Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e20313734.roa
File:                     36352e38372e322e302f32332d3234203d3e20313734.roa (raw, json)
Hash identifier:          v2hbD6LO1eU3moFCb4QEUmAtO+Exbn/yREEG39i9e/4=
Subject key identifier:   85:E4:66:79:15:F7:7A:4C:D9:31:55:8D:66:AA:0F:3F:1D:94:E8:86
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       3457DF188E3EE10AA4F4D5F28474B979B6F8A2C0
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e20313734.roa
Signing time:             Wed 13 May 2026 06:27:45 +0000
ROA not before:           Wed 13 May 2026 06:22:45 +0000
ROA not after:            Wed 12 May 2027 06:27:45 +0000
asID:                     174
IP address blocks:        65.87.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:57:df:18:8e:3e:e1:0a:a4:f4:d5:f2:84:74:b9:79:b6:f8:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:22:45 2026 GMT
            Not After : May 12 06:27:45 2027 GMT
        Subject: CN=85E4667915F77A4CD931558D66AA0F3F1D94E886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:14:9f:b2:d8:46:64:f2:92:9b:e8:5e:b5:fd:
                    59:bb:20:f9:b2:fb:5f:94:b2:a6:5e:17:1d:dc:a2:
                    1a:30:a7:a1:f1:cf:a9:8b:30:fa:54:be:17:1b:83:
                    85:bb:14:ba:9b:7c:3c:84:ec:59:54:72:cd:32:45:
                    70:f2:71:df:d0:33:fc:c8:4e:a7:4e:9a:6e:e9:3f:
                    e8:ce:90:a2:f4:ac:65:18:93:60:63:12:22:a8:d1:
                    bd:14:6d:ac:9c:f1:cb:18:fb:09:99:3a:12:d0:f5:
                    7b:86:a2:55:a8:ef:18:97:c4:40:75:dd:83:e7:41:
                    b9:25:4c:b4:dc:29:d5:a1:eb:f9:b6:d5:27:12:71:
                    eb:36:63:e7:1a:c9:52:c0:e9:bf:fd:87:ee:19:14:
                    8b:e5:6a:6d:2d:81:28:f0:1c:05:cf:75:d5:b9:20:
                    8c:e8:7c:0e:0f:08:3d:6f:59:65:ad:1a:52:79:c1:
                    00:cd:50:a2:1c:e3:e6:5b:99:85:72:43:5a:5f:f2:
                    39:06:6f:4a:61:e5:e6:bb:20:64:af:14:97:dc:47:
                    d7:82:f8:b2:4f:e9:92:f1:f8:93:21:7e:81:67:27:
                    14:bd:ae:5c:c5:b5:64:60:0a:08:de:c2:8f:e4:31:
                    28:9b:66:c1:d2:57:a5:f7:ca:89:ef:70:b8:95:22:
                    5e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E4:66:79:15:F7:7A:4C:D9:31:55:8D:66:AA:0F:3F:1D:94:E8:86
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:9a:de:4c:0e:79:4b:cc:38:f7:12:cb:9d:54:5a:23:14:
         0a:f8:ea:04:b8:f3:a6:3e:7f:0e:46:c7:2f:92:e0:31:a2:fb:
         da:3c:4a:85:ee:ac:12:56:8c:d7:43:cc:c0:b3:cc:df:93:7d:
         d8:33:4b:36:49:3c:2c:d3:98:bc:e6:eb:7f:e5:39:b4:c8:30:
         38:12:28:4a:c2:d4:88:0b:c6:16:ce:ca:ba:c1:dd:4a:78:f5:
         3a:cc:8c:69:29:bf:e6:c8:7c:8f:6c:6b:8d:ee:4a:1b:88:d0:
         d6:35:d4:09:c9:26:5e:b2:79:5e:30:fa:f8:b9:45:ba:ea:74:
         da:b6:9b:66:71:a4:49:38:d9:ea:fc:d1:44:8b:e1:d1:42:48:
         29:0e:df:02:2c:70:00:03:3f:80:fd:71:19:28:44:ee:f2:06:
         af:fd:67:ea:80:90:bf:ae:30:61:f9:3a:77:cf:b6:1b:64:01:
         3e:fb:a3:e1:96:7a:da:a2:c4:a9:77:83:fc:d3:63:0f:21:25:
         d8:2b:b1:01:fa:a1:43:e0:c6:41:14:aa:7d:1c:ec:01:86:92:
         2e:d5:b0:bd:a5:2b:14:0f:a0:71:c6:bc:09:6f:90:98:ca:46:
         15:33:cb:12:f8:27:08:35:32:87:c5:12:96:0a:e5:4f:27:09:
         e7:53:b0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 03:21:28 2026 by rpki-client