Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31332e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e31332e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          cM18K0HqafXmeZ/OSDdL0Dl6hhDpV4r+ucwdhj4btGU=
Subject key identifier:   2F:E8:D7:62:27:93:D1:8F:20:EA:EB:39:78:93:96:43:71:05:17:15
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       29B77E882C54318A12E1C9378FD16B5B412B9691
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31332e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:06 +0000
ROA not before:           Sat 13 Jun 2026 06:31:06 +0000
ROA not after:            Sat 12 Jun 2027 06:36:06 +0000
asID:                     17139
IP address blocks:        66.117.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:7e:88:2c:54:31:8a:12:e1:c9:37:8f:d1:6b:5b:41:2b:96:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:06 2026 GMT
            Not After : Jun 12 06:36:06 2027 GMT
        Subject: CN=2FE8D7622793D18F20EAEB397893964371051715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7f:3d:7a:36:ad:b5:b9:79:0e:33:fb:c4:9b:
                    ad:04:c5:91:86:a3:3f:77:f0:64:6c:6c:9c:63:b7:
                    e1:bc:c3:94:18:a7:30:55:fc:5a:ff:81:19:d4:d5:
                    73:72:7d:83:21:bb:fb:65:5a:61:16:34:58:5c:38:
                    c8:b4:da:ee:48:ce:6b:6e:02:33:87:a6:2c:1b:07:
                    8a:b1:93:44:55:52:ee:0d:da:3d:48:02:d9:d4:81:
                    c3:23:11:46:c7:a7:76:b2:c7:c1:b6:32:bf:75:a1:
                    1d:97:c3:fa:e5:99:1a:3f:a9:a9:d0:b5:38:5e:35:
                    23:10:9b:80:6a:d0:ec:e4:ee:e9:11:4e:e4:10:d7:
                    04:74:ed:0b:41:92:68:fa:17:f1:f9:bb:f1:48:34:
                    05:3e:19:92:6e:44:7b:cc:8b:70:e9:5f:97:29:20:
                    a5:fb:cf:58:83:4d:f1:eb:f3:66:09:3d:ec:c2:75:
                    d4:18:d3:df:e1:39:fb:d8:41:b3:81:68:5c:b4:0e:
                    01:9c:ee:0f:80:6a:58:31:a7:e5:a7:15:a4:6c:ac:
                    2e:9a:2b:44:60:e1:09:ad:7a:05:88:4b:36:9f:c2:
                    ec:1c:cf:e3:5c:93:59:35:f5:d0:9b:72:96:d4:6b:
                    29:5d:26:be:fb:bd:a0:24:31:3b:4d:7e:2d:3c:1f:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:D7:62:27:93:D1:8F:20:EA:EB:39:78:93:96:43:71:05:17:15
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31332e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:be:e8:57:cf:5e:9e:69:7b:b3:95:c0:30:07:0b:0c:ba:f5:
         43:3b:12:b4:ff:13:35:55:b4:6e:48:64:ac:d5:d8:c5:f2:1b:
         55:0b:65:4c:95:cb:13:39:5b:0a:dc:38:57:9c:a7:0c:c5:df:
         7e:2a:c4:b2:ff:3f:17:2a:10:02:39:b7:49:1e:bc:a2:cf:70:
         0c:2a:57:c5:9b:38:23:76:3e:55:67:6d:70:70:79:8d:bd:5e:
         3a:01:93:66:54:06:13:67:13:47:88:dc:0b:67:37:b5:b7:89:
         1b:0e:29:a6:75:45:ac:7a:c8:77:02:20:b8:ca:2b:f3:dd:74:
         61:2f:ff:b4:86:c2:63:27:19:18:fd:bb:d1:6c:44:18:02:28:
         cf:dd:99:d1:6b:96:b9:12:34:68:d7:b3:73:fd:16:97:01:ca:
         de:f8:45:20:fe:43:ca:e2:47:d0:0c:36:57:20:3a:05:e1:28:
         12:a0:51:06:ec:b1:13:c8:4b:77:99:6e:2e:0c:5e:c2:d6:7a:
         bc:01:77:b4:30:6b:ee:bb:5b:25:ef:d8:f4:23:a8:dd:2e:e1:
         d8:05:6c:2b:fd:b7:54:2c:26:11:2a:a7:fe:5b:33:7d:07:7a:
         33:01:74:bb:86:b6:45:3c:c0:fb:c9:9f:eb:7c:f5:de:5e:44:
         5e:04:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:57 2026 by rpki-client