Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139312e302f32342d3234203d3e20323138383632.roa
File:                     36342e35372e3139312e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier:          O2V5ke1FF1lpZr8L58LQpeaYyJs9rcOfhbKD6K5WwLA=
Subject key identifier:   DC:4E:3A:AA:7D:8E:8C:F3:6A:87:8B:C8:C4:6D:FB:53:C5:F8:D7:77
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       2F768EBAB7D1E271AEF8DEF895DCCA5C4757BF6C
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139312e302f32342d3234203d3e20323138383632.roa
Signing time:             Mon 07 Sep 2026 06:21:28 +0000
ROA not before:           Mon 07 Sep 2026 06:16:28 +0000
ROA not after:            Mon 06 Sep 2027 06:21:28 +0000
asID:                     218862
IP address blocks:        64.57.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 19:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:76:8e:ba:b7:d1:e2:71:ae:f8:de:f8:95:dc:ca:5c:47:57:bf:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Sep  7 06:16:28 2026 GMT
            Not After : Sep  6 06:21:28 2027 GMT
        Subject: CN=DC4E3AAA7D8E8CF36A878BC8C46DFB53C5F8D777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4e:73:65:8f:ff:65:7c:6b:df:35:df:d8:25:
                    2c:4a:00:7c:b3:6f:30:17:32:b4:76:1f:88:26:cc:
                    4e:5e:33:54:3c:94:fc:2c:84:d0:11:c9:b0:b5:b9:
                    79:19:63:36:8d:35:42:53:ed:1f:04:1b:ad:bb:8c:
                    c3:9d:36:33:40:49:07:d8:7a:38:44:16:85:e4:4d:
                    d2:e8:eb:a9:c5:66:d8:e7:37:b8:94:85:71:ef:24:
                    c9:14:4d:35:77:a9:ef:a3:94:75:f4:10:8b:af:22:
                    08:0f:3e:f1:91:da:37:19:32:b1:7e:4f:92:93:0a:
                    03:00:38:01:2b:dd:30:3d:28:e0:d2:c8:b7:6b:65:
                    0a:44:dd:f9:63:18:7f:ef:6a:6d:bf:a8:e4:79:f7:
                    85:f9:89:c9:8e:22:02:27:9d:ae:6d:15:9e:25:00:
                    ad:6d:88:14:38:15:40:89:6f:12:87:c1:49:25:44:
                    db:1e:0b:02:e6:fd:5a:48:e5:1f:11:0e:6f:7c:c7:
                    e7:b8:9a:cd:50:94:63:1c:9e:79:96:af:31:61:de:
                    8c:73:16:b0:35:eb:86:c6:66:51:19:04:e8:aa:7e:
                    bd:f1:57:73:3c:e2:53:f7:d1:2f:91:fa:f4:67:b1:
                    35:e8:ed:f8:71:bf:35:89:de:17:69:79:69:c1:36:
                    37:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:4E:3A:AA:7D:8E:8C:F3:6A:87:8B:C8:C4:6D:FB:53:C5:F8:D7:77
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3139312e302f32342d3234203d3e20323138383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:d3:be:b8:2c:d9:87:a3:a3:15:94:fc:3b:eb:21:75:93:95:
         72:f4:a9:1b:e6:c3:7c:cc:f0:11:8e:05:a0:95:89:c4:e2:b6:
         f8:c5:8c:df:ae:e0:09:f1:bb:24:00:5b:d4:a2:98:69:7f:c2:
         fc:fb:41:35:6b:8f:b1:6e:79:61:eb:0b:78:9b:08:b8:0a:73:
         9e:39:d1:a8:e4:4f:a1:32:c9:74:48:df:0c:e4:89:26:75:1c:
         c4:1d:f0:22:54:4b:f5:e8:2f:cb:4c:d7:59:97:8c:4b:e9:19:
         c7:6b:52:d5:bf:59:68:98:e0:1f:62:c2:b8:bf:ae:f3:f8:50:
         53:96:97:b3:43:f9:2a:71:cf:c9:8d:79:5b:54:52:33:7e:fe:
         f6:83:31:c1:43:8d:a5:50:3e:83:53:84:1a:a9:b3:e8:42:d1:
         df:a9:9c:77:4c:78:fa:83:75:83:69:ee:0a:2c:86:84:4a:aa:
         8b:8a:69:04:ec:ac:f3:40:22:3c:3e:aa:0a:4e:c4:67:3e:3c:
         c1:a9:b2:4e:01:68:19:3c:b5:00:9c:83:98:c5:58:db:9d:61:
         d6:37:ab:31:71:eb:19:30:6b:0f:dd:c3:92:d6:05:9a:c5:26:
         4b:70:ab:b5:ba:41:05:06:07:ee:31:30:67:f6:97:10:99:81:
         3d:0c:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:22 2026 by rpki-client