Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20383334.roa
File:                     36342e3235332e39352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          ifbJ7wzLtUN5TZ23DIY1hEwrWYUAdfFlzCM8eXhLHdI=
Subject key identifier:   CF:29:BD:A4:6B:51:E4:A7:74:5D:F2:3C:46:85:BB:83:19:77:CB:9B
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       356322D6B9555E3432B745FD11167D3C58D0E3F0
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 05 Nov 2026 12:18:44 +0000
ROA not before:           Thu 05 Nov 2026 12:13:44 +0000
ROA not after:            Thu 04 Nov 2027 12:18:44 +0000
asID:                     834
IP address blocks:        64.253.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 15:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:63:22:d6:b9:55:5e:34:32:b7:45:fd:11:16:7d:3c:58:d0:e3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov  5 12:13:44 2026 GMT
            Not After : Nov  4 12:18:44 2027 GMT
        Subject: CN=CF29BDA46B51E4A7745DF23C4685BB831977CB9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:45:51:57:97:eb:0a:a4:8e:19:9d:cd:b9:
                    c6:ea:8a:21:6d:ca:98:1c:97:87:f1:20:fa:30:e1:
                    6d:c3:8e:20:bd:50:c4:0b:b1:b1:2c:9e:ca:f1:a1:
                    70:e4:a1:9f:9a:c3:0f:f6:b2:25:0e:44:97:d0:36:
                    7d:a1:28:76:cc:66:ab:fe:b6:2d:ac:8d:18:07:2d:
                    cc:50:99:f6:83:b9:82:c4:50:e5:df:44:4f:98:9e:
                    a3:25:da:40:c3:b5:c4:cb:70:c0:da:9b:1d:5a:12:
                    97:9f:8c:e6:f7:94:ad:f2:19:8b:19:4f:34:02:de:
                    b6:63:b6:02:19:b0:15:b2:97:0c:14:19:ae:8f:9d:
                    3b:19:33:e9:9e:56:1b:85:a1:d3:a0:74:23:fd:bb:
                    86:0f:3c:c7:fb:ba:f5:fc:85:6c:e6:15:52:3f:fb:
                    b3:1f:29:e1:9a:90:86:9a:e3:e4:00:16:ac:60:90:
                    fc:3c:5c:86:01:29:06:e6:6d:39:af:b4:dd:62:5f:
                    30:32:c0:4f:ef:9f:99:9b:29:f4:3d:9f:4a:e4:ed:
                    90:dc:f8:29:c3:45:05:7c:d8:5e:ea:f5:a4:dc:de:
                    72:0a:c3:a9:65:53:db:d4:5b:39:bc:ae:2e:4a:4d:
                    52:68:e3:fc:14:ea:44:e6:89:ed:1c:32:fb:5e:41:
                    1f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:BD:A4:6B:51:E4:A7:74:5D:F2:3C:46:85:BB:83:19:77:CB:9B
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:a5:b4:68:8a:0e:b2:a3:8b:bb:6b:88:6f:92:57:be:97:de:
         10:26:b1:10:08:e1:ad:4a:8b:04:89:44:a4:53:b5:fa:ac:ea:
         93:17:73:18:67:a7:04:e5:25:c4:3e:19:f3:ae:77:e9:0e:70:
         e2:3b:c9:6f:52:2b:06:56:bb:8e:f0:e5:35:ae:28:62:20:11:
         15:00:13:de:43:cf:74:35:f9:a9:db:05:2c:7b:9a:33:dd:5e:
         4a:1e:ff:c8:20:4e:10:7c:1f:ef:f5:75:0f:73:b8:7f:06:6a:
         e0:9c:88:68:db:32:fa:c2:3e:1b:36:6a:25:88:6e:77:3e:f9:
         b6:1d:62:b0:59:af:da:fb:fc:07:53:c8:e3:98:5b:1e:75:12:
         6e:b0:45:bf:05:89:48:01:4f:88:a6:3d:83:6f:8c:9a:e2:3b:
         17:7e:f3:f6:47:d1:98:df:a4:da:aa:c8:3b:66:57:36:d5:e0:
         5e:7d:a1:c3:92:a2:79:e0:11:1d:9d:2b:11:8c:7e:35:fc:d5:
         aa:8e:e8:8b:23:8a:75:7f:72:33:8a:53:85:c8:15:f5:0c:3f:
         ac:96:ab:b2:75:55:42:be:54:28:06:fa:99:e0:94:0e:e7:98:
         c0:d7:c9:c0:a5:72:36:2e:cf:28:d9:ac:0b:7a:70:9a:52:be:
         23:8d:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:54:54 2026 by rpki-client