Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139302e302f32332d3234203d3e20383334.roa
File:                     36342e35372e3139302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          jY7yGJIC987PYCaoE15YvPWrXCotC8fUw5pY31NdLXw=
Subject key identifier:   56:A6:A3:52:73:97:0D:3E:F9:77:CF:15:0E:C5:7F:A0:4A:62:3F:CC
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       23A4ADDA6B10F30F8E4BEA7A73E847A26445348D
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139302e302f32332d3234203d3e20383334.roa
Signing time:             Sat 07 Nov 2026 00:02:55 +0000
ROA not before:           Fri 06 Nov 2026 23:57:55 +0000
ROA not after:            Sat 06 Nov 2027 00:02:55 +0000
asID:                     834
IP address blocks:        64.57.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 14:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a4:ad:da:6b:10:f3:0f:8e:4b:ea:7a:73:e8:47:a2:64:45:34:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Nov  6 23:57:55 2026 GMT
            Not After : Nov  6 00:02:55 2027 GMT
        Subject: CN=56A6A35273970D3EF977CF150EC57FA04A623FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:70:5f:dd:12:67:f0:ca:2f:d9:35:69:7b:
                    51:2f:6a:aa:7b:ea:52:18:94:d0:90:6c:5c:49:c9:
                    fb:ab:29:50:9d:df:8e:5b:37:c5:e8:1c:7a:e9:a8:
                    1b:77:0d:64:f4:30:d2:56:2d:f9:73:45:35:e7:79:
                    2c:4f:c4:7c:17:39:9f:75:b0:db:67:55:f6:88:a3:
                    05:bb:f9:50:83:7f:81:f3:c7:ac:11:a5:cb:fb:c5:
                    d1:f3:80:b8:aa:49:7c:c7:ef:c5:4b:4d:31:99:57:
                    ef:9a:f5:00:56:a2:9f:6f:24:e4:1d:d5:d5:83:78:
                    1c:a8:29:f5:16:59:06:16:dc:f8:82:14:6c:a1:0b:
                    10:41:a7:6c:a9:96:58:66:08:cd:4b:11:e1:9b:2d:
                    2d:9e:59:c6:27:23:94:f1:2b:ae:40:52:96:fc:b0:
                    ae:60:27:44:bd:72:57:a8:88:1f:6d:9f:91:e1:dd:
                    e1:65:f4:dd:43:4d:f0:ca:91:65:64:bd:93:fa:c2:
                    a8:33:94:17:f3:cb:e9:56:3f:a7:b5:48:64:51:83:
                    6b:c9:d4:44:24:e3:de:89:74:5c:11:53:d4:22:80:
                    65:7a:38:a6:cc:08:b4:c0:77:da:1c:a3:b4:78:4d:
                    06:06:0c:04:e1:c1:30:cd:65:10:6e:e4:32:f1:fb:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A6:A3:52:73:97:0D:3E:F9:77:CF:15:0E:C5:7F:A0:4A:62:3F:CC
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:9b:77:69:b3:d9:93:5e:f4:15:80:b3:b0:69:da:1b:77:
         e7:93:c2:4b:96:f2:02:ed:95:b9:91:97:84:d7:b0:40:ba:9a:
         79:d1:41:36:59:37:e1:a7:73:96:60:bf:ff:25:50:a7:39:53:
         83:3b:0f:9a:c5:80:82:c3:27:b2:1f:65:d0:26:48:58:5b:95:
         90:a1:67:2f:2e:91:d3:ea:b0:5d:68:4f:0b:05:a4:54:6f:fd:
         28:bb:a7:80:69:6b:23:78:79:02:2e:d8:c9:16:71:7b:1a:8e:
         33:b6:1f:d0:75:58:00:aa:41:61:b2:c2:9b:c5:5e:0d:96:9b:
         29:9c:f2:7d:e1:a2:28:32:d4:2b:52:a3:19:79:b8:b0:4e:e4:
         b0:3a:f9:25:1e:00:aa:26:c2:f7:fd:ff:dd:df:f0:15:a9:42:
         31:17:3b:7b:80:05:8e:4a:46:38:aa:1f:84:eb:07:f9:08:c7:
         fe:d0:70:b6:15:02:f2:a1:8a:48:a0:b6:a5:f3:05:34:d9:ff:
         56:f2:c8:1c:5d:78:47:63:f0:74:e5:cf:86:d2:45:d7:d5:ff:
         77:4f:ca:77:9e:cf:f0:3d:a7:c7:b6:f2:25:0b:c3:2f:56:3d:
         9c:84:c3:46:b1:b5:19:56:99:ab:05:55:52:b7:b4:88:b7:a5:
         43:1b:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:50:22 2026 by rpki-client