Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e342e302f32332d3234203d3e2035303635.roa
File:                     36352e38372e342e302f32332d3234203d3e2035303635.roa (raw, json)
Hash identifier:          P7R3xf/9iB+RAWtRDQHlxMhhmX7vQ4zZ4kp612X9YrE=
Subject key identifier:   86:B1:05:60:4A:61:3B:3A:15:78:2E:62:6A:F5:6E:E2:99:82:B6:3B
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       3F572969E6E9ADBF7DBD1799F203C393BB0CF3C9
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e342e302f32332d3234203d3e2035303635.roa
Signing time:             Wed 13 May 2026 06:27:06 +0000
ROA not before:           Wed 13 May 2026 06:22:06 +0000
ROA not after:            Wed 12 May 2027 06:27:06 +0000
asID:                     5065
IP address blocks:        65.87.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 16:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:57:29:69:e6:e9:ad:bf:7d:bd:17:99:f2:03:c3:93:bb:0c:f3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 13 06:22:06 2026 GMT
            Not After : May 12 06:27:06 2027 GMT
        Subject: CN=86B105604A613B3A15782E626AF56EE29982B63B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:fd:41:2a:66:d7:26:92:47:73:bc:25:1c:
                    fe:f2:23:f6:59:c9:57:59:32:6b:b0:ce:4c:ed:6d:
                    9f:43:18:58:cf:fa:be:20:b7:bf:5f:91:4c:eb:2b:
                    a3:53:9d:45:7e:f1:9d:73:65:6f:6d:22:74:2b:ab:
                    be:dd:c9:67:ff:1e:ea:c0:97:e1:f7:e1:0b:d9:15:
                    66:d3:29:ad:9d:53:a4:ee:64:08:bc:4b:ab:ad:67:
                    c9:43:08:67:28:c8:ed:72:55:e3:9e:56:bf:6d:ea:
                    46:aa:80:18:9d:23:f8:dd:3e:ed:a2:a5:66:34:4e:
                    14:9b:e2:43:c1:50:66:b1:86:79:e0:e5:7a:e8:3a:
                    79:53:8d:14:8b:5c:b2:8c:03:c1:26:22:7d:a5:5e:
                    bb:53:20:f9:f4:ac:a5:92:09:92:29:be:e4:25:a5:
                    b6:b9:4e:f7:86:66:2f:19:6f:e4:a7:94:9d:e7:11:
                    a3:4f:88:2e:72:42:16:5e:5f:8d:9b:70:62:16:a6:
                    6e:49:c8:7d:4d:34:fe:2a:84:59:f7:74:88:5e:0a:
                    9e:22:ed:c0:7e:25:c9:c1:7a:0e:03:b6:f7:20:6b:
                    74:72:aa:2f:73:a5:b8:23:12:0c:93:40:8f:26:2f:
                    6b:ca:06:25:0c:4c:ed:36:99:a7:68:c0:90:90:d4:
                    83:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B1:05:60:4A:61:3B:3A:15:78:2E:62:6A:F5:6E:E2:99:82:B6:3B
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e342e302f32332d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:62:1f:9e:6e:e7:11:db:97:f5:83:93:53:e1:8c:17:4f:54:
         3c:a4:f4:43:49:29:97:b6:37:49:67:2b:c0:9b:5d:1b:12:36:
         c7:04:80:1a:23:e6:36:de:06:b2:24:fc:c6:31:c9:82:34:57:
         f7:1e:7e:73:63:94:36:7f:53:1d:cb:0e:18:00:ee:71:fa:6b:
         36:77:79:3c:3f:f2:f7:10:ec:93:e3:6a:ba:f1:7f:c7:97:92:
         22:74:7d:4f:b9:fa:3b:b3:8c:17:3c:6b:40:b2:0d:7c:f4:cd:
         83:40:4a:63:22:c9:06:b5:21:2d:d9:2b:ec:76:f6:ae:86:6d:
         bc:c0:61:3d:3a:23:7f:6d:87:65:f7:1d:f6:29:75:8a:64:64:
         21:50:3e:0c:1b:b5:a7:84:25:d7:bf:c3:0a:ca:bd:0b:d3:3a:
         b4:12:10:41:48:6e:e3:0d:1a:a6:40:0c:c5:b5:e8:34:93:81:
         9a:ee:92:e0:59:8b:30:97:b3:d8:58:ac:0f:97:98:aa:ad:40:
         19:ce:d7:b2:07:6b:b9:a3:e1:ef:b2:09:83:4c:48:de:48:16:
         05:5b:f8:78:ce:68:74:a3:9e:e9:47:66:a7:c5:e0:c1:87:6d:
         48:3a:88:ce:40:13:14:f9:fc:27:fa:77:83:bc:a5:1b:ec:41:
         22:0b:c6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 04:17:59 2026 by rpki-client