9Ypm7Hp2rFe5Q367p27br/Eeg3XGndidcmriaJ5R2oG3Yjlpuyb+xXjlAw
8Ksr9W5dWAt0z0tvoyjLhADS1nzDeEvNjF3Qu5e96ivqQaLTEBlMN1LBrh4YxfpF
akFUP40vCigfameAMudNONZEmZ7mREaXhABuQAVPycrDzHu0sGIjridewX8ywT/T
wI6YvilxWRwmqRuM1Csfcv+g8LwMKLOwhxj9x6ga8BmqEWHQOMjDppSXjIE5Hzcb
nScVJhJ7sQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAKVI7SqRJnygBkM0Mo74IUc
NVZlMB8GA1UdIwQYMBaAFH4sk1t1TACx6AQ7u3EhzDtarSSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2Zjg3OTQ1MzAyLzAv
N0UyQzkzNUI3NTRDMDBCMUU4MDQzQkJCNzEyMUNDM0I1QUFEMjQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcwLWMwNGVkNjk5MGMxMy9lYmQx
ZGM0Mzc4Mjg0NDA5NWJmZmVkZTZkY2I0NDI0ZWU2NmE3NmQ4YjdhNjhlMDA0Mi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2
Zjg3OTQ1MzAyLzAvMzYzNDJlMzUzNzJlMzEzODM4MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDm8MA0GCSqGSIb3DQEBCwUAA4IBAQBK
zr/IpjzR4fH6twW+UP711Zl+eHWXYAk9XDze/zaQVqOcxnN8lzqN97JEE4f6WF87
8k/fgk0SFYEq56grHHNp9zEScpI86wb66WMUJUpQ04xnAvArcbrqYP8GcvozB7ZW
S0gNArZ0SI4ZZ3ffM6/F2Uo53kUQehcn7t72xsTBEKuXzMeGUASoLonw3J6VxkGQ
fMmGpxmn18i5r9fDGTfVZpyUWkpBDxAmK4T8YjXJ2+ul7LMl64eUK1j/OLHHVYdY
9c5gF1QWfMZXYMmIqv5OQoJ+jX5mzLJj939oGF05oVHoxg9Z4jbvHi/1Lc9Np4ED
czOHU0W9UzF9Nmgb2qTe
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:26 2026 by rpki-client