Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138312e302f32342d3234203d3e2039333034.roa
File:                     36342e35372e3138312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          c0827UJteKYXCa87OlgXIS22ZUWfBCQqdPy+v12CZH4=
Subject key identifier:   18:A8:32:F1:0C:79:67:F9:A3:36:20:99:51:02:BC:2B:E4:97:92:E8
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       57EDEBDC213A653B9CF977E1F998DB59FD0C910A
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138312e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 15 Aug 2025 07:52:34 +0000
ROA not before:           Fri 15 Aug 2025 07:47:34 +0000
ROA not after:            Fri 14 Aug 2026 07:52:34 +0000
asID:                     9304
IP address blocks:        64.57.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ed:eb:dc:21:3a:65:3b:9c:f9:77:e1:f9:98:db:59:fd:0c:91:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Aug 15 07:47:34 2025 GMT
            Not After : Aug 14 07:52:34 2026 GMT
        Subject: CN=18A832F10C7967F9A33620995102BC2BE49792E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:58:b8:a7:5e:77:42:98:c3:44:07:3f:36:
                    20:f1:c3:51:16:27:f4:aa:79:56:9c:21:d8:be:e8:
                    d9:83:a5:05:fc:73:35:ff:95:73:7f:f6:70:1e:16:
                    5c:b0:db:30:c6:ec:3a:35:15:40:8f:30:51:49:1e:
                    d3:c2:54:ad:67:5b:9d:e7:ba:d3:ca:58:f0:7e:e5:
                    05:25:47:2e:64:aa:79:19:37:38:96:85:c2:02:80:
                    40:8f:2c:fa:49:5f:ff:91:aa:8a:82:0c:e5:94:52:
                    ee:b5:03:95:63:c1:60:1c:a1:dc:87:1c:98:36:6f:
                    fb:ec:af:20:51:f7:f8:e0:f8:69:59:3c:25:a3:7d:
                    bc:5f:6c:44:a1:67:07:3b:2c:b6:17:2f:51:20:73:
                    49:77:1a:e0:b1:1d:cf:39:39:bd:95:ee:55:52:10:
                    af:8d:c2:a5:4d:02:9d:57:04:f7:95:49:dc:8b:7f:
                    39:36:36:1d:1d:62:fd:12:c0:7c:1a:a5:42:e4:a7:
                    3f:99:45:1e:12:0c:99:6c:d5:86:e8:5a:93:1a:f7:
                    58:c9:82:2d:96:38:08:60:da:0e:af:5b:6f:90:f8:
                    d8:4e:15:c5:fe:bc:4f:5e:00:9a:1c:da:3f:57:f8:
                    38:45:ad:17:f0:0c:ec:25:ee:a6:f1:eb:59:be:c4:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A8:32:F1:0C:79:67:F9:A3:36:20:99:51:02:BC:2B:E4:97:92:E8
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138312e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c2:f8:36:36:f3:71:64:4b:77:13:c7:2c:b4:db:bb:30:73:
         eb:8e:36:2b:7a:e8:f9:3a:8b:cf:77:e3:4d:b8:7e:95:de:96:
         a9:d8:29:c7:92:a7:db:32:c7:53:59:93:2e:8f:e5:e9:fd:f1:
         5c:22:61:9f:6f:8f:b6:91:17:68:37:72:19:f9:4d:be:f5:83:
         e4:bf:c1:27:7e:4e:d2:8a:84:47:53:2c:9b:0a:df:fa:3c:db:
         49:31:22:e1:5f:35:ce:c6:0f:8d:9e:b1:c8:01:27:a8:bc:f6:
         0f:e2:b6:1a:a7:6a:48:d7:b1:74:c8:89:1d:91:c7:4c:ab:cd:
         c9:6a:61:bf:37:c4:6f:98:08:57:ad:a8:69:6c:2c:8b:8e:46:
         02:ae:bf:bb:41:1c:e8:3b:6c:82:fa:70:79:67:e6:d3:bd:dc:
         70:dc:af:ef:98:91:a2:28:d3:bd:91:c3:9d:c9:1a:bc:96:fe:
         25:fe:48:90:2e:4c:93:a7:94:d6:be:b3:03:c1:44:94:2e:d8:
         94:9e:7b:a6:d6:75:ff:04:fe:a4:07:2c:92:f0:26:c3:d1:ab:
         79:21:d9:6a:bc:f5:9d:66:81:eb:5c:15:ba:6f:7c:d8:ca:15:
         0c:20:56:0e:2b:d4:2c:9b:cf:dd:78:e4:4c:ce:db:da:a0:04:
         71:f3:4c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:37:51 2025 by rpki-client