Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e20323138373939.roa
File:                     36342e35372e3137382e302f32342d3234203d3e20323138373939.roa (raw, json)
Hash identifier:          qgaGlGj0rTvFpRmoUUbONey9wIhmJLUH42LaNs7xGXQ=
Subject key identifier:   C6:85:AF:6A:99:E2:3E:48:34:D3:6E:37:D8:71:9B:87:DB:62:84:3E
Certificate issuer:       /CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
Certificate serial:       05A87EC7E3D556D30159C37EE1C445AD58C95032
Authority key identifier: 7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e20323138373939.roa
Signing time:             Fri 11 Sep 2026 11:28:57 +0000
ROA not before:           Fri 11 Sep 2026 11:23:57 +0000
ROA not after:            Fri 10 Sep 2027 11:28:57 +0000
asID:                     218799
IP address blocks:        64.57.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl
                          rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/fd789de6-3f6d-456e-8870-c04ed6990c13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a8:7e:c7:e3:d5:56:d3:01:59:c3:7e:e1:c4:45:ad:58:c9:50:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042
        Validity
            Not Before: Sep 11 11:23:57 2026 GMT
            Not After : Sep 10 11:28:57 2027 GMT
        Subject: CN=C685AF6A99E23E4834D36E37D8719B87DB62843E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:bc:c5:90:7d:a9:1d:99:18:3a:79:63:c3:
                    a5:90:42:d0:e4:f2:c0:d5:3f:70:4c:9b:be:15:4d:
                    01:bd:96:6b:27:cb:79:82:b6:bc:31:43:62:8c:eb:
                    e4:e3:ce:05:de:79:1b:c1:5f:02:6b:ee:57:5c:67:
                    e2:1c:f7:54:7f:e6:b3:9f:7e:44:c0:58:48:96:a2:
                    25:29:7a:07:1f:db:19:48:70:37:2c:dc:7f:d4:62:
                    6b:af:41:f5:a9:c6:c3:f7:58:92:8e:96:18:05:b0:
                    e5:10:84:7c:c9:40:0c:55:2e:b8:0a:98:0e:d0:97:
                    b1:73:41:e8:c8:c1:5a:bb:46:6d:87:70:65:33:26:
                    a1:d4:03:f3:85:1e:a9:9e:0d:af:dc:2b:ed:82:03:
                    84:61:6a:c0:b4:6b:5f:ba:fe:ad:20:50:37:b0:74:
                    a5:c6:4a:81:75:f1:73:3d:71:a1:66:75:e7:e6:03:
                    a1:3a:e8:49:16:bb:e3:4a:c5:6c:87:89:04:d5:39:
                    89:d7:12:57:37:68:e5:f8:ee:a7:c4:86:49:bd:57:
                    db:57:09:92:e4:ae:e7:e1:aa:4d:a9:62:d6:e5:00:
                    9c:c7:9a:28:4c:73:7b:2f:c3:2c:97:76:ac:cd:1c:
                    d0:1d:06:c9:41:7f:64:58:a6:b6:c9:0f:3e:9b:c8:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:85:AF:6A:99:E2:3E:48:34:D3:6E:37:D8:71:9B:87:DB:62:84:3E
            X509v3 Authority Key Identifier:
                keyid:7E:2C:93:5B:75:4C:00:B1:E8:04:3B:BB:71:21:CC:3B:5A:AD:24:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/7E2C935B754C00B1E8043BBB7121CC3B5AAD248C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fd789de6-3f6d-456e-8870-c04ed6990c13/ebd1dc43782844095bffede6dcb4424ee66a76d8b7a68e0042.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a92ad26dddd6419b973e056f87945302/0/36342e35372e3137382e302f32342d3234203d3e20323138373939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:46:12:86:4a:43:eb:b5:4b:42:62:10:f9:8b:ee:36:cd:
         c1:41:42:60:32:59:e9:1b:0a:d4:12:27:53:86:68:58:0e:cf:
         40:65:7f:17:a5:de:1d:2f:22:36:21:ef:84:65:7d:74:12:f4:
         42:d1:40:1c:a3:72:61:9d:eb:1d:61:cf:66:5c:7f:95:b9:d1:
         d4:65:1f:fd:38:69:fa:95:0c:5f:ee:a3:cf:16:16:50:7f:38:
         3f:3a:c1:ee:d6:39:f0:5f:a9:b5:66:b2:c4:19:69:88:ec:c0:
         e2:8a:96:da:c4:79:14:c5:f3:3b:a0:ad:5c:f6:93:c9:0e:6d:
         34:cb:99:28:01:a9:10:b6:0e:32:ee:18:15:4b:6c:ae:16:ef:
         e1:f2:d6:59:03:0a:24:0f:d6:93:33:ea:05:56:a5:71:60:90:
         22:60:ab:78:5b:d0:e2:fb:fc:74:85:12:68:28:41:43:30:f8:
         49:55:1c:fb:03:27:98:ad:e4:5a:d0:71:77:95:c2:3b:cd:35:
         3b:de:e3:27:32:b9:60:ad:4c:83:20:12:9d:c3:9d:24:88:cd:
         2f:ae:cd:9a:5c:33:51:49:47:f2:1e:51:bc:37:8f:61:f8:78:
         1b:86:fc:0c:45:9b:f8:7c:b0:ed:97:24:f6:ab:66:b5:f5:23:
         d6:f6:26:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:23:45 2026 by rpki-client