Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31312e302f32342d3234203d3e2037303239.roa
File:                     36352e38372e31312e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          sfRTo4jTuhn0NlFGxByHN+wOJUa1XgzpTBc1+x5hDTQ=
Subject key identifier:   FC:7B:CD:DB:02:17:D4:78:95:B8:89:0A:55:C2:8F:A8:30:12:03:5C
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       796684DC10D71D89DFC391F0455B3C33B4BBADDD
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31312e302f32342d3234203d3e2037303239.roa
Signing time:             Wed 13 May 2026 06:26:35 +0000
ROA not before:           Wed 13 May 2026 06:21:35 +0000
ROA not after:            Wed 12 May 2027 06:26:35 +0000
asID:                     7029
IP address blocks:        65.87.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:66:84:dc:10:d7:1d:89:df:c3:91:f0:45:5b:3c:33:b4:bb:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:21:35 2026 GMT
            Not After : May 12 06:26:35 2027 GMT
        Subject: CN=FC7BCDDB0217D47895B8890A55C28FA83012035C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:75:b2:f7:83:74:4b:d9:4f:61:f8:21:63:
                    02:41:50:8e:6b:0c:41:96:3b:34:c1:ca:42:73:f0:
                    93:3a:70:f9:1d:da:65:d3:92:a1:a4:64:91:c8:db:
                    cc:49:6e:13:7c:97:b8:5f:2a:df:f3:35:7a:41:6c:
                    69:ee:94:c3:c1:04:d3:ed:e2:07:35:ca:0f:07:44:
                    e2:9c:b3:83:65:3e:6e:e9:eb:0c:7c:6e:43:b1:74:
                    9e:ab:ac:4f:7a:38:c0:ff:8b:f0:85:d4:18:81:ad:
                    18:98:61:78:cd:75:8c:e7:e0:e0:1d:42:a9:89:49:
                    eb:f9:4c:70:e7:b5:18:a7:bf:fd:fb:0e:93:8c:ae:
                    7a:59:de:b3:36:68:d1:c9:7d:4a:0f:69:5b:b8:9a:
                    70:f9:bf:ff:b1:9f:6b:be:8e:cf:e1:f2:78:5b:15:
                    9b:5b:d4:a9:03:9b:62:e3:46:48:59:1b:cc:37:f3:
                    e0:d1:0e:44:7e:12:db:f8:20:d4:8e:46:a4:0e:f8:
                    95:e3:3d:b6:c1:96:69:27:d7:cf:7a:ad:e8:c3:9e:
                    e2:f1:4a:25:84:c3:cd:2f:f7:28:2e:fd:96:0b:d6:
                    a3:9e:65:96:da:8d:4e:08:4b:86:d9:5b:da:ba:93:
                    7c:58:d4:66:4f:00:20:18:89:62:6b:78:8b:21:ee:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7B:CD:DB:02:17:D4:78:95:B8:89:0A:55:C2:8F:A8:30:12:03:5C
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31312e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:17:19:ca:87:75:01:d3:78:4f:e6:fc:61:a2:c5:e4:80:85:
         06:77:b4:79:2d:de:99:50:40:46:b5:20:3a:46:a9:35:4a:b3:
         67:90:0b:d1:55:13:0d:09:db:97:c7:0e:c6:1f:29:9e:99:84:
         bc:fd:f4:6a:d7:56:0b:f7:9d:d5:83:8a:ea:d4:62:b2:e0:20:
         54:bb:2a:2a:60:48:e1:b9:c7:f1:32:63:a3:a1:6d:f7:53:41:
         c0:7f:25:9a:01:46:ff:f0:9d:a8:b6:d9:51:5b:5d:bf:8e:b8:
         ed:ed:dd:a0:9c:1d:be:ec:c6:a2:7b:ac:80:0d:1e:c4:fe:48:
         ce:41:12:dc:a6:4f:4b:e6:31:b7:39:5b:59:bd:28:b8:10:52:
         34:53:48:ef:62:76:13:f2:93:4f:18:eb:34:78:3f:47:a3:73:
         d1:68:ea:bd:62:25:64:cc:d0:e6:a1:23:07:87:a5:3e:c5:fd:
         cf:a1:2c:af:86:bf:9c:ef:49:a9:c7:d9:5c:ac:9b:bf:0a:77:
         09:84:d0:c0:9f:d9:3e:77:7e:76:6b:7c:9d:89:e4:11:08:dc:
         0e:2f:e6:41:ca:06:5c:e0:42:23:55:e9:9c:d7:6d:c7:9b:a5:
         6b:d5:67:75:5d:e3:0f:61:50:27:04:8e:9c:91:84:00:48:0b:
         6e:e5:ea:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:18:50 2026 by rpki-client