Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e203230343733.roa
File:                     36352e38372e32372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          fgiUHUiha3snrkErNMX7G+KpBWOwJnUsM0CFGhigX1w=
Subject key identifier:   41:52:86:3F:D3:AF:AA:0D:0A:02:E7:66:41:B9:88:67:FE:EF:A1:E6
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       4ED2DA22E7DE167B59232006C277AB4E3DE42853
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 03 Jun 2026 08:44:51 +0000
ROA not before:           Wed 03 Jun 2026 08:39:51 +0000
ROA not after:            Wed 02 Jun 2027 08:44:51 +0000
asID:                     20473
IP address blocks:        65.87.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 02:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d2:da:22:e7:de:16:7b:59:23:20:06:c2:77:ab:4e:3d:e4:28:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: Jun  3 08:39:51 2026 GMT
            Not After : Jun  2 08:44:51 2027 GMT
        Subject: CN=4152863FD3AFAA0D0A02E76641B98867FEEFA1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:55:c8:98:cd:86:e0:a4:96:b4:c1:c1:3c:
                    f0:1a:f8:6b:e5:50:3a:a1:0c:c7:9b:bc:40:dd:1f:
                    12:a8:d0:d9:23:98:74:53:8c:5c:f4:bd:52:e5:5e:
                    e8:99:6b:e4:a6:e8:73:42:87:a5:98:05:85:81:6e:
                    01:b4:42:b0:bc:a5:35:f9:de:52:cb:5b:69:5c:3f:
                    15:c5:5a:db:ce:33:61:68:05:2c:96:df:f2:09:cf:
                    49:b6:2c:83:4e:25:ea:f1:91:14:e8:a1:63:bb:52:
                    88:a4:75:14:c3:be:79:05:b2:ea:53:fe:b6:4c:0d:
                    50:5f:e4:8b:9c:48:4b:68:13:aa:de:d7:63:53:31:
                    8b:d2:b6:a4:e2:3d:af:9b:0a:61:8f:7f:d3:22:f6:
                    34:78:22:a4:38:e7:80:29:74:42:62:af:ee:95:23:
                    b2:98:3e:19:48:ad:bd:dc:01:72:53:b9:38:9d:76:
                    bc:49:3f:f0:c0:e5:c2:99:e5:7e:f6:cb:56:e4:a3:
                    87:b8:14:df:10:65:4a:e1:11:a7:71:42:3a:ec:59:
                    f6:41:6d:c1:96:11:10:a4:6b:66:37:db:ec:a6:fd:
                    f4:92:93:c7:df:32:3f:aa:68:1b:47:a7:83:53:e0:
                    42:c2:da:8d:c8:11:e1:87:47:78:7f:79:65:6f:9b:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:86:3F:D3:AF:AA:0D:0A:02:E7:66:41:B9:88:67:FE:EF:A1:E6
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:ec:e7:5b:8d:f9:f3:33:60:51:ac:b3:5c:3a:ae:69:ae:
         f8:31:96:e0:50:f3:1d:b4:cc:ff:da:fe:30:b4:f2:26:43:65:
         ec:5a:97:24:47:66:36:1f:3b:f7:30:76:b3:8d:26:42:38:a0:
         b4:0a:ad:31:1a:84:23:0e:68:f0:9a:96:7a:05:43:46:d8:68:
         6c:ed:11:86:da:1e:a3:16:69:27:64:bd:1a:a0:6e:01:6c:71:
         ad:d9:a5:40:23:50:f5:b7:45:7a:c6:e6:ee:eb:4b:e2:c8:aa:
         d9:a8:22:86:db:23:f6:91:da:ab:4a:2a:b6:2a:cd:e8:be:06:
         a5:e1:53:c3:72:75:bc:ba:23:23:d9:de:86:40:40:8a:e2:0a:
         e1:71:e3:73:8a:c3:ff:d9:3e:23:e8:37:e4:f8:55:60:b8:fe:
         eb:3d:ad:bc:1a:61:63:7d:ec:f7:6e:3a:3e:17:05:f1:c6:7e:
         9d:5e:7d:11:14:6f:3c:44:44:23:58:7a:51:7c:e0:6c:02:40:
         db:72:da:9c:bc:5b:7b:5a:45:55:c4:55:ab:3e:84:1f:33:68:
         f4:7c:78:ab:b3:a5:3b:51:42:b5:49:8f:bd:65:01:af:ca:fa:
         40:1a:6d:d7:05:e1:e4:bd:87:a4:62:60:50:25:b5:9d:58:38:
         c7:24:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:32 2026 by rpki-client