Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137362e302f32342d3234203d3e2039333034.roa
File:                     36342e35372e3137362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          JTTLBoa0VLn7izKIwCP8igOFDNel4kZpHkOqhAunmuo=
Subject key identifier:   4A:02:5C:A8:CC:3E:81:75:D3:16:AA:84:A3:BF:C3:6D:88:53:CF:E1
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       0D244082F195A69F8F68A715B23241DCEEE3E3A7
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137362e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 17 Aug 2025 16:26:54 +0000
ROA not before:           Sun 17 Aug 2025 16:21:54 +0000
ROA not after:            Sun 16 Aug 2026 16:26:54 +0000
asID:                     9304
IP address blocks:        64.57.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:24:40:82:f1:95:a6:9f:8f:68:a7:15:b2:32:41:dc:ee:e3:e3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 17 16:21:54 2025 GMT
            Not After : Aug 16 16:26:54 2026 GMT
        Subject: CN=4A025CA8CC3E8175D316AA84A3BFC36D8853CFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:47:43:af:91:b5:2b:b0:22:bd:bd:67:fb:
                    5d:40:5c:d9:86:69:99:55:27:26:b5:e0:a5:86:15:
                    d8:a8:92:18:af:a1:0d:8a:c5:f8:76:91:31:25:f5:
                    f3:b2:5d:a3:e8:0a:9a:21:5a:1b:1c:1a:04:80:14:
                    bd:05:a2:1b:f6:b2:96:19:58:78:54:4c:60:58:cb:
                    47:70:ea:c5:95:0d:e3:f8:08:7b:73:0c:46:91:f7:
                    14:f5:bc:4a:53:6a:ec:c5:85:46:fe:22:32:4a:08:
                    1e:6d:61:62:8a:3e:ad:07:85:46:24:0b:dd:4a:6d:
                    42:65:82:f9:75:b3:36:49:e4:26:63:8e:10:18:05:
                    52:54:2c:b6:e4:f4:9d:b3:5f:c5:d1:fb:90:f6:e8:
                    b1:5e:82:7d:37:79:6e:8f:29:0f:c0:11:a2:00:8b:
                    d4:9d:a5:31:91:96:b0:36:5f:ae:91:bf:85:5d:96:
                    57:4b:07:f8:2d:b8:ea:68:50:8a:84:07:4b:5b:72:
                    ac:a4:f0:b3:c3:bb:a1:24:e4:1a:fd:c9:20:58:2b:
                    45:56:de:c8:c8:29:7b:21:d5:45:0f:0b:1a:5b:99:
                    22:85:e2:41:b3:93:48:52:30:99:0c:77:d0:63:f4:
                    00:e4:5d:a8:10:9e:1f:01:e7:1c:cd:d7:aa:da:aa:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:02:5C:A8:CC:3E:81:75:D3:16:AA:84:A3:BF:C3:6D:88:53:CF:E1
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:5e:27:a9:8c:ca:ae:ae:72:f1:bd:db:6b:cb:76:b1:1e:39:
         b4:91:c3:78:d9:4d:27:04:d4:f1:56:37:f6:d5:ad:55:52:0c:
         fd:02:57:50:46:21:73:c4:a5:6a:5a:83:6e:9f:53:00:34:8b:
         84:aa:3a:c2:d6:26:7b:72:54:90:34:25:cf:18:ba:d2:73:2a:
         a4:c3:06:22:cb:1e:eb:26:6b:da:18:b4:2e:e3:d3:ae:d1:66:
         c5:54:01:b1:fb:c4:40:49:16:6c:d2:f6:fe:9f:d5:95:82:79:
         bb:51:d1:45:70:6a:9e:89:d9:15:5b:a6:c1:63:61:ca:e3:e5:
         0b:e2:7d:64:ef:23:b4:9f:36:0c:66:0c:c9:60:56:59:5e:c5:
         92:c3:31:34:89:e0:f4:32:51:02:10:e1:19:6d:2b:88:87:58:
         ac:a8:7a:2e:79:a2:17:86:c8:73:69:27:5c:44:d7:45:2f:28:
         45:06:75:7c:79:d7:fb:3e:25:94:a8:e0:16:0f:c0:92:b0:64:
         9a:fb:7e:c5:46:9c:0b:c2:b8:ed:38:2f:aa:c2:83:45:01:15:
         1b:21:a7:35:68:6b:94:fa:de:3a:f5:9f:6e:5a:f6:40:48:10:
         65:cf:ee:8a:5c:ba:2e:e1:88:86:93:06:8d:78:1e:d4:a1:d3:
         29:62:d4:4b
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUDSRAgvGVpp+PaKcVsjJB3O7j46cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVl
NjZhNzZkOGI3YTY4ZTAwNDIwHhcNMjUwODE3MTYyMTU0WhcNMjYwODE2MTYyNjU0
WjAzMTEwLwYDVQQDEyg0QTAyNUNBOENDM0U4MTc1RDMxNkFBODRBM0JGQzM2RDg4
NTNDRkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdVHQ6+RtSuw
Ir29Z/tdQFzZhmmZVScmteClhhXYqJIYr6ENisX4dpExJfXzsl2j6AqaIVobHBoE
gBS9BaIb9rKWGVh4VExgWMtHcOrFlQ3j+Ah7cwxGkfcU9bxKU2rsxYVG/iIySgge
bWFiij6tB4VGJAvdSm1CZYL5dbM2SeQmY44QGAVSVCy25PSds1/F0fuQ9uixXoJ9
N3lujykPwBGiAIvUnaUxkZawNl+ukb+FXZZXSwf4LbjqaFCKhAdLW3KspPCzw7uh
JOQa/ckgWCtFVt7IyCl7IdVFDwsaW5kiheJBs5NIUjCZDHfQY/QA5F2oEJ4fAecc
zdeq2qqeQwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEoCXKjMPoF10xaqhKO/w22I
U8/hMB8GA1UdIwQYMBaAFH4sk1t1TACx6AQ7u3EhzDtarSSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2Zjg3OTQ1MzAyLzAv
N0UyQzkzNUI3NTRDMDBCMUU4MDQzQkJCNzEyMUNDM0I1QUFEMjQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcwLWMwNGVkNjk5MGMxMy9lYmQx
ZGM0Mzc4Mjg0NDA5NWJmZmVkZTZkY2I0NDI0ZWU2NmE3NmQ4YjdhNjhlMDA0Mi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2
Zjg3OTQ1MzAyLzAvMzYzNDJlMzUzNzJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAObAwDQYJKoZIhvcNAQELBQADggEB
AAheJ6mMyq6ucvG922vLdrEeObSRw3jZTScE1PFWN/bVrVVSDP0CV1BGIXPEpWpa
g26fUwA0i4SqOsLWJntyVJA0Jc8YutJzKqTDBiLLHusma9oYtC7j067RZsVUAbH7
xEBJFmzS9v6f1ZWCebtR0UVwap6J2RVbpsFjYcrj5QvifWTvI7SfNgxmDMlgVlle
xZLDMTSJ4PQyUQIQ4RltK4iHWKyoei55oheGyHNpJ1xE10UvKEUGdXx51/s+JZSo
4BYPwJKwZJr7fsVGnAvCuO04L6rCg0UBFRshpzVoa5T63jr1n25a9kBIEGXP7opc
ui7hiIaTBo14HtSh0yli1Es=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:52 2025 by rpki-client