Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e33302e302f32332d3234203d3e2035363530.roa
File:                     36342e38342e33302e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier:          Z8lYfk1I7CMcWMe0PeFjUxfHe4zONBkZz15FdgOKXjc=
Subject key identifier:   A8:55:A1:2B:29:22:70:CB:F7:05:8B:28:74:E5:F4:B8:C6:A4:CA:5B
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       06A227F0CA774DF09CCBE7C9B76163BC52A67139
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e33302e302f32332d3234203d3e2035363530.roa
Signing time:             Sat 27 Sep 2025 00:13:23 +0000
ROA not before:           Sat 27 Sep 2025 00:08:23 +0000
ROA not after:            Sat 26 Sep 2026 00:13:23 +0000
asID:                     5650
IP address blocks:        64.84.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a2:27:f0:ca:77:4d:f0:9c:cb:e7:c9:b7:61:63:bc:52:a6:71:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Sep 27 00:08:23 2025 GMT
            Not After : Sep 26 00:13:23 2026 GMT
        Subject: CN=A855A12B292270CBF7058B2874E5F4B8C6A4CA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8a:c7:00:76:4f:66:1e:5a:db:8a:0e:b2:27:
                    5f:a7:92:cc:3b:f4:74:23:97:2a:9b:7b:06:ad:30:
                    45:fc:89:5c:47:72:b7:d6:61:62:77:9c:98:11:96:
                    9a:a1:3e:7f:22:f3:b7:1a:b7:16:06:4b:bf:e9:a0:
                    82:ea:ed:7a:b5:f7:c0:25:07:3b:2d:c6:99:80:5d:
                    74:1f:14:1f:ee:0b:cb:84:3d:ab:05:88:25:cc:42:
                    cc:a1:cc:1f:5b:ba:78:6d:c3:81:cb:e1:d6:94:3f:
                    fc:59:e9:75:4d:04:de:9e:2d:10:88:7a:77:7a:df:
                    0d:38:d9:c9:ca:0a:80:c0:12:02:fc:b7:d9:cb:ee:
                    1b:ba:61:31:e7:7f:9b:fc:b5:db:48:a9:af:e9:8b:
                    21:20:bd:0d:53:64:22:69:af:01:4a:da:eb:fc:23:
                    53:2a:50:88:bf:53:57:83:8a:e0:c7:e1:1a:18:73:
                    be:dc:92:43:d0:2d:4b:59:9e:12:1c:e6:ba:81:08:
                    b9:d0:cd:b1:cb:f5:35:c2:f7:f0:5f:81:06:43:c3:
                    6a:cf:d7:94:b7:0a:9f:bc:34:2b:1b:c4:8f:80:3a:
                    fb:d2:88:7d:b1:5f:f4:51:ed:54:54:b4:c3:01:e2:
                    11:4f:40:84:37:1c:4f:f2:1d:4c:91:7a:76:1e:57:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:A1:2B:29:22:70:CB:F7:05:8B:28:74:E5:F4:B8:C6:A4:CA:5B
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e33302e302f32332d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:41:db:d0:c4:20:b8:49:ac:7d:48:37:0f:c0:56:21:6a:
         28:94:35:ea:2a:a1:62:0f:71:2f:16:9d:c3:69:04:88:34:ee:
         65:2e:83:bb:b4:b0:c9:2b:91:c6:7e:d5:92:7c:88:06:12:67:
         08:14:6b:f3:9a:03:02:38:5a:8c:1c:06:47:d4:69:5c:03:29:
         4d:6a:bc:46:08:52:bc:56:21:fd:f4:92:9c:ac:4a:af:63:21:
         34:3d:80:f3:e3:5c:17:54:60:04:d9:5b:a5:35:98:c0:b4:80:
         c2:b8:88:46:17:c8:23:7b:b0:dd:7f:a2:99:94:f6:b2:ae:1c:
         73:1c:f5:a4:04:8b:7c:be:70:4a:23:8d:bc:05:31:23:49:6b:
         1f:ee:5b:96:52:5b:f7:82:2c:a2:cb:3e:ea:2a:5f:a3:95:1d:
         28:fe:75:20:83:ec:37:fa:a8:43:72:f6:8e:73:fd:47:76:61:
         11:e1:66:a1:f5:36:38:a7:a2:35:1d:5f:b6:a3:b7:0c:ea:d7:
         f9:4b:b2:18:4d:e2:f8:3b:ac:66:df:a6:d7:9d:a9:43:ef:ab:
         a7:47:b9:ca:76:05:2d:f5:74:1b:dc:4a:c7:a7:f4:07:8a:8f:
         6e:78:a3:b5:8f:4f:65:34:fe:05:ca:30:e6:8f:1e:2e:9c:ee:
         37:14:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:51 2025 by rpki-client