Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62564.roa
File:                     AS62564.roa (raw, json)
Hash identifier:          YDev2KQabK12Os+PkS8nIUKn9B64h65G/rI1Ik90bmY=
Subject key identifier:   2B:DE:F6:24:DA:7F:BB:94:E6:8D:7B:CA:DD:49:17:E1:1C:E2:00:8F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       170869662C5DCEF6EC2620C724D783319DCE1C75
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62564.roa
Signing time:             Thu 21 May 2026 14:36:00 +0000
ROA not before:           Thu 21 May 2026 14:31:00 +0000
ROA not after:            Thu 20 May 2027 14:36:00 +0000
asID:                     62564
IP address blocks:        23.95.134.0/24 maxlen: 24
                          172.245.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:69:66:2c:5d:ce:f6:ec:26:20:c7:24:d7:83:31:9d:ce:1c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 21 14:31:00 2026 GMT
            Not After : May 20 14:36:00 2027 GMT
        Subject: CN=2BDEF624DA7FBB94E68D7BCADD4917E11CE2008F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fa:6f:92:74:f5:3f:49:e1:6c:fc:90:32:98:
                    ef:ee:cf:fd:ec:ef:a0:0d:c3:82:3a:53:b8:1c:01:
                    b1:ab:d3:f4:50:a2:c8:7a:c2:a1:00:e6:3f:1d:9a:
                    56:ea:4d:47:03:fc:e5:df:f3:9c:6c:06:60:71:f6:
                    2d:df:28:a1:f7:54:8f:c2:b1:5e:35:e0:20:64:47:
                    58:48:6c:30:cc:81:53:b7:a7:2a:06:fc:7a:25:c7:
                    c0:88:be:50:1d:75:e4:50:0b:c2:81:2a:89:7a:9b:
                    b6:14:5d:bd:b9:c4:47:93:92:46:41:92:17:6a:3b:
                    c5:75:d3:4c:c4:b4:24:e9:a7:f8:3d:aa:c4:bf:e1:
                    a8:84:f2:a4:ef:a7:c4:9f:57:30:62:b0:89:70:d3:
                    fe:30:43:4c:01:f7:ac:6e:55:1b:8f:e4:2b:2f:45:
                    ce:60:2e:b2:02:2e:d2:de:53:09:8b:28:c3:6b:0e:
                    26:7e:ca:c2:c6:13:a2:6f:07:51:a3:7f:44:8a:2b:
                    bc:f9:82:b1:54:7d:3c:de:fe:d5:11:0d:1b:70:c4:
                    58:b2:92:a8:4b:58:5b:8f:e9:54:bc:85:6c:57:cd:
                    b8:08:a5:01:b1:1f:f5:83:cf:d0:72:67:f7:c3:dc:
                    3f:ca:76:46:57:9a:cc:6c:e8:e1:21:34:50:2e:87:
                    6e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DE:F6:24:DA:7F:BB:94:E6:8D:7B:CA:DD:49:17:E1:1C:E2:00:8F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62564.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.134.0/24
                  172.245.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:7a:75:31:48:84:57:05:47:e3:bd:4d:b8:68:8f:93:08:bc:
         b7:e9:04:37:38:06:01:56:c0:fa:eb:c5:26:2f:1b:d2:b5:8e:
         c2:a6:a9:8a:f0:4c:2e:35:d3:7b:aa:85:37:ec:07:f2:51:c1:
         71:ea:d5:c6:ed:8b:f7:7e:fb:ea:fd:6a:88:e5:2a:54:35:ca:
         ec:6a:78:a4:85:23:f1:1b:4a:b0:33:96:4d:2c:5a:00:6a:63:
         5c:cc:8b:6d:74:26:a4:c0:1d:62:dc:be:85:12:54:c2:ac:bc:
         b5:84:9a:6f:37:9c:53:cc:2a:42:7d:fa:ac:ec:c7:8b:dd:00:
         87:37:20:0d:2d:7b:00:0f:83:9d:cf:f5:ab:aa:7f:26:3f:c2:
         cb:33:f5:f0:41:aa:7f:d0:2e:31:61:f2:d0:12:bd:e4:0b:98:
         3d:0b:73:4d:b3:d3:ea:02:c1:ad:bd:d7:6e:7c:88:2a:5e:45:
         7f:61:1d:a5:bc:ee:56:d9:ba:3a:79:ac:c5:6a:b9:fe:bb:a8:
         9a:97:30:89:ee:d5:c4:39:92:24:87:06:85:b0:b2:fb:bc:70:
         82:1a:6c:df:be:01:11:c8:f8:f5:9f:95:8d:cf:18:45:ba:00:
         06:2a:50:e0:e2:6f:44:c4:f3:b0:9b:59:5a:eb:a9:b1:ca:dc:
         9f:96:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:13:16 2026 by rpki-client