Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20343031373736.roa
File:                     36392e3136362e3232332e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier:          y1UWIgoDIL+E5nnQ+ndMwK7hy6R5Xe0j82MyPZ8MqsQ=
Subject key identifier:   56:0D:D3:98:AC:1B:3A:E4:50:01:B2:0E:0E:50:CD:6B:14:41:E8:11
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       08B7E4ABEAC977002BE62C22755A63DB25DD274C
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20343031373736.roa
Signing time:             Thu 26 Mar 2026 11:36:41 +0000
ROA not before:           Thu 26 Mar 2026 11:31:41 +0000
ROA not after:            Thu 25 Mar 2027 11:36:41 +0000
asID:                     401776
IP address blocks:        69.166.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:e4:ab:ea:c9:77:00:2b:e6:2c:22:75:5a:63:db:25:dd:27:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Mar 26 11:31:41 2026 GMT
            Not After : Mar 25 11:36:41 2027 GMT
        Subject: CN=560DD398AC1B3AE45001B20E0E50CD6B1441E811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:cd:ed:4d:36:94:50:3f:80:07:d0:ea:00:
                    ba:b6:db:57:a7:72:e6:5a:fb:d9:97:57:1c:9a:ce:
                    ec:97:48:97:1b:4b:ba:4b:6d:3b:60:fb:56:43:9a:
                    68:42:1a:4a:3c:2e:81:02:f4:d2:55:4b:80:53:62:
                    93:6b:b2:a4:6a:31:f7:32:90:0e:ac:ca:87:74:9f:
                    18:95:27:da:1f:8d:26:09:49:a6:4f:e0:56:d3:6f:
                    e8:b2:a7:81:3c:d6:0e:b4:d8:eb:b7:56:cb:07:9c:
                    eb:69:c6:7d:ef:59:84:03:21:b8:ea:3a:c5:95:72:
                    ce:17:be:c9:54:d6:38:63:36:56:ae:e6:f2:5b:46:
                    14:ae:fe:a8:29:6b:dc:11:79:5a:e8:2c:f2:5d:3e:
                    33:e0:17:f6:da:14:db:e0:fe:9d:0f:eb:9e:ec:f7:
                    09:77:b1:ab:8d:88:71:ad:d9:1c:40:53:48:99:f4:
                    17:b2:39:80:66:32:26:52:95:d4:f1:29:20:6a:1e:
                    fd:c9:98:0a:2f:b7:17:6e:28:74:6a:dc:c5:84:f1:
                    88:39:b9:ff:3c:1b:ec:f0:80:bc:90:ff:fe:b5:7a:
                    ac:e0:24:e8:f9:10:5c:c6:bd:7b:0c:fd:ca:f9:91:
                    9a:b0:dd:c6:eb:a5:b0:66:ce:f4:86:74:c3:c9:df:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0D:D3:98:AC:1B:3A:E4:50:01:B2:0E:0E:50:CD:6B:14:41:E8:11
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20343031373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:4f:e1:84:41:f5:4f:db:74:7b:18:29:5c:a0:82:79:b0:
         3d:fb:4b:52:2a:ac:8e:4f:ec:89:79:b6:3a:35:4d:9f:88:d5:
         29:70:32:48:47:cf:3c:b2:81:81:f1:54:a9:89:7b:da:af:e2:
         59:87:6c:92:52:07:62:5a:17:cc:95:74:43:73:b2:92:21:a0:
         ac:57:97:6a:b9:38:6a:8e:7c:54:8b:d0:18:25:e2:37:81:d5:
         45:08:4c:d7:fa:a5:e8:66:9c:97:df:a4:bb:2a:c7:5d:93:97:
         48:57:7c:80:8b:9c:38:95:4b:83:47:d3:06:46:dc:be:85:d8:
         75:9d:5f:e0:28:17:16:d0:9a:c2:47:6e:d9:25:d5:b5:f1:14:
         6c:d4:83:eb:02:1f:06:d9:f0:44:85:28:9e:24:28:67:a2:f0:
         20:95:aa:a9:c8:db:55:6e:09:19:00:51:d5:c6:60:d5:36:1c:
         ec:3a:f7:c8:53:b5:fe:26:e4:bd:18:ca:cb:22:6d:8b:26:86:
         fe:80:94:50:8e:29:f6:04:6d:78:2d:a0:b8:43:ba:61:85:5a:
         d2:7b:fe:e2:89:04:8a:1c:7e:b6:07:d2:ac:6d:f2:46:b5:b6:
         26:98:b8:3c:08:ef:8e:37:7c:e9:94:3b:a6:56:07:3e:2d:29:
         c1:d8:52:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:45 2026 by rpki-client