Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138312e302f32342d3234203d3e20383334.roa
File:                     36342e35372e3138312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Xt7QEQ+D/n3m7xqsH1QggUkwStRzGll13kLJZPOeFmY=
Subject key identifier:   10:41:29:CD:C6:84:8F:A7:5D:1F:2D:10:E9:2B:B4:7E:DB:94:10:CC
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       12D85ABCC12E9096153017B90A7044C035D2A1E1
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138312e302f32342d3234203d3e20383334.roa
Signing time:             Wed 02 Jul 2025 06:55:57 +0000
ROA not before:           Wed 02 Jul 2025 06:50:57 +0000
ROA not after:            Wed 01 Jul 2026 06:55:57 +0000
asID:                     834
IP address blocks:        64.57.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 05:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d8:5a:bc:c1:2e:90:96:15:30:17:b9:0a:70:44:c0:35:d2:a1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul  2 06:50:57 2025 GMT
            Not After : Jul  1 06:55:57 2026 GMT
        Subject: CN=104129CDC6848FA75D1F2D10E92BB47EDB9410CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:76:15:c9:aa:31:e7:f7:54:3f:4b:72:f8:63:
                    e2:ce:86:77:16:d9:28:09:66:30:4a:00:a0:8f:30:
                    a8:42:27:b6:74:40:b4:3c:7b:f0:b3:93:50:6e:be:
                    cb:97:4b:99:7b:3f:b0:9f:b6:6d:42:46:d4:cd:cc:
                    01:0b:2e:16:ff:6b:15:35:40:65:d5:74:75:40:56:
                    a2:19:c8:45:9a:1f:a1:a4:39:81:73:28:08:cf:7a:
                    04:e7:04:a7:49:60:55:8d:8f:22:f6:1e:fd:8f:3e:
                    01:de:ba:ab:cc:be:ff:a9:5c:90:a4:3d:f0:3c:4e:
                    cf:0e:bd:b2:a6:d1:83:1d:d0:d7:d6:3b:16:2b:21:
                    e2:fd:32:07:b0:06:12:9f:a1:4f:aa:f4:5a:d6:48:
                    72:b1:7f:5a:0b:24:07:ae:e3:85:50:32:f0:97:7f:
                    c9:08:84:98:bd:84:79:2c:ad:0b:5a:4c:a3:8c:a6:
                    1b:68:db:9b:97:55:c7:67:2e:ec:e5:c2:f5:32:e2:
                    9a:80:0f:a6:1c:76:6b:f5:ab:f7:d1:e9:4a:4e:5b:
                    2d:d9:09:df:b4:83:0a:05:7f:24:69:dd:3d:95:49:
                    dc:d8:d5:bf:92:d7:7a:40:ee:3d:ca:72:c9:42:59:
                    ff:20:95:ac:e4:a8:ce:76:56:4c:d0:70:f3:af:69:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:29:CD:C6:84:8F:A7:5D:1F:2D:10:E9:2B:B4:7E:DB:94:10:CC
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:7f:d5:ce:63:df:c7:e4:4f:75:92:1e:7e:1e:5e:08:a9:69:
         3d:aa:4b:9d:e1:cd:6f:5b:13:95:48:16:24:6e:2b:0b:f9:40:
         eb:dc:58:12:49:de:e2:cd:8d:26:bc:12:e1:4e:10:14:84:6c:
         89:33:3d:03:f0:0b:5e:f4:29:7c:ee:cd:85:f3:6e:97:06:e9:
         d2:11:f2:60:ec:9e:43:2b:18:71:8c:c8:30:22:f9:99:94:dc:
         e0:d9:53:2a:0f:f2:c0:bc:d3:73:69:33:d1:85:fb:d2:37:76:
         84:d8:ed:8f:94:99:02:70:8f:b6:87:d9:94:16:d5:e0:5d:67:
         71:e3:04:cd:55:ca:ec:33:47:69:2d:9a:4a:cf:17:24:94:37:
         e2:3d:75:1c:3b:7c:b0:d0:06:f2:bd:3b:ad:2f:5a:b6:e4:a1:
         6e:f8:53:1d:e1:6c:36:fe:48:fd:2d:26:0d:73:a6:ff:32:ad:
         67:51:bd:1f:4c:99:30:46:20:4d:85:8a:8b:b7:f4:4e:e1:37:
         20:2f:38:cf:e2:5a:f2:41:1d:57:d7:24:ab:43:90:1d:62:e0:
         a3:91:88:78:d6:a9:04:d5:2c:25:22:52:d4:6e:df:3f:74:e0:
         97:e9:a8:af:9a:00:6c:02:68:d4:10:d7:08:03:18:4e:c9:6a:
         50:8e:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 10:50:40 2025 by rpki-client