Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e2037303138.roa
File:                     36352e38372e322e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          enLJyQmfR58GISKSweE3j0AgoXFOPxCCgf3yEHNAcF4=
Subject key identifier:   F8:38:52:6D:27:69:58:DB:F7:45:72:57:79:E3:D6:D8:C7:56:C3:3F
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       19BACE1230A365C4BFF64D1E15B42E71605BA0AF
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e2037303138.roa
Signing time:             Wed 13 May 2026 06:28:00 +0000
ROA not before:           Wed 13 May 2026 06:23:00 +0000
ROA not after:            Wed 12 May 2027 06:28:00 +0000
asID:                     7018
IP address blocks:        65.87.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ba:ce:12:30:a3:65:c4:bf:f6:4d:1e:15:b4:2e:71:60:5b:a0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:23:00 2026 GMT
            Not After : May 12 06:28:00 2027 GMT
        Subject: CN=F838526D276958DBF745725779E3D6D8C756C33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f3:ab:8a:59:f1:a0:85:53:21:d8:b7:5c:d1:
                    bb:df:5a:0f:f3:97:32:55:59:ab:a6:a5:04:24:e6:
                    b7:d3:4e:9a:68:d0:4c:fa:13:a5:43:43:0c:6b:fb:
                    46:28:6c:24:32:96:e6:8b:af:ea:65:d5:e8:28:3f:
                    9a:56:33:ff:cb:01:f6:05:6d:3c:95:4a:3c:93:91:
                    af:03:4e:f9:6e:dc:ac:4b:60:fc:76:24:a9:8b:81:
                    36:de:46:81:9b:12:f1:d8:c0:a7:d0:32:52:48:4d:
                    a3:65:04:1e:2d:8c:83:e3:02:27:66:cc:83:dc:d0:
                    87:38:e5:a4:28:02:aa:bd:fe:15:26:05:66:c0:d1:
                    8e:4b:28:eb:b1:5f:b3:49:08:02:94:7e:c5:65:46:
                    11:af:8a:5a:12:30:e3:f6:cf:be:c8:96:38:ce:f9:
                    04:25:c3:fb:d7:9e:3f:8c:28:3f:89:ed:16:5b:9e:
                    65:07:91:d0:96:87:62:38:aa:fb:86:df:22:5a:7d:
                    d3:ba:ce:f1:36:7b:ef:2b:50:e1:af:07:33:e7:49:
                    d6:0d:d7:df:c8:de:e4:23:6c:00:78:ff:38:90:13:
                    86:78:e3:df:d0:18:df:54:e4:ab:03:21:54:3c:67:
                    1f:b8:43:c1:97:94:05:78:09:56:62:58:3b:a9:03:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:38:52:6D:27:69:58:DB:F7:45:72:57:79:E3:D6:D8:C7:56:C3:3F
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e322e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:46:cc:ed:cf:12:6b:d1:cf:07:63:7a:a3:8b:0c:0a:51:1f:
         ea:c8:a8:92:4d:1c:46:23:6c:55:58:ab:14:b7:35:de:aa:b9:
         d8:6a:9e:a3:eb:21:22:2f:75:44:d2:3c:fa:6d:d3:53:fe:ee:
         84:01:14:bc:ab:a2:ee:f2:cd:b4:72:3c:74:1f:e3:25:e1:a0:
         c3:4a:e1:f7:88:75:00:56:f3:09:1f:64:99:01:1f:c9:ed:9e:
         cf:1b:7d:7e:8c:a7:c4:51:ae:da:66:32:5d:d5:1d:52:02:85:
         49:11:49:53:39:01:5e:63:5e:d5:dd:82:6d:59:03:60:a9:e1:
         e9:9a:79:c1:06:72:a3:51:08:0f:a9:13:b6:eb:54:03:e3:8e:
         99:45:c6:65:2b:61:3e:42:0f:d6:e0:1f:07:ef:f7:00:9b:f7:
         63:3e:2f:3d:26:3a:04:2e:47:66:e4:08:52:d8:f6:64:40:4f:
         34:da:51:2d:88:69:af:40:c7:01:1b:c1:17:e2:56:11:14:60:
         d2:98:36:d8:38:27:d4:77:d2:2f:6f:12:0b:bd:87:0d:77:97:
         e5:2a:1f:eb:c2:c7:83:55:91:2a:ce:99:17:78:33:5c:69:d4:
         37:dc:0b:b6:92:d8:25:72:bf:92:a9:01:b4:b6:64:38:2c:db:
         f7:59:f0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:19:05 2026 by rpki-client