Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137372e302f32342d3234203d3e203235313938.roa
File:                     36342e35372e3137372e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          V160GWdozXRn0IhJFGvlUnPqj2P2uJkTwVcoa8dxmP0=
Subject key identifier:   9D:CE:F3:F0:B7:8E:E1:3C:27:30:72:8A:5D:D9:DF:4F:87:0D:C6:BA
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       5F19FD07A0A881EE2910ECA80C72FB709842FCE9
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137372e302f32342d3234203d3e203235313938.roa
Signing time:             Tue 29 Jul 2025 11:51:51 +0000
ROA not before:           Tue 29 Jul 2025 11:46:51 +0000
ROA not after:            Tue 28 Jul 2026 11:51:51 +0000
asID:                     25198
IP address blocks:        64.57.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:19:fd:07:a0:a8:81:ee:29:10:ec:a8:0c:72:fb:70:98:42:fc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Jul 29 11:46:51 2025 GMT
            Not After : Jul 28 11:51:51 2026 GMT
        Subject: CN=9DCEF3F0B78EE13C2730728A5DD9DF4F870DC6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:35:0d:32:54:1a:db:56:de:07:e7:c1:69:
                    7e:20:d6:51:aa:96:48:23:48:02:3d:d0:74:eb:6c:
                    9e:a1:91:4f:18:f6:c0:6f:33:0b:e5:2f:c5:5c:83:
                    40:86:a9:1a:89:74:8e:1e:dd:55:64:3d:1f:bc:c4:
                    3f:1e:6a:21:5a:26:71:a2:6b:b8:a6:99:66:af:1b:
                    84:63:53:ce:c4:5d:90:ea:5c:e2:30:7f:10:83:ce:
                    8c:db:98:3e:bb:3a:c3:23:58:ae:78:14:f1:3b:95:
                    a2:a3:27:44:f0:ad:53:5d:69:e5:40:80:0a:38:a8:
                    40:9f:2f:24:14:a5:0f:0e:5f:35:e8:74:5d:0c:b0:
                    0d:bf:f9:1c:df:71:76:99:cd:fc:5c:73:f4:d7:5c:
                    5a:da:9b:66:01:25:64:28:74:ab:60:09:e4:5e:ae:
                    9d:75:f9:d6:d7:50:f8:77:fc:46:b7:3d:c9:3c:f2:
                    13:07:a6:83:4f:68:ca:d4:30:54:17:29:ad:98:20:
                    38:04:f6:c4:7e:d8:0c:92:73:61:81:d4:64:60:60:
                    e6:ff:7c:d4:63:96:c7:3f:f1:be:91:6d:a7:64:7b:
                    32:29:6b:07:bb:b5:35:dc:f5:f2:30:b4:98:ee:25:
                    98:5f:4f:d3:76:6b:38:be:58:a3:5e:80:b0:98:ff:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CE:F3:F0:B7:8E:E1:3C:27:30:72:8A:5D:D9:DF:4F:87:0D:C6:BA
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137372e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:09:df:c1:60:8b:e1:10:01:64:c9:26:ff:17:f5:ab:02:ee:
         47:60:ee:17:dc:51:b4:60:be:b0:d8:c2:af:36:9a:a7:de:b1:
         d0:10:cb:85:13:5d:37:e4:07:7a:3e:b1:64:09:f9:0a:27:83:
         1f:51:f2:6b:c7:8a:d5:84:d6:71:cf:7c:00:07:33:c2:aa:f8:
         72:24:d5:65:24:32:fe:8a:25:1b:4e:24:ae:79:b9:21:e7:c7:
         cd:66:41:a5:a9:55:a3:3e:fd:59:8a:c2:7d:af:b4:70:96:c8:
         76:ed:b4:89:c0:3e:57:13:d8:8c:f9:d1:54:71:6a:ac:d4:b6:
         b9:a7:9b:8a:a2:52:ed:c0:12:1d:8b:07:ba:66:56:aa:06:a8:
         bd:07:30:71:a2:b1:99:91:7e:bd:4a:42:86:a4:12:9c:d5:3e:
         6b:d4:08:b0:24:ca:0e:46:c0:ea:40:a5:d8:10:4f:39:6e:e9:
         95:20:c8:4e:e9:36:8d:8e:eb:4d:c6:55:65:6c:5d:ec:73:3d:
         5c:5f:40:fe:d1:81:3a:a9:de:7f:9d:a2:f4:81:89:79:78:8d:
         64:9f:03:41:30:ed:47:60:55:4d:fa:88:b7:32:1b:2c:ee:67:
         a3:f0:74:18:ab:80:80:04:4e:84:ea:c1:bb:7b:ff:8a:5b:a9:
         60:2b:d2:98
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUXxn9B6Coge4pEOyoDHL7cJhC/OkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWJkMWRjNDM3ODI4NDQwOTViZmZlZGU2ZGNiNDQyNGVl
NjZhNzZkOGI3YTY4ZTAwNDIwHhcNMjUwNzI5MTE0NjUxWhcNMjYwNzI4MTE1MTUx
WjAzMTEwLwYDVQQDEyg5RENFRjNGMEI3OEVFMTNDMjczMDcyOEE1REQ5REY0Rjg3
MERDNkJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8o1DTJUGttW
3gfnwWl+INZRqpZII0gCPdB062yeoZFPGPbAbzML5S/FXINAhqkaiXSOHt1VZD0f
vMQ/HmohWiZxomu4pplmrxuEY1POxF2Q6lziMH8Qg86M25g+uzrDI1iueBTxO5Wi
oydE8K1TXWnlQIAKOKhAny8kFKUPDl816HRdDLANv/kc33F2mc38XHP011xa2ptm
ASVkKHSrYAnkXq6ddfnW11D4d/xGtz3JPPITB6aDT2jK1DBUFymtmCA4BPbEftgM
knNhgdRkYGDm/3zUY5bHP/G+kW2nZHsyKWsHu7U13PXyMLSY7iWYX0/Tdms4vlij
XoCwmP/Q1wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJ3O8/C3juE8JzByil3Z30+H
Dca6MB8GA1UdIwQYMBaAFH4sk1t1TACx6AQ7u3EhzDtarSSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2E5MmFkMjZkZGRkNjQxOWI5NzNlMDU2Zjg3OTQ1MzAyLzAv
N0UyQzkzNUI3NTRDMDBCMUU4MDQzQkJCNzEyMUNDM0I1QUFEMjQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzL2ZkNzg5ZGU2LTNmNmQtNDU2ZS04ODcwLWMwNGVkNjk5MGMxMy9lYmQx
ZGM0Mzc4Mjg0NDA5NWJmZmVkZTZkY2I0NDI0ZWU2NmE3NmQ4YjdhNjhlMDA0Mi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hOTJhZDI2ZGRkZDY0MTliOTczZTA1
NmY4Nzk0NTMwMi8wLzM2MzQyZTM1MzcyZTMxMzczNzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAObEwDQYJKoZIhvcNAQELBQAD
ggEBANYJ38Fgi+EQAWTJJv8X9asC7kdg7hfcUbRgvrDYwq82mqfesdAQy4UTXTfk
B3o+sWQJ+Qongx9R8mvHitWE1nHPfAAHM8Kq+HIk1WUkMv6KJRtOJK55uSHnx81m
QaWpVaM+/VmKwn2vtHCWyHbttInAPlcT2Iz50VRxaqzUtrmnm4qiUu3AEh2LB7pm
VqoGqL0HMHGisZmRfr1KQoakEpzVPmvUCLAkyg5GwOpApdgQTzlu6ZUgyE7pNo2O
603GVWVsXexzPVxfQP7RgTqp3n+dovSBiXl4jWSfA0Ew7UdgVU36iLcyGyzuZ6Pw
dBirgIAEToTqwbt7/4pbqWAr0pg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:12:21 2025 by rpki-client