Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3332203d3e203332353935.roa
File:                     36342e34392e32382e302f32342d3332203d3e203332353935.roa (raw, json)
Hash identifier:          pbAROUD3TwbbcrrxrMPXx5rAH5eNJWYkaxl4CXjxsd4=
Subject key identifier:   86:1B:B1:2E:42:6C:E3:69:A0:36:0E:EF:94:21:D0:67:D7:85:83:27
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       03F050F176EFEEAF97149390F48FD1BF9993B506
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3332203d3e203332353935.roa
Signing time:             Sun 11 May 2025 08:43:28 +0000
ROA not before:           Sun 11 May 2025 08:38:28 +0000
ROA not after:            Sun 10 May 2026 08:43:28 +0000
asID:                     32595
IP address blocks:        64.49.28.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 06:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:50:f1:76:ef:ee:af:97:14:93:90:f4:8f:d1:bf:99:93:b5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: May 11 08:38:28 2025 GMT
            Not After : May 10 08:43:28 2026 GMT
        Subject: CN=861BB12E426CE369A0360EEF9421D067D7858327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:4e:e2:a5:8e:1e:0f:75:bd:ef:cf:78:58:
                    c1:fa:49:ac:3b:36:0e:2f:93:c2:f7:06:c2:11:71:
                    37:d3:1c:08:20:ef:b6:d1:56:71:d3:89:25:83:af:
                    0c:26:1a:17:8d:dc:b7:93:65:53:27:08:d5:a2:d0:
                    22:c5:c7:0f:e8:34:9f:53:28:38:02:6c:a3:cd:f0:
                    ce:dc:64:4f:d4:41:62:28:7a:5c:96:78:9b:69:32:
                    16:e3:c0:bd:dd:f7:2d:bc:0b:c3:7c:46:3f:b0:b4:
                    fa:cf:20:08:83:a3:1a:51:d6:ee:ea:c8:d6:5c:c7:
                    b3:29:4a:39:07:30:c5:48:6a:be:54:7d:ed:75:f1:
                    99:31:2e:5b:e4:70:cd:91:2c:70:8c:04:7e:bb:8c:
                    dd:ae:ea:74:c7:d7:f0:08:0b:dc:22:20:0b:14:da:
                    13:8b:ec:dd:3b:69:80:81:41:5e:d9:b9:0b:2c:53:
                    f8:f7:51:d4:dd:3b:9b:97:60:74:a1:b2:ff:2a:46:
                    24:2e:4f:66:b0:55:4d:36:2a:fb:0c:f7:e0:41:24:
                    bc:91:44:c3:d2:48:50:9e:54:93:53:42:8f:91:9d:
                    8c:00:3f:82:c1:02:81:67:e8:19:18:27:13:5c:c1:
                    db:8b:75:95:b0:05:70:b8:6a:7e:03:25:09:1e:18:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:B1:2E:42:6C:E3:69:A0:36:0E:EF:94:21:D0:67:D7:85:83:27
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/36342e34392e32382e302f32342d3332203d3e203332353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:03:67:d2:ed:64:00:33:5c:a3:5b:c0:ea:ac:a3:8a:4f:
         c2:7d:ea:ce:54:a8:8c:86:70:2d:3d:01:18:f6:ab:67:5a:ec:
         9c:c7:28:39:2a:6d:a5:98:6c:1e:60:ac:cf:23:23:f3:2b:db:
         37:aa:b2:0a:c7:a8:81:cc:a1:06:fe:62:e9:06:cd:2c:26:4d:
         a2:0f:8e:6a:5c:fd:12:00:df:20:2a:51:83:e7:08:c6:70:00:
         fc:a0:9a:04:06:f5:45:d4:1f:8c:f9:08:91:c3:23:30:14:6c:
         56:9e:1c:42:35:0b:30:d2:2c:a0:dc:61:15:62:e6:6e:8b:ee:
         3e:c3:ae:4f:95:7e:24:06:9d:21:b6:1d:91:98:ca:18:35:b5:
         8f:fa:6c:39:24:6d:d2:8a:47:76:7d:e7:f0:11:e7:1d:2b:f2:
         73:b0:cb:ac:db:58:b1:cc:84:f2:44:d9:5c:e7:34:0b:61:65:
         9f:44:fa:ac:3a:56:e6:38:78:cb:ce:8a:41:1c:9a:41:59:38:
         49:f0:1d:4a:d6:44:d9:e0:85:eb:d0:67:4a:5e:48:e6:b6:a8:
         80:e2:1b:11:79:3b:81:ba:99:93:27:ec:92:ad:2c:f9:15:30:
         5f:a0:6a:eb:2e:98:1f:48:11:5d:72:2f:87:55:83:5c:50:64:
         2a:6d:d5:64
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUA/BQ8Xbv7q+XFJOQ9I/Rv5mTtQYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl
NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjUwNTExMDgzODI4WhcNMjYwNTEwMDg0MzI4
WjAzMTEwLwYDVQQDEyg4NjFCQjEyRTQyNkNFMzY5QTAzNjBFRUY5NDIxRDA2N0Q3
ODU4MzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HlO4qWOHg91
ve/PeFjB+kmsOzYOL5PC9wbCEXE30xwIIO+20VZx04klg68MJhoXjdy3k2VTJwjV
otAixccP6DSfUyg4AmyjzfDO3GRP1EFiKHpclnibaTIW48C93fctvAvDfEY/sLT6
zyAIg6MaUdbu6sjWXMezKUo5BzDFSGq+VH3tdfGZMS5b5HDNkSxwjAR+u4zdrup0
x9fwCAvcIiALFNoTi+zdO2mAgUFe2bkLLFP491HU3Tubl2B0obL/KkYkLk9msFVN
Nir7DPfgQSS8kUTD0khQnlSTU0KPkZ2MAD+CwQKBZ+gZGCcTXMHbi3WVsAVwuGp+
AyUJHhhXMwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFIYbsS5CbONpoDYO75Qh0GfX
hYMnMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv
QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh
Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAy
YTUwYTAzOTEwLzAvMzYzNDJlMzQzOTJlMzIzODJlMzAyZjMyMzQyZDMzMzIyMDNk
M2UyMDMzMzIzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMRwwDQYJKoZIhvcNAQELBQADggEB
AF7xA2fS7WQAM1yjW8DqrKOKT8J96s5UqIyGcC09ARj2q2da7JzHKDkqbaWYbB5g
rM8jI/Mr2zeqsgrHqIHMoQb+YukGzSwmTaIPjmpc/RIA3yAqUYPnCMZwAPygmgQG
9UXUH4z5CJHDIzAUbFaeHEI1CzDSLKDcYRVi5m6L7j7Drk+VfiQGnSG2HZGYyhg1
tY/6bDkkbdKKR3Z95/AR5x0r8nOwy6zbWLHMhPJE2VznNAthZZ9E+qw6VuY4eMvO
ikEcmkFZOEnwHUrWRNnghevQZ0peSOa2qIDiGxF5O4G6mZMn7JKtLPkVMF+gausu
mB9IEV1yL4dVg1xQZCpt1WQ=
-----END CERTIFICATE-----
Generated at Tue May 13 00:01:45 2025 by rpki-client