Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31362e302f32312d3234203d3e203534303034.roa
File:                     36352e38372e31362e302f32312d3234203d3e203534303034.roa (raw, json)
Hash identifier:          Y8Hpp3JagjEZ591lrreEBlHe8JSimbARLUCa0RUOiCY=
Subject key identifier:   24:9A:88:C3:DA:E9:3E:5B:B1:C0:2C:69:C9:D6:C6:33:5C:7E:3E:9D
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       6CA7781A2A7467E8CD09C5D3ED88625ED5350105
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31362e302f32312d3234203d3e203534303034.roa
Signing time:             Wed 13 May 2026 06:31:46 +0000
ROA not before:           Wed 13 May 2026 06:26:46 +0000
ROA not after:            Wed 12 May 2027 06:31:46 +0000
asID:                     54004
IP address blocks:        65.87.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a7:78:1a:2a:74:67:e8:cd:09:c5:d3:ed:88:62:5e:d5:35:01:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:26:46 2026 GMT
            Not After : May 12 06:31:46 2027 GMT
        Subject: CN=249A88C3DAE93E5BB1C02C69C9D6C6335C7E3E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:2e:a8:4e:61:ba:7e:83:3f:b8:9e:d3:c5:
                    de:f1:b2:6d:f5:9b:cf:44:0c:40:44:21:ff:34:b3:
                    35:84:71:ef:ef:a6:d0:af:72:b2:9e:9a:9b:61:4d:
                    9d:0c:b2:a8:23:f9:3d:71:36:80:ea:b4:e3:2c:5e:
                    e9:a5:90:29:56:b5:81:c3:7a:67:d5:c9:b6:ac:13:
                    d5:e4:0e:95:2c:ab:80:2d:39:1e:ad:75:cf:22:64:
                    d9:e6:fa:d1:25:80:d8:b8:dd:57:7c:fe:89:09:2a:
                    21:e8:65:80:3f:d2:6e:36:ee:e7:82:c2:dc:a7:be:
                    5e:a5:dd:bb:94:ec:8e:37:f9:59:e2:91:39:14:cb:
                    55:53:54:da:b8:ba:b3:cb:48:3f:e4:10:3f:93:ab:
                    31:77:3f:ca:d1:e8:ac:51:be:ff:c3:bb:32:aa:75:
                    60:e9:79:7f:a8:e1:09:08:c1:d0:26:aa:90:74:92:
                    12:81:f6:09:e3:23:21:67:95:30:a4:0e:49:59:df:
                    95:bc:72:d8:20:4f:1d:5c:8d:3e:bc:5e:db:3a:ec:
                    9d:72:02:c7:d1:57:7a:13:32:0a:26:db:ad:86:70:
                    2a:5f:d2:7b:08:67:9e:d4:00:e6:45:d1:c8:df:10:
                    a1:29:36:24:55:03:ae:c5:ea:d0:db:18:56:b2:8b:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9A:88:C3:DA:E9:3E:5B:B1:C0:2C:69:C9:D6:C6:33:5C:7E:3E:9D
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e31362e302f32312d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:b3:0e:ae:c9:f1:1e:98:93:6b:2b:a5:bd:56:25:9d:50:ec:
         b2:a2:a1:78:e7:0b:03:dc:9b:4c:0f:f5:d7:ec:ba:46:d9:79:
         ff:59:22:d6:5f:f8:0b:ef:ce:64:ef:8f:93:7e:77:e0:87:49:
         83:2c:c2:1e:33:36:25:fe:a8:af:42:90:82:63:a6:e0:9a:26:
         f9:15:bb:a8:5f:2b:2b:14:d8:4e:5c:a0:0a:1e:44:ca:b2:76:
         91:94:cd:9e:87:86:e5:11:03:48:8e:75:42:e5:c8:6d:eb:8d:
         9a:60:6c:68:4d:ed:38:86:6d:0e:62:56:eb:6f:f4:81:ed:83:
         d0:0e:9d:02:93:e5:4a:b9:50:0b:0f:9c:63:ff:93:d8:45:6f:
         0d:2e:e2:77:c5:16:e6:4c:4d:a7:d3:f5:2b:12:75:de:05:23:
         ec:ab:a6:06:13:9e:fb:a9:b3:d8:6a:fb:c4:35:8e:73:80:ba:
         82:11:be:71:93:7d:fe:a9:36:fb:df:f3:26:18:e8:0f:2b:87:
         c8:7d:94:e0:00:cf:40:c9:af:be:88:b0:8c:bc:7b:69:6e:40:
         e8:26:62:30:42:e6:60:97:83:30:01:69:bc:cb:b0:54:b5:0f:
         a6:02:72:9d:ba:c8:b8:a5:3c:0f:9d:2a:cd:9b:96:1f:30:6c:
         35:b1:26:cc
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUbKd4Gip0Z+jNCcXT7YhiXtU1AQUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTVjNGM2NTViMmM2OTlmMTcwYzcyYTkyOTUzNDVmMGJh
ODYyY2U4NTMwMjU0YzNjZTMwHhcNMjYwNTEzMDYyNjQ2WhcNMjcwNTEyMDYzMTQ2
WjAzMTEwLwYDVQQDEygyNDlBODhDM0RBRTkzRTVCQjFDMDJDNjlDOUQ2QzYzMzVD
N0UzRTlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx4uqE5hun6D
P7ie08Xe8bJt9ZvPRAxARCH/NLM1hHHv76bQr3KynpqbYU2dDLKoI/k9cTaA6rTj
LF7ppZApVrWBw3pn1cm2rBPV5A6VLKuALTkerXXPImTZ5vrRJYDYuN1XfP6JCSoh
6GWAP9JuNu7ngsLcp75epd27lOyON/lZ4pE5FMtVU1TauLqzy0g/5BA/k6sxdz/K
0eisUb7/w7syqnVg6Xl/qOEJCMHQJqqQdJISgfYJ4yMhZ5UwpA5JWd+VvHLYIE8d
XI0+vF7bOuydcgLH0Vd6EzIKJtuthnAqX9J7CGee1ADmRdHI3xChKTYkVQOuxerQ
2xhWsov5ewIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCSaiMPa6T5bscAsacnWxjNc
fj6dMB8GA1UdIwQYMBaAFAdL6FDbEF8/TqivGMsSkkes+bhpMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcyODYxMmMwYjE2LzAv
MDc0QkU4NTBEQjEwNUYzRjRFQThBRjE4Q0IxMjkyNDdBQ0Y5Qjg2OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzU2ODZhZmFjLTgwYjYtNDRlMy05OGIyLTczZmI2Y2QyYjE0Yi9lNWM0
YzY1NWIyYzY5OWYxNzBjNzJhOTI5NTM0NWYwYmE4NjJjZTg1MzAyNTRjM2NlMy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcy
ODYxMmMwYjE2LzAvMzYzNTJlMzgzNzJlMzEzNjJlMzAyZjMyMzEyZDMyMzQyMDNk
M2UyMDM1MzQzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANBVxAwDQYJKoZIhvcNAQELBQADggEB
AJqzDq7J8R6Yk2srpb1WJZ1Q7LKioXjnCwPcm0wP9dfsukbZef9ZItZf+AvvzmTv
j5N+d+CHSYMswh4zNiX+qK9CkIJjpuCaJvkVu6hfKysU2E5coAoeRMqydpGUzZ6H
huURA0iOdULlyG3rjZpgbGhN7TiGbQ5iVutv9IHtg9AOnQKT5Uq5UAsPnGP/k9hF
bw0u4nfFFuZMTafT9SsSdd4FI+yrpgYTnvups9hq+8Q1jnOAuoIRvnGTff6pNvvf
8yYY6A8rh8h9lOAAz0DJr76IsIy8e2luQOgmYjBC5mCXgzABabzLsFS1D6YCcp26
yLilPA+dKs2blh8wbDWxJsw=
-----END CERTIFICATE-----
Generated at Sat May 16 04:19:38 2026 by rpki-client