Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32382e302f32322d3234203d3e2035363530.roa
File:                     36352e38372e32382e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier:          F16egihCJLaFpvmptmLq6TU/qBZzsrkMcdPCWAUuKr4=
Subject key identifier:   65:41:B0:1C:71:B4:88:47:96:D4:94:02:F8:26:B6:8E:27:BD:6F:B6
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       73ADFF529FB5B6C17E1C4FF9B25338A13A3A72BD
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32382e302f32322d3234203d3e2035363530.roa
Signing time:             Wed 13 May 2026 06:38:01 +0000
ROA not before:           Wed 13 May 2026 06:33:01 +0000
ROA not after:            Wed 12 May 2027 06:38:01 +0000
asID:                     5650
IP address blocks:        65.87.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ad:ff:52:9f:b5:b6:c1:7e:1c:4f:f9:b2:53:38:a1:3a:3a:72:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:33:01 2026 GMT
            Not After : May 12 06:38:01 2027 GMT
        Subject: CN=6541B01C71B4884796D49402F826B68E27BD6FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:91:f1:63:8d:26:36:32:b4:63:a6:0a:5c:
                    4b:b7:5b:01:6c:cc:c4:6e:10:ce:53:04:0d:3b:e5:
                    a7:a3:f0:1d:49:a9:57:ad:fc:5f:99:a6:f1:c1:0b:
                    87:73:1f:c0:98:6b:bb:3d:60:0f:6a:97:ec:c7:17:
                    30:b4:fe:18:dc:6d:5a:5b:d3:3f:72:ac:7a:b5:24:
                    44:36:b2:9a:ec:9e:74:84:61:85:08:e5:0f:e1:02:
                    73:4a:da:db:53:41:75:e5:89:b0:83:e3:26:b5:8e:
                    ef:f6:58:c1:a6:4e:9a:bc:7a:56:e3:f7:62:27:5b:
                    5f:e6:2e:25:e9:18:26:3f:4f:b2:30:4a:72:8e:14:
                    0f:6d:61:3a:7b:7f:04:ba:d7:fb:14:9b:ec:71:9a:
                    13:c0:74:a0:45:31:3e:75:8b:e4:87:da:da:3d:5d:
                    b3:90:b6:dc:d6:62:d1:56:d1:0f:50:e9:61:9a:8f:
                    65:81:07:3f:28:35:31:e9:eb:f4:14:06:c2:30:de:
                    36:ed:f1:69:aa:97:7a:1b:2d:bc:34:6a:6b:e4:d9:
                    2f:fe:fd:3b:83:bb:96:39:ec:34:d9:e8:06:c0:60:
                    75:b3:b5:f3:d3:81:14:50:c0:2d:3c:ba:67:ba:50:
                    63:68:13:99:2a:d8:87:d6:a8:c0:6c:0e:f6:c2:99:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:41:B0:1C:71:B4:88:47:96:D4:94:02:F8:26:B6:8E:27:BD:6F:B6
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32382e302f32322d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:76:2b:cd:f3:f6:41:6e:2f:4a:42:35:86:38:20:08:d5:
         cb:2e:fa:8b:eb:c9:fd:51:53:b0:de:d1:99:53:4b:10:72:5e:
         19:9e:0c:f1:ca:d1:e8:0e:57:d2:cd:ea:74:79:d7:51:00:ad:
         05:ad:53:1b:b6:65:49:78:65:e2:08:76:c6:ef:28:ed:00:f8:
         bc:9c:00:7b:d3:ea:86:e0:1b:35:fd:e8:c7:8a:84:9b:23:4f:
         d0:8b:17:89:83:11:2d:04:49:d0:a9:ac:06:83:e7:20:35:9c:
         1f:ba:d1:cb:16:60:e3:ee:3b:81:fe:68:70:e0:43:0b:54:35:
         f4:87:ed:22:1e:88:ad:cb:8f:b4:67:06:e0:f7:b8:40:f7:7f:
         a3:60:39:5b:b0:27:d3:5f:05:35:0d:85:e4:4d:26:31:5b:4d:
         c0:ea:92:ab:fa:9c:4c:94:8a:3a:62:e0:ab:77:f0:be:a7:6c:
         03:4e:f1:79:11:5d:31:c4:0e:91:b4:d2:70:e1:98:af:fd:d0:
         e9:3a:0c:6e:c3:43:b5:bb:d3:75:d3:1d:37:bf:0c:a6:3f:58:
         3a:00:8d:3c:14:d9:37:28:3d:a5:e7:7f:6c:bf:d9:fd:81:25:
         59:35:c7:b7:d4:5b:f1:10:2f:0c:84:50:36:9e:1d:83:5d:fc:
         20:43:16:5f
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUc63/Up+1tsF+HE/5slM4oTo6cr0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTVjNGM2NTViMmM2OTlmMTcwYzcyYTkyOTUzNDVmMGJh
ODYyY2U4NTMwMjU0YzNjZTMwHhcNMjYwNTEzMDYzMzAxWhcNMjcwNTEyMDYzODAx
WjAzMTEwLwYDVQQDEyg2NTQxQjAxQzcxQjQ4ODQ3OTZENDk0MDJGODI2QjY4RTI3
QkQ2RkI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvWR8WONJjYy
tGOmClxLt1sBbMzEbhDOUwQNO+Wno/AdSalXrfxfmabxwQuHcx/AmGu7PWAPapfs
xxcwtP4Y3G1aW9M/cqx6tSRENrKa7J50hGGFCOUP4QJzStrbU0F15Ymwg+MmtY7v
9ljBpk6avHpW4/diJ1tf5i4l6RgmP0+yMEpyjhQPbWE6e38Eutf7FJvscZoTwHSg
RTE+dYvkh9raPV2zkLbc1mLRVtEPUOlhmo9lgQc/KDUx6ev0FAbCMN427fFpqpd6
Gy28NGpr5Nkv/v07g7uWOew02egGwGB1s7Xz04EUUMAtPLpnulBjaBOZKtiH1qjA
bA72wplXMwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFGVBsBxxtIhHltSUAvgmto4n
vW+2MB8GA1UdIwQYMBaAFAdL6FDbEF8/TqivGMsSkkes+bhpMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcyODYxMmMwYjE2LzAv
MDc0QkU4NTBEQjEwNUYzRjRFQThBRjE4Q0IxMjkyNDdBQ0Y5Qjg2OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzU2ODZhZmFjLTgwYjYtNDRlMy05OGIyLTczZmI2Y2QyYjE0Yi9lNWM0
YzY1NWIyYzY5OWYxNzBjNzJhOTI5NTM0NWYwYmE4NjJjZTg1MzAyNTRjM2NlMy5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2MwYTllYWUwNDg2MTQ4YjZhMTA5OTcy
ODYxMmMwYjE2LzAvMzYzNTJlMzgzNzJlMzIzODJlMzAyZjMyMzIyZDMyMzQyMDNk
M2UyMDM1MzYzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVccMA0GCSqGSIb3DQEBCwUAA4IBAQAx
uXYrzfP2QW4vSkI1hjggCNXLLvqL68n9UVOw3tGZU0sQcl4ZngzxytHoDlfSzep0
eddRAK0FrVMbtmVJeGXiCHbG7yjtAPi8nAB70+qG4Bs1/ejHioSbI0/QixeJgxEt
BEnQqawGg+cgNZwfutHLFmDj7juB/mhw4EMLVDX0h+0iHoity4+0Zwbg97hA93+j
YDlbsCfTXwU1DYXkTSYxW03A6pKr+pxMlIo6YuCrd/C+p2wDTvF5EV0xxA6RtNJw
4Ziv/dDpOgxuw0O1u9N10x03vwymP1g6AI08FNk3KD2l539sv9n9gSVZNce31Fvx
EC8MhFA2nh2DXfwgQxZf
-----END CERTIFICATE-----
Generated at Sat May 16 04:18:41 2026 by rpki-client