Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20383334.roa
File:                     36392e3136362e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KsTco8YkAn59Yq9z04Abmwg726oejTyK2/aCV6M0wKA=
Subject key identifier:   32:69:1C:3C:36:CD:ED:6C:F7:BA:CA:95:D1:BA:76:0A:1B:6A:5F:93
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       7B56CB25A05C4C5B3CE1CFDE30744EE4BFBBDE6D
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20383334.roa
Signing time:             Wed 25 Mar 2026 07:35:11 +0000
ROA not before:           Wed 25 Mar 2026 07:30:11 +0000
ROA not after:            Wed 24 Mar 2027 07:35:11 +0000
asID:                     834
IP address blocks:        69.166.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:56:cb:25:a0:5c:4c:5b:3c:e1:cf:de:30:74:4e:e4:bf:bb:de:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Mar 25 07:30:11 2026 GMT
            Not After : Mar 24 07:35:11 2027 GMT
        Subject: CN=32691C3C36CDED6CF7BACA95D1BA760A1B6A5F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:3c:7c:34:90:46:cc:d2:2b:64:ad:e0:9b:
                    75:72:30:2f:8c:f3:94:49:6a:0c:8e:15:d7:a2:9f:
                    85:80:84:af:f1:40:62:bb:a3:06:9c:84:66:37:21:
                    45:1a:fa:62:13:6a:7a:1a:22:90:d4:5e:d9:a0:68:
                    b8:82:f3:a2:da:a3:44:64:50:00:bc:45:dc:64:06:
                    e1:7e:3e:a1:ed:17:78:8d:c6:08:9a:64:9e:81:90:
                    a3:d3:b5:95:55:64:e7:78:bc:a7:d8:fc:28:c1:a4:
                    ab:85:8f:1c:66:77:f0:cf:18:ee:c7:ee:38:9b:50:
                    3c:42:74:3d:4d:67:da:c5:2f:c8:2f:b6:68:4e:69:
                    17:ff:7c:b7:2c:fa:df:08:64:48:cd:ca:7c:bf:cc:
                    78:aa:ce:f0:06:2d:80:78:15:65:53:66:e8:45:7e:
                    12:10:9d:b6:d8:54:3f:9c:83:03:45:ab:71:d9:76:
                    a3:da:60:b1:69:af:f4:e7:8b:f9:75:bc:29:e8:ab:
                    58:ef:47:43:95:62:cf:6e:86:c4:74:b7:96:25:c1:
                    54:bd:39:3a:fc:d3:d6:09:86:2d:1e:ce:04:89:89:
                    cc:b7:eb:9f:e0:2e:e8:f7:cc:ca:8e:df:96:4d:c1:
                    82:eb:52:c4:08:b6:56:84:54:3a:c1:59:94:38:30:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:1C:3C:36:CD:ED:6C:F7:BA:CA:95:D1:BA:76:0A:1B:6A:5F:93
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:ab:19:85:6f:56:11:c8:9f:58:b5:ba:50:c1:58:ec:cd:75:
         be:a5:c6:f6:95:8f:8e:5c:de:ca:85:25:b4:9f:48:ea:23:56:
         66:4d:ea:64:a9:d8:ef:28:93:07:90:41:82:91:35:f0:b1:df:
         26:f0:a2:7e:c1:ec:80:8f:a8:61:81:d7:f3:36:78:ff:9a:89:
         73:fa:74:7e:7f:c4:84:bc:ad:cc:92:2e:59:49:a3:22:ed:eb:
         dc:2c:b5:61:8f:f2:a5:82:c6:15:73:95:06:04:71:a8:eb:fe:
         f1:37:a1:94:e3:84:de:12:55:4d:6f:97:61:7f:63:e7:2a:3b:
         da:e1:80:56:43:a1:69:a5:53:99:e9:8e:97:7c:7b:18:bf:5d:
         dc:4a:54:cc:7f:29:f6:ee:2f:cd:6d:09:06:b1:9c:5f:93:8b:
         b6:6f:30:71:50:05:a4:74:80:d2:82:65:43:65:35:a8:b3:b9:
         a3:36:bb:a0:c4:de:27:3b:4c:3f:68:13:65:a7:ff:55:62:72:
         de:52:30:0c:5f:36:f5:66:26:57:b3:2a:db:87:bc:e2:ea:42:
         73:49:69:19:91:bf:2b:c8:00:9f:7c:b6:6e:b7:3b:eb:e6:ac:
         20:44:b7:6d:33:7f:73:7a:46:19:13:4c:80:84:d9:07:75:34:
         fe:42:13:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:32 2026 by rpki-client