Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20383132.roa
File:                     36342e34392e31342e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier:          WHFkVREnCdNhp9ecnC9hF0kS0kc8Nh14e1YIpMV3AAY=
Subject key identifier:   FE:62:74:D2:45:22:72:FF:F8:73:10:5C:13:29:D3:7B:59:9A:66:73
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       18F7FC0D972E7D5E3D6C05072E5536BB9D13CAD3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20383132.roa
Signing time:             Wed 15 Apr 2026 08:53:16 +0000
ROA not before:           Wed 15 Apr 2026 08:48:16 +0000
ROA not after:            Wed 14 Apr 2027 08:53:16 +0000
asID:                     812
IP address blocks:        64.49.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f7:fc:0d:97:2e:7d:5e:3d:6c:05:07:2e:55:36:bb:9d:13:ca:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Apr 15 08:48:16 2026 GMT
            Not After : Apr 14 08:53:16 2027 GMT
        Subject: CN=FE6274D2452272FFF873105C1329D37B599A6673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:ab:fb:df:31:b0:a0:6a:fb:6a:5f:5c:3b:
                    5e:64:0a:3d:20:96:e4:cf:cd:f9:7d:bb:b1:5a:45:
                    79:29:ac:fc:87:44:f5:74:24:67:b5:8d:5f:77:e9:
                    e3:f3:04:8d:89:f4:15:b5:0a:a7:93:8b:de:e8:76:
                    38:79:ff:5b:28:51:c9:a2:94:2c:d3:52:de:a8:9f:
                    81:e2:51:96:00:4c:f8:bd:7e:e4:d0:47:52:08:1b:
                    34:e5:52:a3:bb:d9:75:e6:f7:57:ac:05:74:a4:fc:
                    4e:d1:94:8a:76:cb:f0:9c:37:80:9a:73:bd:5d:2d:
                    55:8e:17:3d:c5:b5:0f:de:82:24:12:4b:68:35:ce:
                    08:29:14:53:cf:98:30:c7:fa:44:50:db:6d:cd:5c:
                    19:00:a0:4f:10:5e:e5:d7:e0:fa:67:b5:88:f5:b0:
                    f3:cf:6e:9b:9e:6c:e3:17:98:86:ba:bc:e6:51:26:
                    98:be:73:bc:84:8d:ed:03:e3:74:d4:b3:d3:6b:1b:
                    b6:e1:82:d5:32:b6:91:24:03:0d:6e:fb:b1:3e:1b:
                    0f:cd:84:87:13:8f:7b:b6:06:5b:66:47:2c:49:ba:
                    f6:8a:1e:b3:cc:a5:cc:76:40:99:87:b8:c5:b0:79:
                    f7:a1:83:20:2d:6a:eb:4e:fb:6d:93:2f:7c:2a:59:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:62:74:D2:45:22:72:FF:F8:73:10:5C:13:29:D3:7B:59:9A:66:73
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31342e302f32342d3234203d3e20383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:0b:1a:43:f4:a7:c2:da:f0:84:d3:9d:2f:e8:c6:77:61:67:
         ff:14:08:53:e2:8d:3d:ef:1f:68:c8:d6:13:53:ea:b1:53:68:
         e0:9b:1e:8f:26:6c:a2:60:3b:f2:7c:13:37:a7:b7:67:4d:08:
         4c:21:da:9c:00:a0:89:30:94:4f:9b:8f:aa:a9:78:43:fe:01:
         92:a8:db:a2:13:e1:30:c2:c9:71:bf:b0:5e:2c:ff:09:34:88:
         24:94:34:fd:0c:b5:ef:db:26:8b:a0:8b:18:7b:98:3d:67:71:
         6a:0c:23:1a:6b:b5:ac:6c:1e:4d:76:d1:80:66:e0:e9:75:cb:
         1c:7b:ae:00:7c:fc:0c:d6:15:13:06:ec:60:d2:79:6c:40:a6:
         fd:52:1b:a1:fd:e5:47:f3:f0:77:32:5d:15:f9:87:56:63:33:
         7b:c7:b0:b2:75:35:05:dd:3e:55:5e:67:59:1b:37:3e:12:e1:
         ad:2e:4c:8d:27:1c:8a:03:a1:df:ec:14:c1:cc:5f:61:39:37:
         5c:ee:11:e4:d0:5f:0c:19:96:dd:e0:5b:e6:51:5d:17:8c:a8:
         4b:3f:27:b8:3a:0c:4f:45:18:8d:72:aa:0e:1d:fb:1a:d9:39:
         ac:2f:d7:c9:61:ce:11:09:8b:99:66:d9:12:bb:c1:d4:09:15:
         dc:b5:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:10 2026 by rpki-client