Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e20343032383537.roa
File:                     36342e38342e35362e302f32342d3234203d3e20343032383537.roa (raw, json)
Hash identifier:          sxYMj1q9O6Q87dJZapXL4sDHWcNqShM7pEPmIJqazUg=
Subject key identifier:   F3:B4:6E:89:38:1A:7D:50:99:28:8A:CA:37:3E:BC:02:88:F3:E4:B5
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       7F710C496738B7FFA1DA6AD25BC357E89497C4B9
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e20343032383537.roa
Signing time:             Fri 14 Aug 2026 23:26:41 +0000
ROA not before:           Fri 14 Aug 2026 23:21:41 +0000
ROA not after:            Fri 13 Aug 2027 23:26:41 +0000
asID:                     402857
IP address blocks:        64.84.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:71:0c:49:67:38:b7:ff:a1:da:6a:d2:5b:c3:57:e8:94:97:c4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Aug 14 23:21:41 2026 GMT
            Not After : Aug 13 23:26:41 2027 GMT
        Subject: CN=F3B46E89381A7D5099288ACA373EBC0288F3E4B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:24:b6:6c:c0:cb:91:0e:90:4a:2a:12:8c:ee:
                    a0:b8:5d:a6:ad:2f:35:e3:97:19:17:61:4a:99:7c:
                    e2:f1:94:13:8e:39:0b:a6:94:ed:93:b3:0d:d4:39:
                    b7:cd:37:d8:73:eb:95:39:e1:f6:ae:3b:db:5f:1a:
                    c4:16:92:2a:bb:d7:20:69:9d:fc:45:20:04:9c:c9:
                    99:73:48:69:9f:37:ed:68:a7:2c:fa:9c:98:ab:28:
                    c0:0e:3f:e9:55:46:98:e6:fc:9b:17:4c:a8:76:d5:
                    3e:26:da:5d:b6:44:80:72:47:f4:c4:23:7c:eb:ec:
                    c6:55:45:50:9d:13:5a:da:2f:ea:30:ed:e7:e8:7a:
                    07:f7:f4:e2:52:58:d4:6e:e8:eb:da:92:04:e9:96:
                    96:f5:9e:9d:f0:1d:98:f3:9b:04:e7:32:d7:b7:2c:
                    6f:cc:5b:e5:d8:9a:e8:26:f4:74:69:b5:00:01:51:
                    a2:e3:4c:9e:54:20:38:e2:53:dc:b1:5c:e3:7f:4e:
                    eb:60:5e:77:56:3e:e2:51:90:84:05:da:c4:82:f0:
                    c6:22:ea:cc:87:f4:5f:b1:21:95:26:8f:74:0a:f2:
                    ba:d6:58:e8:13:b4:f7:71:c8:c3:14:f3:9a:41:d4:
                    fd:93:ed:db:32:ce:51:0b:05:ab:40:8f:99:4e:bb:
                    be:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B4:6E:89:38:1A:7D:50:99:28:8A:CA:37:3E:BC:02:88:F3:E4:B5
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e20343032383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:12:9e:04:7e:02:86:0a:42:de:53:3b:bd:6c:67:db:de:
         61:b2:7f:ea:2c:0e:b3:06:9b:01:0d:cd:71:47:35:95:00:67:
         34:fa:71:57:b7:13:55:0f:95:67:db:6f:ea:9e:53:d4:13:18:
         1e:57:d1:2c:53:e3:92:cd:58:8d:1c:2f:60:5f:41:9b:51:2d:
         46:e9:27:ce:b5:7b:6e:67:49:6a:2e:14:b8:0b:d3:cf:e8:07:
         34:bd:61:d4:5f:14:c1:1c:44:70:e9:e6:c5:5d:b4:d3:80:a7:
         63:b9:15:49:83:7f:4c:e9:b2:02:f0:2e:02:71:da:7b:80:8e:
         28:58:15:57:9d:fc:98:f3:6a:7a:b0:66:c4:30:c7:05:d2:53:
         9f:09:3d:de:95:73:0a:2f:07:15:b1:7c:55:f7:a0:e5:be:04:
         08:86:06:dc:50:d7:17:76:de:d5:69:71:7e:c9:2a:5e:a8:ea:
         0d:5c:de:c3:86:75:d8:eb:a0:38:62:69:70:b3:ab:73:f8:a7:
         e5:f4:8a:c2:41:60:ae:ec:b5:ec:a4:93:55:b9:1c:3c:28:de:
         8d:72:0a:8e:8d:70:9a:07:16:79:ef:c2:cd:43:14:6f:f5:cb:
         26:46:8b:c8:05:7f:c9:b1:22:09:3e:c4:e4:7f:59:6f:d3:0b:
         a7:61:08:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:08 2026 by rpki-client