Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32342e302f32322d3234203d3e20383334.roa
File:                     36342e38342e32342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          KwW8AFfC2Bg7kkJmMICzL8ijLLIaHr9UpMkycOV+qz4=
Subject key identifier:   72:B1:A0:E6:57:8B:1C:67:8E:AF:C1:A0:66:F2:6D:5B:D9:02:6D:A4
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       3E1864206894D2AABDB9894162417F2151C5BB58
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32342e302f32322d3234203d3e20383334.roa
Signing time:             Sat 27 Sep 2025 00:13:55 +0000
ROA not before:           Sat 27 Sep 2025 00:08:55 +0000
ROA not after:            Sat 26 Sep 2026 00:13:55 +0000
asID:                     834
IP address blocks:        64.84.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 22:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:18:64:20:68:94:d2:aa:bd:b9:89:41:62:41:7f:21:51:c5:bb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Sep 27 00:08:55 2025 GMT
            Not After : Sep 26 00:13:55 2026 GMT
        Subject: CN=72B1A0E6578B1C678EAFC1A066F26D5BD9026DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:82:57:d4:bb:8c:f4:e3:d0:a5:1f:f7:1c:e8:
                    63:b4:51:e6:7b:6f:9f:ab:da:b9:de:86:88:de:f0:
                    c3:4c:e8:5a:14:d8:c9:2e:a5:0e:60:d4:80:d5:2b:
                    7b:14:d3:4b:12:a5:de:79:5d:c3:fd:35:fa:ed:ac:
                    7b:02:56:7f:20:35:6f:33:5e:c8:ea:77:11:8c:5d:
                    c7:07:5a:33:ee:71:c7:ec:e3:8e:88:1e:9e:c5:16:
                    82:4b:70:b2:e5:83:00:cf:21:cb:f5:6f:df:59:14:
                    66:64:a0:7a:48:20:3d:09:ee:96:bc:40:57:d0:2c:
                    e3:77:f4:17:c5:8e:2e:ae:8b:d2:1c:32:79:12:da:
                    6d:21:2b:90:ee:0c:91:46:c8:6f:e1:3e:f1:2b:f2:
                    56:3a:dd:b8:66:d4:ad:e7:a2:4f:f5:61:ab:c2:ce:
                    c7:e6:58:73:e5:79:25:d6:11:38:15:0a:38:3f:8d:
                    1a:5e:53:60:de:f6:23:0c:2f:1d:61:7a:6e:72:e2:
                    6e:82:4a:6a:3c:3a:de:e9:d4:9f:3f:1a:fc:2e:88:
                    2b:76:10:9f:e8:e8:9a:3e:c0:11:39:b9:f0:de:bf:
                    7b:7c:cc:83:64:2e:d5:9d:dd:e2:06:47:aa:14:cd:
                    b1:fa:c7:05:33:0a:8b:37:91:51:f4:6c:93:cd:4e:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:A0:E6:57:8B:1C:67:8E:AF:C1:A0:66:F2:6D:5B:D9:02:6D:A4
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:7d:3d:d1:fe:8e:56:f6:d5:5b:0c:13:63:a6:db:49:c5:eb:
         f6:03:6f:b8:62:f8:83:6b:9e:75:0d:fe:6a:90:e4:90:ec:72:
         9d:0d:c2:06:0b:61:23:6e:bd:40:e2:94:88:31:1e:61:57:62:
         41:61:80:d8:ff:32:c5:73:b6:91:4c:e8:6c:ea:7f:1d:7a:56:
         0c:0b:f1:c9:31:b8:a6:4a:0a:e0:e2:86:e9:39:d5:35:4e:14:
         62:cd:48:59:ce:f0:0d:5c:db:0c:b1:06:c0:49:1b:05:2e:dc:
         5d:2c:00:97:da:c9:30:42:6d:a7:d2:5d:48:40:07:92:2a:f1:
         dd:f5:e0:c3:23:ea:36:6e:bc:48:ac:08:7d:3f:40:ae:2a:d7:
         78:ec:86:6b:14:b8:32:69:2f:c4:f7:4a:89:8a:42:7b:8d:6f:
         90:cf:10:ee:20:99:a3:b5:7d:cb:7a:4c:9b:28:03:29:d0:39:
         7a:64:1c:ca:7e:46:07:22:fd:2f:0e:d2:2e:8a:f9:e4:c0:36:
         61:86:1d:7d:92:85:65:e6:dd:8b:33:41:fe:8b:1c:4c:42:8b:
         af:2e:24:99:3e:ce:20:2a:93:b3:16:1f:d6:2f:f5:61:64:ea:
         bb:e1:fa:6f:f7:8f:b7:82:20:8e:4e:3f:46:fa:db:aa:a5:52:
         ba:26:e5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:22 2025 by rpki-client