Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31332e302f32342d3234203d3e203436343838.roa
File:                     36352e38372e31332e302f32342d3234203d3e203436343838.roa (raw, json)
Hash identifier:          w+hUhX45Pums9jiz/tBN0acsUNmaASBaXRH9BOJJR/k=
Subject key identifier:   C2:9D:75:B5:AB:27:CE:15:2C:0F:CC:2B:22:36:3C:82:29:79:87:33
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       5290A06C9DF3B49598F1F1932C466EC5C26C1F8A
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31332e302f32342d3234203d3e203436343838.roa
Signing time:             Wed 13 May 2026 06:26:34 +0000
ROA not before:           Wed 13 May 2026 06:21:34 +0000
ROA not after:            Wed 12 May 2027 06:26:34 +0000
asID:                     46488
IP address blocks:        65.87.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:90:a0:6c:9d:f3:b4:95:98:f1:f1:93:2c:46:6e:c5:c2:6c:1f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:21:34 2026 GMT
            Not After : May 12 06:26:34 2027 GMT
        Subject: CN=C29D75B5AB27CE152C0FCC2B22363C8229798733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:65:83:47:71:d6:98:ac:68:c9:21:28:d4:
                    0f:b5:25:59:34:07:3b:39:96:ca:ae:82:2c:e9:4d:
                    82:09:1c:b9:4b:e1:dc:f5:12:62:fd:8a:9c:f9:15:
                    46:f7:81:03:6f:b8:4d:6b:50:a5:35:25:a9:b9:7e:
                    d5:f1:2f:1a:54:24:97:8c:81:0d:ea:62:de:d0:fa:
                    db:f8:2b:ee:2c:5e:f0:a0:5c:9c:27:ce:9d:8b:9c:
                    e0:db:b8:34:43:a6:f8:a6:b8:6c:1a:b6:20:ed:a1:
                    ca:71:9a:90:db:51:3d:7a:f0:81:a5:09:70:18:de:
                    0f:7e:8e:85:c8:2d:70:d6:ae:3c:c0:23:5d:4c:a7:
                    fa:0a:44:3e:be:fa:d9:b3:ed:b1:f5:ed:0e:96:56:
                    9b:9b:0c:29:73:b9:47:17:cf:1e:72:20:b1:a5:a1:
                    2b:08:6b:f6:5c:a0:54:42:ec:3b:2f:a5:32:25:44:
                    6a:1b:c8:e1:f6:b4:df:c7:22:10:0d:00:b6:c0:6f:
                    3a:5f:34:09:14:52:a8:88:9e:1d:9a:cf:a3:df:8a:
                    5f:25:ac:da:00:3a:e5:e6:da:08:e1:a0:a0:0c:ae:
                    dc:65:d0:cb:f3:89:c3:a5:59:96:f6:29:cf:3c:cb:
                    97:79:e6:28:a0:59:51:00:07:bc:e7:af:bf:20:9d:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9D:75:B5:AB:27:CE:15:2C:0F:CC:2B:22:36:3C:82:29:79:87:33
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31332e302f32342d3234203d3e203436343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:51:d8:d9:6a:80:a6:bb:69:f5:05:27:93:2d:12:d2:06:
         6a:67:4a:d4:90:60:28:96:2b:b9:dc:6c:d0:de:e1:11:b7:bc:
         30:60:f3:2a:30:bd:92:ae:8f:08:75:30:06:41:15:0b:4b:74:
         68:b2:26:32:f1:19:ec:87:c7:07:e9:07:e9:71:3b:70:fb:9d:
         83:b6:2a:54:94:22:16:3e:24:9e:55:85:be:1c:b6:d6:a7:33:
         64:50:3a:9e:39:3c:c1:72:4c:6d:04:8a:dd:2d:16:16:01:60:
         77:0d:7b:f8:fe:5d:4d:89:2a:8f:97:e7:90:af:eb:11:34:e3:
         62:19:a1:ca:98:53:e8:eb:b8:83:56:0b:c7:62:ad:2c:c6:ad:
         9e:e3:65:e4:f9:f0:f7:54:0c:92:33:c4:7f:be:d8:90:be:4c:
         4c:07:f4:96:21:34:4d:6d:97:e9:83:77:97:86:8b:12:62:6b:
         7b:1c:6b:94:15:33:ab:c3:af:e4:09:e3:a2:bc:b8:89:7c:d4:
         ca:4f:f0:ca:d0:b5:df:1d:f9:19:3e:a9:ec:4e:61:a9:da:1a:
         35:3c:6f:eb:30:89:08:b1:d3:52:bb:0d:de:43:fa:ac:bf:d1:
         38:99:0a:e5:ad:85:8c:53:ae:9a:dd:a5:9f:07:19:c8:49:82:
         53:97:23:c5
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUUpCgbJ3ztJWY8fGTLEZuxcJsH4owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTVjNGM2NTViMmM2OTlmMTcwYzcyYTkyOTUzNDVmMGJh
ODYyY2U4NTMwMjU0YzNjZTMwHhcNMjYwNTEzMDYyMTM0WhcNMjcwNTEyMDYyNjM0
WjAzMTEwLwYDVQQDEyhDMjlENzVCNUFCMjdDRTE1MkMwRkNDMkIyMjM2M0M4MjI5
Nzk4NzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqplg0dx1pis
aMkhKNQPtSVZNAc7OZbKroIs6U2CCRy5S+Hc9RJi/Yqc+RVG94EDb7hNa1ClNSWp
uX7V8S8aVCSXjIEN6mLe0Prb+CvuLF7woFycJ86di5zg27g0Q6b4prhsGrYg7aHK
cZqQ21E9evCBpQlwGN4Pfo6FyC1w1q48wCNdTKf6CkQ+vvrZs+2x9e0Ollabmwwp
c7lHF88eciCxpaErCGv2XKBUQuw7L6UyJURqG8jh9rTfxyIQDQC2wG86XzQJFFKo
iJ4dms+j34pfJazaADrl5toI4aCgDK7cZdDL84nDpVmW9inPPMuXeeYooFlRAAe8
56+/IJ253wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMKddbWrJ84VLA/MKyI2PIIp
eYczMB8GA1UdIwQYMBaAFAdL6FDbEF8/TqivGMsSkkes+bhpMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcyODYxMmMwYjE2LzAv
MDc0QkU4NTBEQjEwNUYzRjRFQThBRjE4Q0IxMjkyNDdBQ0Y5Qjg2OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzU2ODZhZmFjLTgwYjYtNDRlMy05OGIyLTczZmI2Y2QyYjE0Yi9lNWM0
YzY1NWIyYzY5OWYxNzBjNzJhOTI5NTM0NWYwYmE4NjJjZTg1MzAyNTRjM2NlMy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcy
ODYxMmMwYjE2LzAvMzYzNTJlMzgzNzJlMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDM0MzYzNDM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABBVw0wDQYJKoZIhvcNAQELBQADggEB
AAScUdjZaoCmu2n1BSeTLRLSBmpnStSQYCiWK7ncbNDe4RG3vDBg8yowvZKujwh1
MAZBFQtLdGiyJjLxGeyHxwfpB+lxO3D7nYO2KlSUIhY+JJ5Vhb4cttanM2RQOp45
PMFyTG0Eit0tFhYBYHcNe/j+XU2JKo+X55Cv6xE042IZocqYU+jruINWC8dirSzG
rZ7jZeT58PdUDJIzxH++2JC+TEwH9JYhNE1tl+mDd5eGixJia3sca5QVM6vDr+QJ
46K8uIl81MpP8MrQtd8d+Rk+qexOYanaGjU8b+swiQix01K7Dd5D+qy/0TiZCuWt
hYxTrprdpZ8HGchJglOXI8U=
-----END CERTIFICATE-----
Generated at Sat May 16 04:19:39 2026 by rpki-client