Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31312e302f32342d3234203d3e20333938343635.roa
File:                     36352e38372e31312e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          ibPj/rhOAMDA3AswUFtFaz1hHLPgl3z7PYi3oUpqkIo=
Subject key identifier:   24:E8:0B:0C:7F:C8:D5:E6:96:C1:BF:89:DA:A6:1A:3F:F5:AE:45:58
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       77F2A1425349D72C9C3044F76B2AB9C728B5A42F
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31312e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 13 May 2026 06:30:44 +0000
ROA not before:           Wed 13 May 2026 06:25:44 +0000
ROA not after:            Wed 12 May 2027 06:30:44 +0000
asID:                     398465
IP address blocks:        65.87.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:f2:a1:42:53:49:d7:2c:9c:30:44:f7:6b:2a:b9:c7:28:b5:a4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:25:44 2026 GMT
            Not After : May 12 06:30:44 2027 GMT
        Subject: CN=24E80B0C7FC8D5E696C1BF89DAA61A3FF5AE4558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:6f:d4:16:e2:7d:45:7f:93:fe:42:7b:11:
                    01:53:92:39:e0:14:ad:05:be:ea:7f:3a:16:6f:91:
                    63:ff:a7:0c:09:6a:0e:38:bf:18:be:37:2b:9b:2b:
                    67:85:f9:f6:d5:5c:a7:bf:5f:13:a8:f7:29:01:2e:
                    17:92:5c:10:4a:58:ee:fa:e9:61:55:3e:bd:2a:89:
                    05:e9:5a:c8:46:41:89:8e:ed:d2:1e:18:58:e6:ff:
                    f1:a2:43:61:bd:16:b4:05:f0:2a:90:93:03:a9:b7:
                    cc:22:92:25:74:b9:a9:eb:7f:78:24:62:3f:1b:29:
                    51:af:98:b5:d7:55:98:e8:31:35:d7:18:cc:3e:97:
                    7b:60:77:88:c4:e4:72:a0:2c:d0:2e:9a:a2:d2:72:
                    25:93:2b:f5:05:9f:7c:b9:5b:49:ac:e8:4b:64:79:
                    f6:20:53:9d:c6:4c:11:a4:80:1e:35:d2:f9:fc:6d:
                    16:2d:1f:cc:69:e2:50:af:b7:33:aa:ad:cb:31:5c:
                    53:25:86:ef:b4:34:0d:9e:d4:1b:82:94:49:9b:23:
                    b7:88:1f:a1:cd:1f:20:2f:32:d6:fb:3e:fb:c5:93:
                    63:f6:df:b1:1d:41:f7:e7:d5:fc:cb:77:ca:b3:15:
                    3a:ab:75:be:08:d0:72:22:13:d5:b0:85:a8:35:60:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:0B:0C:7F:C8:D5:E6:96:C1:BF:89:DA:A6:1A:3F:F5:AE:45:58
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31312e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:29:73:4e:31:f1:2b:01:53:41:8a:61:0a:1b:a5:68:3d:4d:
         04:b1:45:6e:5b:c9:85:56:f8:74:ee:6d:89:de:13:1f:46:be:
         e1:04:df:13:81:0d:4e:ea:44:4b:f1:d5:c8:0d:70:25:99:8f:
         ad:63:ea:78:47:ac:d7:71:b0:3b:49:b5:58:14:6d:d5:49:ce:
         dd:53:5e:11:d0:9c:69:60:87:69:6e:af:66:a2:bb:33:0e:c4:
         79:7f:b6:aa:8f:e6:2b:36:d8:67:0c:38:07:d8:9c:34:c5:d3:
         4a:9e:1a:80:0d:bf:8e:34:cf:0e:4c:4c:ae:cd:69:12:57:20:
         78:a3:0e:dd:66:cc:0e:51:d2:c7:f2:50:9e:5f:12:aa:db:76:
         3c:4a:ea:6e:77:e4:9a:82:17:67:87:db:4f:25:b9:4d:4e:8e:
         ab:c3:c3:7a:30:81:f3:2d:38:c1:79:44:cb:90:71:cc:f2:74:
         80:fc:68:06:c2:64:01:54:39:56:e6:33:a7:29:72:06:6c:5a:
         77:90:aa:35:97:66:e0:fc:b3:5d:b2:71:e7:11:42:06:13:9c:
         56:0b:a2:50:bc:74:8f:62:67:1d:21:c2:19:fa:19:b9:e0:43:
         2a:18:5d:d3:2c:f3:fb:35:c6:1b:ef:7a:95:f3:32:c5:45:f8:
         ef:b7:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:19:32 2026 by rpki-client