Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
File:                     36342e3235332e39322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          1qG/D0WuXGx07P5qLEk3uPNNtHcq+vcJJleN9e+DyME=
Subject key identifier:   1A:58:DF:02:27:57:F4:91:68:B4:18:E8:D6:9D:5A:22:02:77:1E:AE
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       71DB7B632374CB6511D43FF0CFA9DF58C7ADEA05
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 19 Sep 2025 07:29:45 +0000
ROA not before:           Fri 19 Sep 2025 07:24:45 +0000
ROA not after:            Fri 18 Sep 2026 07:29:45 +0000
asID:                     21859
IP address blocks:        64.253.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:db:7b:63:23:74:cb:65:11:d4:3f:f0:cf:a9:df:58:c7:ad:ea:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Sep 19 07:24:45 2025 GMT
            Not After : Sep 18 07:29:45 2026 GMT
        Subject: CN=1A58DF022757F49168B418E8D69D5A2202771EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e1:76:23:5b:4d:f1:fc:5d:15:11:ba:71:fe:
                    69:8e:46:fb:7b:e9:a1:36:a4:18:a1:c5:c9:c0:ca:
                    29:52:04:4d:41:59:21:37:5a:47:49:15:fb:54:60:
                    e4:62:d0:ea:90:87:8c:a0:c0:b5:34:7e:9e:56:88:
                    b5:6e:bf:10:f2:d5:2d:99:ad:45:be:e9:ea:54:5e:
                    e8:d5:32:ad:b2:31:86:dc:94:85:91:62:f8:b9:d2:
                    d3:0c:e7:4e:95:63:bc:d8:7f:d6:7f:be:5e:e4:09:
                    53:28:17:52:8f:71:5a:b0:99:f4:d8:b1:a3:60:b8:
                    93:91:50:34:30:bf:1a:24:23:05:b8:f2:b9:d3:9d:
                    48:9f:c8:b1:c4:07:f7:55:ac:29:b9:e8:e3:d4:8f:
                    22:5f:00:cd:30:c4:99:bd:84:49:5d:bf:1b:89:ae:
                    73:5c:66:77:ef:1d:b9:9f:36:1f:c1:39:7c:4c:9e:
                    b8:4e:c6:11:63:df:02:92:0a:4a:4c:f0:84:cf:57:
                    4d:68:07:91:0d:ba:4c:cf:36:a3:b7:41:bb:13:d0:
                    27:0d:c6:cc:be:e6:8b:ce:26:9c:a1:ab:59:b4:90:
                    c8:25:63:97:62:c9:6b:00:c0:73:35:28:2d:29:56:
                    49:a9:4b:61:af:83:31:fd:3a:60:33:3d:fe:06:e8:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:58:DF:02:27:57:F4:91:68:B4:18:E8:D6:9D:5A:22:02:77:1E:AE
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39322e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:00:c9:ab:79:b9:9d:37:3d:c1:10:3b:92:0a:9c:78:c3:d0:
         e4:79:eb:41:de:95:71:4a:6c:10:a3:74:b4:01:f6:f9:f4:3e:
         d9:1f:ac:ff:1b:08:a1:d0:14:f1:43:c9:e6:68:fc:e5:38:60:
         ca:5b:3a:e1:6f:92:0d:00:07:53:c1:89:0d:54:b5:d6:cf:1e:
         1a:c8:8b:f0:1e:c3:d7:5f:07:83:de:0d:96:22:58:58:18:75:
         34:b2:54:d0:14:84:ac:81:89:bb:78:df:19:f1:02:e5:de:26:
         71:0d:49:56:73:85:35:78:d7:d4:0b:2c:cc:ab:95:cb:b2:e8:
         32:4a:5c:83:48:f2:8d:e6:1b:af:a1:23:46:45:ed:ed:a8:20:
         23:3c:00:9b:1e:f8:b5:69:84:93:1d:45:9d:05:4b:d4:c9:a4:
         d3:f0:91:0c:78:bb:82:30:eb:d8:8f:53:53:16:23:13:45:a7:
         93:a8:49:16:52:16:9e:5a:a4:29:91:86:da:f1:6c:b1:19:4b:
         7a:0e:e1:e0:f6:95:2f:69:8a:1c:24:b0:6d:c6:32:6d:0b:f8:
         36:78:c2:b8:cc:85:87:75:d5:9b:3a:fc:ee:3f:36:45:fa:cc:
         04:09:42:eb:3a:3a:24:b6:bb:ed:14:a2:a7:60:3a:fa:40:e0:
         84:5a:6e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:05 2025 by rpki-client