Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203233343730.roa
File:                     36362e3131382e3234342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          Dxx0XfcgP0O9Fvn5kxZCkgDhhkHJWS8Fd+4dnl+lcso=
Subject key identifier:   44:EF:A4:0F:FB:B3:99:62:97:7C:65:90:C8:5B:F9:43:E1:F5:B2:A2
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       02263DF08B473966512BE252CF2BCBAA61E35E26
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 22 Jul 2026 12:52:51 +0000
ROA not before:           Wed 22 Jul 2026 12:47:51 +0000
ROA not after:            Wed 21 Jul 2027 12:52:51 +0000
asID:                     23470
IP address blocks:        66.118.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:26:3d:f0:8b:47:39:66:51:2b:e2:52:cf:2b:cb:aa:61:e3:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul 22 12:47:51 2026 GMT
            Not After : Jul 21 12:52:51 2027 GMT
        Subject: CN=44EFA40FFBB39962977C6590C85BF943E1F5B2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:94:cc:8a:c4:03:66:88:ec:91:0d:07:a3:c5:
                    c4:5c:43:c6:bf:7b:1e:cc:c7:1f:9b:47:18:cf:00:
                    33:2a:05:dc:dc:47:81:52:d0:5e:b1:2b:dc:57:c1:
                    40:c2:ae:4e:f9:b3:99:13:6a:db:12:f8:73:70:2b:
                    16:12:7f:7a:1e:4b:2e:27:13:4e:a8:e3:22:d1:96:
                    9a:72:41:0c:f2:84:e0:20:8f:91:ae:8c:7e:3a:69:
                    a1:da:fa:da:07:62:56:69:ac:20:39:16:94:7d:92:
                    59:7f:2e:7d:d7:6e:36:ae:70:a9:c6:3d:9b:08:11:
                    04:8a:ac:0f:66:4c:93:5d:af:82:80:5d:f1:72:9d:
                    02:d5:c2:b4:0b:98:d0:df:b8:14:da:46:aa:be:70:
                    6d:58:e6:0d:03:7c:43:ff:69:2c:10:c7:16:9e:ce:
                    52:8b:1e:63:bb:72:5b:1d:ca:ef:d5:09:ff:68:ed:
                    68:3b:01:07:b2:c9:ce:e8:36:9f:26:c9:0c:a4:eb:
                    89:89:e6:b2:9c:86:57:a0:a7:a8:b7:a9:53:9b:12:
                    d9:ac:c4:ed:4f:0d:0e:c3:9f:bc:7f:69:13:59:9e:
                    d4:a5:0e:c6:5c:bd:e9:5a:f2:cd:cd:82:e8:f8:33:
                    df:53:8a:c4:de:65:18:5b:ff:da:73:09:99:a2:c9:
                    b8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EF:A4:0F:FB:B3:99:62:97:7C:65:90:C8:5B:F9:43:E1:F5:B2:A2
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:47:e9:44:57:73:2f:52:06:46:73:b6:e6:39:bc:b8:18:8d:
         f1:ec:b7:6d:de:c8:f5:c0:0e:84:aa:95:3a:1d:13:5b:ff:06:
         48:05:c0:dc:0d:76:36:85:c3:50:12:4f:3c:a9:33:83:f3:bc:
         ce:ea:76:2c:da:6f:6a:bf:5d:f6:96:98:d4:c8:44:d2:8e:c4:
         df:53:e9:cd:d7:3c:7e:5a:03:b3:04:86:e2:27:f5:9a:06:2a:
         30:19:a0:70:07:d8:9a:74:af:72:b1:3a:f5:f5:5f:77:dd:e3:
         41:45:d2:d5:03:67:62:2c:e2:28:33:e0:01:1a:cb:17:0a:41:
         b4:6a:20:84:d7:2e:cc:92:92:3c:a9:9b:bb:db:3a:d5:af:15:
         f4:fa:3a:7b:4f:84:6a:ec:99:6c:44:ec:82:25:b9:b2:01:a5:
         b2:6b:af:4b:0d:e1:0f:52:dc:7a:32:e8:aa:9c:b8:88:fb:c2:
         8f:f4:8f:31:40:cb:a3:bb:ee:3f:bc:20:00:b7:33:c8:f4:30:
         0c:fa:76:cf:51:55:5d:89:cb:e3:53:e9:b7:fd:0d:bd:6c:f9:
         e3:c2:52:fb:0b:fe:11:a5:cf:ae:db:19:c8:9b:b3:db:85:6f:
         a3:59:41:f1:13:7e:b0:91:12:03:11:f2:0f:55:c5:6a:bb:74:
         e2:4b:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:28 2026 by rpki-client