Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203330343535.roa
File:                     36362e3131382e3234362e302f32342d3234203d3e203330343535.roa (raw, json)
Hash identifier:          Y2PSKndY9FtNykU1wEnq2RMpdX3QwoRl2Xbo5LMryZY=
Subject key identifier:   9C:49:F6:24:E8:28:F7:EA:41:26:F1:A9:A1:CB:2C:E8:69:B7:3A:97
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       1BF574A285859147F76D8B9865E0A304E22AE55B
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203330343535.roa
Signing time:             Mon 11 May 2026 18:09:56 +0000
ROA not before:           Mon 11 May 2026 18:04:56 +0000
ROA not after:            Mon 10 May 2027 18:09:56 +0000
asID:                     30455
IP address blocks:        66.118.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 15:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f5:74:a2:85:85:91:47:f7:6d:8b:98:65:e0:a3:04:e2:2a:e5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May 11 18:04:56 2026 GMT
            Not After : May 10 18:09:56 2027 GMT
        Subject: CN=9C49F624E828F7EA4126F1A9A1CB2CE869B73A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7b:ab:15:f6:36:2f:bb:e2:7b:8f:5d:d6:ee:
                    5a:0e:c0:38:b5:a6:30:49:3d:b2:89:8f:e3:57:a8:
                    c3:74:44:76:a8:52:fa:7a:d4:e9:5c:82:1b:16:71:
                    b4:65:83:5a:4a:af:66:bb:0b:d7:66:b9:a8:1b:c0:
                    f7:f5:c2:94:34:01:d9:a7:67:42:79:af:5d:db:db:
                    7e:94:66:c9:8e:80:61:f1:40:8d:30:61:f4:98:fd:
                    c2:1d:cf:58:b3:c5:2d:82:04:78:29:00:32:af:dd:
                    2d:f5:46:07:72:d7:a7:04:ee:8b:ac:28:dc:5a:4e:
                    26:58:00:e9:6e:1b:c2:51:3d:20:10:4c:bc:cd:ce:
                    e9:fc:c4:6d:00:5c:5d:49:9b:f7:73:fd:02:66:11:
                    f8:93:bf:66:91:f5:2c:e6:b3:2f:72:67:d0:8e:84:
                    8b:71:40:17:52:34:82:62:66:4b:9b:bf:2a:42:82:
                    d9:8c:3d:7a:e3:48:b9:58:7a:8a:26:d9:11:40:bc:
                    4b:c8:15:14:2d:13:96:95:fb:56:0f:0d:39:f5:ea:
                    42:d6:2d:ea:b3:48:2e:df:75:f1:74:39:00:ab:9f:
                    b7:45:1a:a9:95:fb:25:bb:7f:38:55:03:e3:ea:ff:
                    99:01:c1:4d:c8:8d:c2:be:ad:92:fc:da:6d:0d:9c:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:49:F6:24:E8:28:F7:EA:41:26:F1:A9:A1:CB:2C:E8:69:B7:3A:97
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234362e302f32342d3234203d3e203330343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ee:ba:af:07:ee:5f:e2:f9:56:3d:93:88:ba:37:49:54:ea:
         55:64:e9:06:9c:ab:96:bf:e8:6f:2e:7b:9e:27:c7:a1:b5:16:
         f2:ba:9c:32:ac:56:0e:5f:a8:e7:f2:68:78:3f:d8:29:2f:5b:
         0c:41:b7:78:3d:76:53:58:b8:d1:7d:7b:f8:5b:b1:d3:40:3c:
         ea:dd:fc:d8:08:d3:b4:42:7c:d9:00:63:a9:f0:fa:bb:b1:8b:
         0a:df:bd:e7:3e:7f:5d:e5:b9:34:8d:9e:4c:9e:47:cb:a6:6c:
         1a:a9:a4:92:91:9d:bb:55:31:40:a5:22:15:5a:0e:db:b3:8b:
         dd:f6:37:b6:47:2a:b0:f4:2a:b4:f7:e0:d6:ee:aa:29:e5:ea:
         ff:bb:0c:b7:0d:16:91:83:f1:60:1d:96:dd:c7:db:6d:d3:78:
         3c:81:ae:e5:06:a1:d1:a6:8b:86:d2:38:14:0d:b8:70:61:2a:
         e6:cf:a6:9f:ec:60:81:6c:68:c5:53:e8:38:f7:01:5f:25:01:
         b4:ba:31:68:a7:5e:c6:89:f6:cb:67:98:65:5d:89:67:d9:a5:
         e7:86:a7:90:0d:38:a2:ed:1d:a0:5e:30:54:73:33:1c:41:c5:
         c5:02:4d:80:04:54:87:c1:20:e8:ea:d0:14:ef:61:04:f1:37:
         f2:63:09:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:10 2026 by rpki-client