Route Origin Authorization

$ rpki-client -vvvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/36342e39332e38302e302f32322d3234203d3e203333373333.roa
File:                     36342e39332e38302e302f32322d3234203d3e203333373333.roa (raw, json)
Hash identifier:          H8j750rdtg+N8nrhjsS86khVfhFgBfpcnUDY7Ad6K8A=
Subject key identifier:   1D:80:9A:01:40:5D:2A:DF:87:FF:F7:17:2E:B4:81:9C:C8:BE:4E:6A
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       4DEF1DACB9802D0885F25C47BFCF803D2A4FD551
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/36342e39332e38302e302f32322d3234203d3e203333373333.roa
Signing time:             Mon 17 Aug 2026 23:51:56 +0000
ROA not before:           Mon 17 Aug 2026 23:46:56 +0000
ROA not after:            Mon 16 Aug 2027 23:51:56 +0000
asID:                     33733
IP address blocks:        64.93.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 01:12:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ef:1d:ac:b9:80:2d:08:85:f2:5c:47:bf:cf:80:3d:2a:4f:d5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Aug 17 23:46:56 2026 GMT
            Not After : Aug 16 23:51:56 2027 GMT
        Subject: CN=1D809A01405D2ADF87FFF7172EB4819CC8BE4E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:11:9b:d0:08:af:7f:db:6f:d6:db:2c:ee:
                    f1:d9:6d:12:f3:70:89:64:b5:26:63:32:b4:26:07:
                    2d:93:1d:d7:d0:44:ab:6a:d2:3a:0a:3c:18:1a:d6:
                    3f:45:e3:3e:19:9e:75:5a:d6:8a:41:37:96:86:52:
                    5a:59:db:8a:45:5f:dd:ab:29:03:e7:47:d9:8d:6a:
                    57:89:bc:c7:71:1f:ab:b2:0b:f1:41:ef:24:fd:f1:
                    35:b1:d3:a0:39:73:e6:c5:aa:0e:2d:42:f7:dc:9e:
                    2a:c4:a9:bb:5d:a6:e2:83:c9:73:cc:9f:aa:b4:40:
                    18:fd:f8:1b:6f:db:4e:a6:55:35:32:e0:e3:8a:23:
                    5b:2a:bf:84:8e:94:24:cf:94:11:7f:ed:1f:4e:c1:
                    28:3c:02:b5:98:4a:f3:34:75:b2:cd:9a:9a:72:8a:
                    b6:4a:0c:cc:05:f1:d6:b7:0a:58:9d:40:4b:c2:57:
                    c3:d9:67:a4:a4:67:b3:fe:10:45:31:6f:b5:6b:a1:
                    2c:a4:90:6c:11:8a:b4:26:06:e5:69:25:3e:a5:56:
                    97:95:60:2c:ea:98:42:98:fe:c8:da:53:a0:ff:36:
                    dd:b3:9d:45:10:54:ca:6a:e8:b0:15:5e:e2:fd:e3:
                    d5:45:a2:fc:77:3e:66:bf:af:bf:62:d1:42:c4:6c:
                    18:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:80:9A:01:40:5D:2A:DF:87:FF:F7:17:2E:B4:81:9C:C8:BE:4E:6A
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/36342e39332e38302e302f32322d3234203d3e203333373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:73:53:8f:e0:ce:d7:1e:f2:2a:38:63:90:0c:0d:f8:34:c1:
         9a:d0:28:93:81:5a:c2:38:a4:99:f1:ab:5a:0b:7d:a7:42:f6:
         85:be:8c:a4:21:b3:0d:81:64:57:6d:08:30:54:05:4c:f9:68:
         d9:cc:31:e6:48:3f:9d:fd:73:86:33:1b:66:81:de:8f:3b:bd:
         0c:b2:34:ba:6a:a2:03:53:09:12:fc:2f:3d:5c:4d:ae:ca:7b:
         29:50:9b:00:8f:56:7a:4e:1e:e2:21:79:7c:0a:ad:32:d4:53:
         5e:75:1c:73:a3:ac:cb:ff:2e:72:d2:1b:fc:6c:82:0a:41:b8:
         c6:f6:06:bf:0e:45:dc:84:a8:c5:3a:17:c3:6b:35:36:36:b6:
         4d:9c:cf:dd:fc:a3:d7:b4:1d:78:b3:ae:8c:27:81:66:74:56:
         16:38:91:06:96:f3:f6:69:ad:2f:19:e4:e5:84:0e:95:5d:e7:
         9d:d5:ab:77:7a:07:fb:bd:d8:3d:b0:b3:0e:53:34:ae:34:b2:
         7d:e4:f7:3e:f8:59:7d:b3:c3:2d:04:87:a9:12:37:d6:8e:50:
         35:36:cf:74:77:a7:ec:93:f4:98:bc:4e:65:30:28:03:2a:68:
         85:8f:7b:d8:f1:81:08:71:88:15:90:ff:4c:5c:39:e8:db:0c:
         62:cd:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:31:23 2026 by rpki-client