Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32322d3234203d3e20383334.roa
File:                     36342e35372e3138342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          Zfj8JwFOJ1Sa5i0DTXLMvzZP8ubfKTFcEVK98CyTIog=
Subject key identifier:   7F:CB:CF:5B:C1:E1:7D:CD:01:F9:D9:45:D3:FC:6A:D4:D3:B0:34:04
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       74D3A52EE583E5BB14CDE238AEC78C0E3519BED5
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32322d3234203d3e20383334.roa
Signing time:             Sat 14 Mar 2026 02:04:05 +0000
ROA not before:           Sat 14 Mar 2026 01:59:05 +0000
ROA not after:            Sat 13 Mar 2027 02:04:05 +0000
asID:                     834
IP address blocks:        64.57.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:a5:2e:e5:83:e5:bb:14:cd:e2:38:ae:c7:8c:0e:35:19:be:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Mar 14 01:59:05 2026 GMT
            Not After : Mar 13 02:04:05 2027 GMT
        Subject: CN=7FCBCF5BC1E17DCD01F9D945D3FC6AD4D3B03404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0e:7f:73:1c:c4:ed:0f:7b:19:cf:1c:e7:97:
                    83:27:55:c2:43:6a:41:ba:2a:f4:59:71:d7:c2:90:
                    d1:a5:42:5f:2b:8a:f5:2e:31:75:86:e4:d3:e8:f0:
                    74:50:e3:84:a5:1d:64:e6:74:5a:22:46:22:df:b0:
                    3b:2d:66:44:bb:e9:ff:12:b1:7e:4b:a5:42:f7:e7:
                    70:67:b4:37:54:83:12:8a:69:a5:8f:8c:2b:a7:0c:
                    f3:69:7a:0c:a5:b4:94:86:8e:fc:bd:91:d5:b7:b6:
                    97:ce:5b:ac:97:2d:29:0d:88:dd:a2:45:d3:b1:55:
                    0c:f3:af:f6:94:d5:23:51:1a:62:9a:91:de:3f:f2:
                    04:40:b1:66:b6:64:2e:40:f3:e2:f1:a6:19:47:38:
                    36:82:3c:df:ea:2b:e8:12:0c:04:65:57:eb:1b:b6:
                    40:94:c6:00:9f:43:3b:f5:83:4f:88:9a:4c:69:b2:
                    05:15:64:e3:f4:d2:0e:1d:88:dd:76:28:18:45:81:
                    e3:81:02:d1:bb:00:cb:56:de:c4:a6:ec:a3:3a:27:
                    9b:b0:d3:d2:b1:c0:78:c3:bf:a6:e6:9c:0d:61:4e:
                    13:b0:6b:79:97:70:41:70:69:f4:95:c4:d0:7c:07:
                    5d:2c:b8:57:70:ad:9e:e0:19:11:d4:53:5d:12:00:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CB:CF:5B:C1:E1:7D:CD:01:F9:D9:45:D3:FC:6A:D4:D3:B0:34:04
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3138342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:ce:ba:8e:d2:61:80:c0:12:d3:d1:86:aa:f3:f1:90:b2:26:
         81:e2:05:6d:9b:87:e3:91:9a:43:2c:c5:c9:c2:ce:23:0c:ea:
         d3:d9:5d:0d:86:cb:bb:f5:5d:67:8b:6f:a2:13:24:a2:c4:2b:
         16:60:9f:57:1b:09:42:1c:d0:d4:23:46:cc:a9:75:73:57:7e:
         6f:45:bb:6c:0c:fd:32:0f:e5:3c:37:9b:fa:98:76:e5:c2:f0:
         b2:3a:a4:ea:9b:31:a2:55:e8:1c:a1:d7:6d:48:2a:28:56:4c:
         b5:63:66:47:7c:0e:88:6f:98:03:ac:64:f5:73:85:13:04:a0:
         fe:1b:3a:db:84:2d:d8:01:3a:8d:9a:c7:07:9e:1e:9d:d5:65:
         cb:27:31:e8:da:53:74:af:4f:24:b8:f9:d3:8f:ab:20:09:c8:
         e3:56:53:71:fa:f5:ad:45:8d:1b:1a:d9:6d:fa:ab:fb:d4:c1:
         f6:ab:de:ff:4d:06:da:b3:65:38:64:9c:1b:25:73:62:57:df:
         c5:15:a3:22:24:74:04:d2:e0:e6:e4:ff:da:1e:5e:0d:cd:c6:
         5a:76:ab:bc:d6:79:4a:fd:c2:66:c9:8c:92:0c:49:94:13:21:
         fb:f1:64:6a:2a:f2:d7:b8:16:a6:e6:98:ba:8e:07:08:c6:0e:
         31:3c:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:23 2026 by rpki-client