Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e20383334.roa
File:                     36352e38372e382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          NJyd5wVIlHYYcPmFoRnDdST+i8XcMmUSAt3VphHFVog=
Subject key identifier:   EC:52:F3:46:8F:6A:2C:0A:14:2C:57:C0:27:A9:0B:67:28:71:8A:65
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       0B2169DEE32F4213EF15B34BB26173A86C3A4275
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e20383334.roa
Signing time:             Sun 21 Jun 2026 06:17:05 +0000
ROA not before:           Sun 21 Jun 2026 06:12:05 +0000
ROA not after:            Sun 20 Jun 2027 06:17:05 +0000
asID:                     834
IP address blocks:        65.87.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 20:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:21:69:de:e3:2f:42:13:ef:15:b3:4b:b2:61:73:a8:6c:3a:42:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: Jun 21 06:12:05 2026 GMT
            Not After : Jun 20 06:17:05 2027 GMT
        Subject: CN=EC52F3468F6A2C0A142C57C027A90B6728718A65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:cd:34:f1:a6:fb:09:1b:a3:95:6e:8d:82:d2:
                    67:a3:0b:2e:c0:fa:df:d5:87:ad:b3:ee:0b:c9:60:
                    8d:29:f9:e4:ec:5b:1c:cb:fb:19:42:1d:ba:f1:2d:
                    26:90:6a:0b:22:e9:c1:f0:8b:2e:22:5b:43:34:ac:
                    11:e7:b8:4a:7a:67:47:e2:e8:b0:27:0f:51:6a:34:
                    46:d5:3e:cb:d5:8a:f9:7c:07:42:a1:0f:f5:6c:cd:
                    13:66:8b:95:11:f9:74:98:03:2a:b8:d6:a5:75:e9:
                    ff:21:86:b8:fa:d1:ed:16:1c:77:fb:05:f0:c7:94:
                    93:67:13:6f:73:9e:8d:85:60:57:21:dc:ab:46:f8:
                    97:4d:66:d6:ea:c8:f9:f5:92:4f:b2:8d:79:ea:ff:
                    35:ad:dd:fb:8a:a7:5f:9d:b6:85:3a:ce:d1:26:e7:
                    2f:30:f0:10:e7:47:02:92:ee:88:43:20:20:bd:11:
                    ca:fc:4d:dc:c0:a8:37:f2:9c:3d:9f:ec:e7:12:81:
                    ec:61:93:7d:0d:56:86:1d:7c:2f:f5:9d:e0:59:0f:
                    b6:af:a0:c5:5f:ac:7f:91:dd:3d:eb:93:bb:79:cf:
                    95:d1:fb:b6:17:43:22:84:54:26:7b:9a:c3:0b:cc:
                    46:a2:28:f6:02:9b:9e:bb:50:33:1f:07:17:4e:f0:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:F3:46:8F:6A:2C:0A:14:2C:57:C0:27:A9:0B:67:28:71:8A:65
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:19:f0:3b:2c:94:85:0e:8c:c2:26:a4:b0:ee:99:ff:b4:74:
         ed:9e:5e:b6:3b:d0:7b:13:ff:3e:4c:6d:4a:9f:6e:56:f3:0e:
         9e:ab:77:ed:6f:c7:fb:42:94:73:b7:66:bd:9a:32:01:fc:c2:
         6b:b8:a7:20:6d:9e:ac:40:56:bc:d4:21:61:fb:7d:cc:65:46:
         d6:42:b8:85:9c:e0:bc:eb:57:b5:89:be:f7:9e:3a:da:2b:74:
         f4:10:20:63:01:9c:00:d6:dc:5b:c0:b2:4a:19:44:dd:5c:03:
         00:d7:c2:c7:e1:4d:5a:e2:87:b4:b8:5b:c6:0a:33:2a:4e:bb:
         dd:3f:35:6d:e4:79:60:d7:07:64:dd:09:be:6a:86:68:7f:7e:
         a3:08:3b:9c:75:f8:7a:86:f0:6d:d9:d9:03:50:1b:2c:3b:fc:
         ff:86:c8:51:ce:07:d6:9a:7e:81:ee:85:ba:5b:7e:52:4a:82:
         92:45:67:5a:23:80:80:04:c2:f7:08:94:4a:51:7e:22:2e:fe:
         fa:f9:46:70:67:e5:1a:f5:25:a3:eb:6c:10:1f:48:8b:27:70:
         7c:22:6e:7e:57:22:c3:aa:06:d6:ed:60:57:ac:a7:cf:7c:77:
         a6:06:48:4a:bb:50:68:5a:79:c5:69:2e:f1:7a:32:e3:30:ff:
         eb:33:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:52 2026 by rpki-client