Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e203130363438.roa
File:                     36342e38342e35362e302f32342d3234203d3e203130363438.roa (raw, json)
Hash identifier:          b/TcLuVzdeggKDHwL4pZ8SjmddehJ3Udq+IxSPcZdc0=
Subject key identifier:   44:F5:E7:24:E1:7F:77:0D:7E:BE:14:0D:68:40:0B:FA:70:37:1E:29
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       6A4BA38A7E7110A071151549390A312B3B454759
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e203130363438.roa
Signing time:             Wed 21 Oct 2026 02:39:01 +0000
ROA not before:           Wed 21 Oct 2026 02:34:01 +0000
ROA not after:            Wed 20 Oct 2027 02:39:01 +0000
asID:                     10648
IP address blocks:        64.84.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4b:a3:8a:7e:71:10:a0:71:15:15:49:39:0a:31:2b:3b:45:47:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Oct 21 02:34:01 2026 GMT
            Not After : Oct 20 02:39:01 2027 GMT
        Subject: CN=44F5E724E17F770D7EBE140D68400BFA70371E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f0:74:0c:11:24:c8:bd:01:cb:de:97:fd:80:
                    b8:46:2a:51:9d:62:14:f2:e5:48:bb:24:09:7c:47:
                    31:92:bf:0f:f7:b3:e4:f2:56:b3:18:f0:37:1e:45:
                    39:ee:74:7b:58:3d:26:53:0c:83:58:5b:ad:d4:c5:
                    44:2d:ce:ac:85:a2:2e:b2:6a:65:7c:c5:d8:e9:b2:
                    64:4b:31:05:58:a6:76:73:c8:a8:09:2a:7d:6d:39:
                    82:2d:11:c6:09:6c:2b:39:1d:ab:c5:65:4f:ed:00:
                    28:33:8e:fd:4d:02:a8:f6:10:3c:2b:50:4d:34:d1:
                    34:4b:60:aa:04:40:71:a7:e7:2e:a3:d8:12:dc:cb:
                    5e:82:6b:38:7b:4d:17:57:a8:66:59:ae:7f:2e:1a:
                    90:8f:08:3e:b4:0c:08:38:fc:be:76:4e:89:f0:06:
                    83:79:1f:f6:d0:64:8a:4e:6a:63:8c:ec:d1:0f:70:
                    25:40:e5:26:50:13:b6:27:42:93:5a:c4:3b:f3:f9:
                    3c:7f:b0:ff:ce:76:62:e8:2f:73:b9:56:f0:6b:b4:
                    12:b0:e4:9d:e7:0b:67:cf:32:ff:b0:33:14:20:bf:
                    bf:4e:e4:eb:68:b9:33:c6:2a:63:d4:21:a8:16:9b:
                    eb:3d:cb:67:2c:ed:a0:aa:18:1d:5a:9a:63:46:ce:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F5:E7:24:E1:7F:77:0D:7E:BE:14:0D:68:40:0B:FA:70:37:1E:29
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e203130363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:74:7d:1c:88:27:7d:d9:24:8e:7d:6b:13:b1:42:03:52:
         6c:4b:15:2a:e6:7d:02:8c:e7:28:af:46:c1:c7:50:40:5c:c1:
         64:22:ba:b1:bc:04:e1:ad:60:ac:d7:38:4e:ef:5f:a9:6a:8d:
         c0:fd:9a:69:14:d7:65:50:24:f4:a2:02:6f:12:df:fa:29:a4:
         2b:36:14:e6:72:ca:95:95:1c:a1:7f:30:d3:21:64:8f:54:86:
         96:cc:a6:ed:df:bf:69:b4:14:44:d3:be:16:83:50:f1:89:86:
         e0:59:65:a1:f1:04:d0:82:98:b4:e8:bd:94:25:5a:83:93:13:
         1f:86:b8:60:8c:28:be:33:58:e9:3c:e8:25:17:83:3a:80:7e:
         65:71:1f:03:10:b1:68:7b:f5:72:4d:9f:0a:1d:5c:0d:cd:01:
         ff:3b:31:f9:4e:94:cb:3e:04:cd:74:e0:0e:83:a5:52:37:a6:
         59:12:a4:bf:ef:b4:90:64:5e:d6:e3:c3:b1:8a:b3:d2:aa:fa:
         57:29:60:ec:a1:fa:88:d2:c8:bb:62:39:15:10:2f:fa:3f:8d:
         7d:a2:62:39:42:d4:6b:3c:3f:b4:4d:f1:a6:2f:3c:32:cc:b5:
         18:85:c0:52:ac:d5:76:e8:08:17:3d:35:d6:1d:2c:f3:20:70:
         0b:d3:06:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:17 2026 by rpki-client