Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
File:                     36342e3235332e39342e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          N7nHULRhLvn3ED7duR2eDhs5/wBVfyzuIinE41cRF+s=
Subject key identifier:   80:F8:AA:8F:15:7E:A6:83:B7:F0:89:F7:6A:84:D5:9A:24:03:76:6D
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       6EF5A9FE2D6DEC85FCAC3084AB8BF25A70A1AA6D
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa
Signing time:             Thu 19 Mar 2026 03:32:34 +0000
ROA not before:           Thu 19 Mar 2026 03:27:34 +0000
ROA not after:            Thu 18 Mar 2027 03:32:34 +0000
asID:                     397423
IP address blocks:        64.253.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f5:a9:fe:2d:6d:ec:85:fc:ac:30:84:ab:8b:f2:5a:70:a1:aa:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Mar 19 03:27:34 2026 GMT
            Not After : Mar 18 03:32:34 2027 GMT
        Subject: CN=80F8AA8F157EA683B7F089F76A84D59A2403766D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:2a:18:a5:b5:d7:d7:57:86:f2:56:ce:bf:
                    b5:a2:9a:73:fc:75:e9:52:a2:2d:58:96:d5:4b:9b:
                    2b:93:ca:4a:6a:42:93:a0:12:e4:ed:b2:20:58:81:
                    75:0e:6a:b7:1c:7e:73:e8:0e:66:01:ff:eb:0a:9c:
                    0b:a1:84:ad:1e:c0:50:c2:99:b8:ec:ec:63:6a:e5:
                    07:87:78:d5:bb:03:7a:bb:2c:bb:c8:ba:6b:6b:bd:
                    c8:8a:da:20:4f:7b:ee:bb:2c:02:4d:24:db:6e:f2:
                    93:c2:56:d3:16:3f:4b:36:02:76:6c:c6:60:71:1a:
                    c1:f4:04:37:d3:eb:20:e1:d6:f1:95:ab:4d:64:61:
                    d4:c6:14:23:75:cd:6e:c7:4c:22:31:4f:6c:83:26:
                    3c:6e:51:1f:2a:2b:70:a6:dc:de:2a:ba:24:d0:c0:
                    e1:cc:38:88:38:71:5d:e7:5a:ef:13:8e:ec:c5:63:
                    31:23:79:62:8a:11:c6:9a:47:97:eb:b2:ee:30:7f:
                    c2:e0:b7:74:8d:0b:01:18:62:42:88:87:ec:be:9a:
                    97:7d:7b:a5:aa:cf:60:7b:bb:c2:dc:81:1e:1a:08:
                    7c:c6:e5:4d:e8:ad:c3:80:cc:c4:ba:b8:c7:48:8c:
                    52:dd:56:f5:ea:ad:8c:de:e5:11:fb:a3:f6:2c:9d:
                    ad:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F8:AA:8F:15:7E:A6:83:B7:F0:89:F7:6A:84:D5:9A:24:03:76:6D
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:93:97:5a:e6:06:d6:41:1c:f1:0a:90:01:7d:75:76:c2:
         3e:97:8c:5f:72:9c:29:ac:76:0f:ee:3f:df:28:58:b2:89:c2:
         3e:b1:ab:ac:df:48:6e:7f:16:fc:42:36:1e:0f:9d:82:e1:c7:
         a4:12:84:71:86:14:a0:fd:75:e5:f7:6d:a5:70:98:6c:59:62:
         46:74:37:a4:ad:8f:6a:24:9e:a8:cd:e6:27:63:c4:a3:65:25:
         ad:9e:12:00:19:55:e2:3b:a0:34:8c:19:40:18:e6:f3:ca:f0:
         e9:6e:c6:d2:80:8c:c1:e4:38:a7:af:26:45:46:34:53:9d:67:
         f0:39:78:38:09:6f:17:09:f5:59:86:d6:b6:32:3b:92:ba:30:
         5f:e2:13:ac:20:f9:c9:ce:a1:59:4d:60:ab:67:a7:96:dc:56:
         77:95:b1:45:08:b7:6b:2c:c1:0c:71:10:c0:89:a3:b6:f4:37:
         63:cb:8e:f4:2c:b4:8a:88:a5:d1:9e:69:ac:1c:03:c8:47:23:
         c5:b7:ea:1c:e6:3a:6d:7a:6e:de:67:80:ad:0b:5d:ef:85:24:
         01:95:53:1d:34:e7:e2:33:f9:53:2b:a0:c2:6b:bf:ee:eb:85:
         73:bf:16:b5:88:de:db:69:1e:5f:4b:1c:3c:73:47:65:a9:87:
         6f:b5:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:30 2026 by rpki-client