Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e2032393134.roa
File:                     36352e38372e322e302f32332d3234203d3e2032393134.roa (raw, json)
Hash identifier:          n5YMwVwBAqvGrUtPDy7oqjLy1ga4IsyUs/tvkJ9wB4c=
Subject key identifier:   7F:AA:CE:8F:2B:6C:07:0E:24:8F:3C:DB:5A:80:91:A1:59:CD:15:E2
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       69E593EAE978CCFC710B58790E8E1C8A6A265FED
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e2032393134.roa
Signing time:             Wed 13 May 2026 06:28:11 +0000
ROA not before:           Wed 13 May 2026 06:23:11 +0000
ROA not after:            Wed 12 May 2027 06:28:11 +0000
asID:                     2914
IP address blocks:        65.87.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e5:93:ea:e9:78:cc:fc:71:0b:58:79:0e:8e:1c:8a:6a:26:5f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:23:11 2026 GMT
            Not After : May 12 06:28:11 2027 GMT
        Subject: CN=7FAACE8F2B6C070E248F3CDB5A8091A159CD15E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e2:2d:54:67:52:4d:13:29:40:4c:e3:d5:61:
                    95:50:0c:10:26:c3:cb:77:0c:f5:72:22:5e:e1:fc:
                    1d:ab:a0:52:3f:50:63:d2:9b:da:cf:b6:70:0a:7e:
                    1e:19:ac:9d:19:43:6c:de:bf:d6:73:5b:9c:85:2b:
                    d9:f1:7d:36:b3:a1:5e:48:a9:86:27:eb:b6:d0:06:
                    e1:b4:92:65:6b:43:f0:99:7d:97:d9:80:fa:cf:5e:
                    20:74:25:45:f7:2f:1c:b0:c0:7a:ec:7e:58:f5:27:
                    37:a3:d6:cb:f1:70:9a:66:4f:a6:7a:8d:87:56:47:
                    a2:ce:a2:dd:1f:0a:60:35:0d:85:9d:0f:19:ba:78:
                    08:f9:1b:60:b1:c9:49:20:86:e2:42:11:39:13:b1:
                    25:81:4e:5e:c3:ac:64:58:41:3d:3b:86:b9:92:f0:
                    f8:66:ef:11:60:82:35:40:45:33:ef:57:6f:ce:97:
                    0e:f8:03:17:92:13:e0:88:b2:a1:8a:d4:99:de:f2:
                    3e:d6:07:c4:b7:20:d4:59:17:fe:1b:f8:c1:f7:7e:
                    2b:8f:81:b2:ef:53:46:30:9a:60:d0:71:a5:67:65:
                    8c:13:f4:39:11:25:48:0b:5e:b1:ab:2e:fe:d2:1e:
                    3d:85:b5:5a:4d:60:09:59:36:54:c5:4b:0e:a6:1a:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AA:CE:8F:2B:6C:07:0E:24:8F:3C:DB:5A:80:91:A1:59:CD:15:E2
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:15:de:db:c9:fd:cd:29:91:2b:ec:f7:41:89:aa:b2:ff:79:
         a8:2d:43:33:69:e2:2d:35:ac:dd:6c:10:af:ac:d5:d8:83:3d:
         75:eb:b5:44:af:f3:a0:46:e9:92:7d:e3:b3:14:c8:28:ef:5d:
         0c:47:a9:11:6f:b1:b1:72:99:30:b1:19:58:03:8d:e7:89:50:
         97:65:a3:ef:a2:d2:3b:b4:8d:c2:cb:02:cc:81:ec:2f:f2:8c:
         31:25:04:af:78:7d:e9:25:8e:75:18:b6:63:b6:c9:f9:ff:38:
         8f:e2:ab:74:68:fb:2c:a3:dd:83:20:33:e1:d2:e2:c6:8f:f6:
         5c:e7:00:c0:47:a9:a3:50:02:12:4a:a9:40:38:aa:f6:97:3d:
         81:4d:f4:2d:56:fc:58:d8:59:83:01:5c:bd:31:c7:1e:a7:20:
         82:dd:67:c3:d7:dc:84:a5:9f:06:53:44:95:fd:99:88:70:ea:
         93:fe:2a:b1:7b:e8:69:31:13:5b:2c:35:a8:3f:83:45:ee:52:
         f2:17:86:66:09:6c:27:53:c0:c0:41:31:ab:29:3d:29:f0:c7:
         b3:82:df:53:a1:20:0f:dc:70:73:bc:ca:af:ab:7b:fd:2d:9d:
         1b:10:5d:e1:1f:79:d1:b6:d3:2f:e8:2b:b7:36:b0:b8:9e:de:
         d2:a9:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:18:42 2026 by rpki-client