Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e20313339393231.roa
File:                     36352e38372e382e302f32342d3234203d3e20313339393231.roa (raw, json)
Hash identifier:          4aNv9L5zDcHxLJLBgm+/kJI6kiSFXzBKLS2YsjZGxH0=
Subject key identifier:   69:97:5F:88:D9:DC:6A:B1:01:20:22:84:F8:F2:66:70:FE:A9:29:B0
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       7C326B63D67173EAE3E962A3B3FDE6807ACF1B46
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e20313339393231.roa
Signing time:             Thu 21 May 2026 06:19:21 +0000
ROA not before:           Thu 21 May 2026 06:14:21 +0000
ROA not after:            Thu 20 May 2027 06:19:21 +0000
asID:                     139921
IP address blocks:        65.87.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 00:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:32:6b:63:d6:71:73:ea:e3:e9:62:a3:b3:fd:e6:80:7a:cf:1b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 21 06:14:21 2026 GMT
            Not After : May 20 06:19:21 2027 GMT
        Subject: CN=69975F88D9DC6AB101202284F8F26670FEA929B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:32:68:3f:60:58:08:a5:c0:22:94:76:5d:23:
                    57:4f:7b:0e:28:c5:1c:50:f5:c9:83:b0:e5:6d:cb:
                    d9:b2:3c:0b:a4:4b:a8:87:24:a5:4c:02:33:6a:fc:
                    7d:c1:a1:5f:36:c3:28:4f:45:45:43:db:31:61:2a:
                    c9:33:f1:64:d8:a6:87:40:84:30:ae:d2:48:2d:b3:
                    a2:d8:e0:5e:22:50:e3:f9:ef:03:14:e0:69:74:b7:
                    2a:7b:f3:50:29:34:d9:24:94:f0:04:02:cc:b4:b0:
                    23:7e:b1:c6:c3:d9:c6:38:b4:47:33:21:15:b4:96:
                    c3:cf:09:5e:ba:9b:36:cd:0b:ad:5d:30:d0:5a:d5:
                    19:5e:82:fb:47:1c:1b:9c:61:f2:85:2b:dd:7e:07:
                    52:44:05:94:ab:33:7f:34:ab:be:e6:21:15:33:cf:
                    b0:09:83:18:a6:e6:13:72:1f:4e:bf:30:89:e1:85:
                    dc:eb:0c:6c:99:76:c0:c9:3e:e3:da:8e:99:c9:57:
                    56:57:e5:25:26:29:be:57:29:c2:a4:15:8b:d6:46:
                    e5:4c:83:a9:af:fb:93:62:56:b4:9d:91:73:37:35:
                    4d:cc:34:15:fa:d9:96:de:62:2a:a6:fd:63:00:f1:
                    03:27:01:60:28:da:4b:8d:ca:75:9c:cf:85:b1:13:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:97:5F:88:D9:DC:6A:B1:01:20:22:84:F8:F2:66:70:FE:A9:29:B0
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e20313339393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:40:0e:50:af:ad:4b:34:b8:a0:2b:ec:7e:45:17:3d:a9:06:
         93:52:73:df:ec:1a:8c:06:c1:04:ea:30:40:f7:61:2f:12:de:
         d8:07:72:42:93:c8:6e:2a:4d:8c:f8:22:df:ac:36:51:d7:6a:
         14:4f:5c:f6:c3:33:c5:56:c8:53:5b:b0:e2:dd:73:7a:c0:bd:
         8a:a4:4a:ba:26:5a:b6:70:de:44:02:b0:f7:d9:03:65:0d:54:
         2a:d3:4e:da:1c:01:a0:cf:a5:78:f2:fc:0f:24:87:60:54:93:
         1a:04:e1:b3:a9:19:5e:7b:c8:a5:68:05:d0:ff:fd:f1:c0:e6:
         d6:b8:9a:d8:ea:ab:fc:35:a6:52:f7:34:96:10:6e:85:65:10:
         a9:50:52:e8:cc:fd:9e:9f:46:5c:4d:ab:4b:3c:f3:bc:f6:7c:
         00:fa:cf:f1:e1:ef:2e:18:ae:49:d5:3e:a2:27:7f:02:f2:5b:
         17:f3:e2:e8:ad:49:d8:6f:bc:c0:ef:ca:d4:df:34:92:70:1f:
         22:6c:40:3d:4d:1f:01:03:19:b0:b7:9c:5d:cd:2f:d7:1b:39:
         96:01:23:d0:c7:82:06:6c:b3:28:14:6f:70:85:54:d6:c4:09:
         d2:77:6a:3d:98:7e:54:03:ca:74:2c:b4:1f:dd:c0:15:53:f4:
         7c:04:67:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:18:36 2026 by rpki-client