Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e20343031383338.roa
File:                     36342e3235332e38362e302f32332d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          CNyG2UD8w0XRRk7irZQ0ehQQiEv2r5ADsFmsGh4OK9I=
Subject key identifier:   CA:14:D7:41:D6:CC:F7:70:82:C8:8A:3D:42:B7:BA:97:C8:E1:C7:1A
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       427974C36452E3E17873B1ED056D45F547B380A7
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:13:22 +0000
ROA not before:           Wed 13 Aug 2025 05:08:22 +0000
ROA not after:            Wed 12 Aug 2026 05:13:22 +0000
asID:                     401838
IP address blocks:        64.253.86.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:79:74:c3:64:52:e3:e1:78:73:b1:ed:05:6d:45:f5:47:b3:80:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 13 05:08:22 2025 GMT
            Not After : Aug 12 05:13:22 2026 GMT
        Subject: CN=CA14D741D6CCF77082C88A3D42B7BA97C8E1C71A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:71:52:b0:18:db:60:16:a9:48:c4:b7:99:
                    b9:45:47:36:1c:32:cd:18:75:aa:f5:17:ad:c6:4a:
                    34:fa:d0:86:67:d3:95:26:db:7a:23:4d:97:ab:e2:
                    77:e1:6a:04:6f:ac:e5:73:87:10:2d:66:29:40:b3:
                    6b:c4:e7:a2:be:c6:ec:41:ad:d1:97:39:cc:08:a6:
                    be:df:58:73:bb:6c:70:3b:6c:4f:c7:5d:bc:d3:3b:
                    a1:68:66:59:9f:21:8e:0d:26:84:bf:f4:10:2c:90:
                    94:be:32:84:a9:f2:38:c9:8c:48:68:d8:a9:30:b8:
                    26:23:17:5c:16:da:d0:8a:41:e8:f2:b0:cb:7a:4f:
                    28:87:1f:e2:2e:7f:16:80:95:80:b1:db:be:80:65:
                    42:a1:37:84:f5:76:8c:9f:60:b4:05:e5:de:2a:17:
                    0c:c0:69:f1:65:07:d8:44:c3:f3:21:9e:c6:ae:af:
                    4f:f4:0e:b6:8a:e0:c9:41:18:6b:7a:19:35:42:a9:
                    c7:55:9a:02:65:ff:40:b8:23:8c:ac:a8:0f:a3:3e:
                    f0:67:e6:c9:f0:9b:c2:c0:56:27:a1:8d:9d:fc:a9:
                    fa:ac:75:28:23:9b:0e:e6:d2:fa:b9:ba:aa:57:9b:
                    37:a0:6a:f8:8e:06:38:d7:f6:e2:fa:b4:6e:79:3c:
                    a4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:14:D7:41:D6:CC:F7:70:82:C8:8A:3D:42:B7:BA:97:C8:E1:C7:1A
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38362e302f32332d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:5a:80:ba:6f:d8:6b:fd:da:61:b1:86:5a:02:43:b5:0f:4e:
         3f:73:b6:55:30:b9:99:12:0b:6f:31:fc:19:13:df:c8:6e:6b:
         85:69:e9:cc:ef:0e:61:39:91:1e:96:dd:2d:5e:a4:b8:2e:33:
         75:b1:4a:cc:a9:0c:62:19:e1:d8:4e:5c:7b:16:ad:68:ba:4b:
         92:4f:9f:26:81:8b:58:b5:52:4b:c2:64:3d:f4:c8:6f:2c:5b:
         b9:cb:88:80:1e:1f:b8:52:4e:f6:88:f0:53:b7:d0:93:19:ea:
         bd:05:8e:23:26:df:ec:4d:88:af:3e:f5:89:bc:24:92:ed:c9:
         95:ab:c2:e7:47:de:34:50:c2:88:b1:bb:55:ca:57:a3:55:51:
         6d:90:b8:65:d1:33:67:53:1c:7a:33:fa:09:a5:87:81:f8:cb:
         60:6f:6e:48:b1:bc:d5:95:df:40:23:d4:1a:0c:64:2e:c0:36:
         0d:65:c8:32:01:c8:26:0d:29:7e:8d:36:98:c3:9f:cd:c9:c7:
         2f:ee:ab:2e:24:e9:e8:04:d7:3c:c3:05:8c:d0:79:f1:c1:a5:
         0e:f7:65:b2:18:c3:b8:6a:80:96:2d:6d:94:b9:58:0e:f1:c7:
         31:15:b3:32:b5:ce:a5:74:7e:d7:a0:0d:a2:aa:aa:d3:4d:75:
         84:fa:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:53:39 2025 by rpki-client