Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          zHmbrSxHH0MIXe7MKENaS3prnjNm7LNzYAhrvWDg058=
Subject key identifier:   75:81:20:D1:9C:86:17:82:D5:0A:B0:D3:8D:45:B8:71:52:C4:E1:FA
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5E507BCD512D193FB0F23FF9615AB581B3A2DB74
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
Signing time:             Sat 21 Jun 2025 09:22:15 +0000
ROA not before:           Sat 21 Jun 2025 09:17:15 +0000
ROA not after:            Sat 20 Jun 2026 09:22:15 +0000
asID:                     36530
IP address blocks:        67.210.105.0/24 maxlen: 24
                          192.228.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:50:7b:cd:51:2d:19:3f:b0:f2:3f:f9:61:5a:b5:81:b3:a2:db:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 21 09:17:15 2025 GMT
            Not After : Jun 20 09:22:15 2026 GMT
        Subject: CN=758120D19C861782D50AB0D38D45B87152C4E1FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8d:2c:8e:44:5f:f5:6e:49:48:26:1f:3e:66:
                    47:ee:17:f2:f3:88:b9:fa:d3:95:55:a2:b3:65:58:
                    cc:9b:c1:eb:4c:1a:8a:4d:2b:d3:65:89:db:70:55:
                    69:0f:e2:48:0d:ab:85:c6:63:1b:89:e0:84:f3:9c:
                    ed:24:70:fc:23:e8:df:55:c4:34:d8:f7:b3:da:27:
                    e4:70:12:cc:0d:90:10:60:05:6c:81:77:1b:14:8b:
                    9d:de:77:19:54:37:7e:ac:a8:bc:ac:b7:36:e2:15:
                    4a:b9:57:2c:d3:36:4f:66:b6:01:b0:86:67:19:b2:
                    41:ff:12:fb:9d:e3:59:20:b1:98:66:fe:3f:2a:b9:
                    8e:f8:dc:e3:a8:a7:93:93:ad:4d:08:c7:e8:c7:39:
                    90:77:87:fb:03:dc:8e:ee:b0:8b:a6:07:5b:69:c6:
                    a9:52:5e:c0:b7:3d:8b:50:e7:84:09:98:cd:93:56:
                    1d:fb:00:87:86:c7:fe:1f:51:76:02:ad:d1:64:b4:
                    ba:e1:df:12:32:9e:6f:53:50:4c:bc:9e:04:6d:8f:
                    b1:e3:96:4c:b4:25:6d:a6:00:77:9b:3c:d3:42:4a:
                    5c:9b:93:77:3a:70:b8:4d:4d:88:1b:2e:35:67:58:
                    ef:45:d3:41:7e:b5:04:34:58:22:9f:ff:25:78:19:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:81:20:D1:9C:86:17:82:D5:0A:B0:D3:8D:45:B8:71:52:C4:E1:FA
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.105.0/24
                  192.228.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3c:99:6c:ee:9b:d1:cf:7a:84:9c:46:d2:32:e9:70:75:83:
         6d:6b:5c:2b:5b:fc:41:67:70:63:64:06:28:6c:26:3b:d4:8f:
         3d:d2:c0:22:45:8f:76:9a:e4:d4:b7:ee:a1:e5:c4:d2:a2:ac:
         6c:58:83:3c:ce:7f:15:b8:4b:93:5c:d3:3c:a9:a7:c9:82:c0:
         af:af:05:47:bb:4f:b7:7f:7e:e4:9b:f0:e8:02:b1:98:4a:54:
         a9:3a:fc:aa:46:08:2d:b0:13:fe:80:0c:01:78:4e:46:47:81:
         50:72:82:b7:93:92:96:b1:06:7d:08:7b:ea:9d:7f:04:a0:5d:
         4c:79:02:ef:10:57:37:10:51:75:23:0c:54:41:a9:a7:16:c4:
         10:36:a5:85:c5:64:2d:c5:43:bf:c2:23:a7:ad:c2:b8:26:e9:
         e5:60:9a:fd:44:96:10:5d:ea:df:3c:ab:a5:e8:e9:6f:ce:54:
         53:8e:11:42:2c:f4:ae:5e:34:7d:bc:27:f0:25:61:93:23:df:
         c5:68:9f:24:5e:7a:fd:12:67:ba:6f:4e:ec:25:5d:b8:9e:47:
         74:02:52:85:41:a2:3d:74:ac:b0:f5:39:4c:d1:73:af:a1:a8:
         58:3b:32:96:e7:b7:f8:cd:ab:99:5e:10:25:90:d5:27:d8:a9:
         72:39:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:45:52 2025 by rpki-client