Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32342e302f32342d3234203d3e203239383032.roa
File:                     36352e38372e32342e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          PKTmkV45h6EGyd4CnKkQd2vEWwchWbSM1vJ11NUwJcc=
Subject key identifier:   AC:5A:D8:DC:2C:46:0A:92:A4:61:5A:9F:74:AE:8A:CB:CF:DD:5F:32
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       3A071D63B2C51169A27701A6005D861D5FAC9B22
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32342e302f32342d3234203d3e203239383032.roa
Signing time:             Wed 20 May 2026 20:45:43 +0000
ROA not before:           Wed 20 May 2026 20:40:43 +0000
ROA not after:            Wed 19 May 2027 20:45:43 +0000
asID:                     29802
IP address blocks:        65.87.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 15:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:1d:63:b2:c5:11:69:a2:77:01:a6:00:5d:86:1d:5f:ac:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: May 20 20:40:43 2026 GMT
            Not After : May 19 20:45:43 2027 GMT
        Subject: CN=AC5AD8DC2C460A92A4615A9F74AE8ACBCFDD5F32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:30:54:a1:e1:ca:2d:b6:60:92:c2:bd:1b:
                    0f:08:08:33:b4:2c:54:ad:e1:8a:09:b9:91:fd:95:
                    f2:10:97:68:7b:71:0b:bc:a3:ff:e8:6d:28:0d:f1:
                    8f:c9:fb:b2:3e:46:79:63:bf:5c:a9:56:a7:24:33:
                    70:1f:5b:84:08:13:a9:6f:b7:63:16:fc:7a:d3:b3:
                    87:ec:fa:ab:57:d4:48:94:13:e3:32:9d:bb:ba:0d:
                    fe:b1:27:1f:ef:6f:c3:a1:a7:a0:3c:51:ed:d4:5b:
                    85:03:0a:81:63:de:e4:38:73:d6:4e:2f:8b:3c:3b:
                    71:df:15:b9:b9:db:cf:df:30:14:ee:0f:ec:80:55:
                    52:ec:a0:62:d3:eb:a4:94:11:36:a3:1e:a0:70:3c:
                    2e:61:ab:4d:cb:c0:73:f8:77:e3:89:a6:b0:f5:c9:
                    5a:0d:a5:de:b7:4d:18:72:01:63:0e:64:51:54:1e:
                    48:b9:20:e0:e6:35:7c:3c:07:af:04:8e:5f:3d:ea:
                    f7:52:09:fc:43:26:97:05:8e:ef:bd:dc:99:bf:75:
                    98:10:49:71:45:5c:fb:a8:a6:21:65:36:35:39:1f:
                    11:5e:e1:51:b3:01:eb:2a:da:71:41:9b:dc:4b:77:
                    9e:a9:d9:45:69:4c:f9:dc:87:df:18:8c:13:2e:ec:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:D8:DC:2C:46:0A:92:A4:61:5A:9F:74:AE:8A:CB:CF:DD:5F:32
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32342e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:d1:2a:af:b4:92:d1:5d:8b:8f:0f:97:28:cd:ae:d5:2f:
         63:97:5b:77:2b:25:79:be:e2:10:1d:8c:f7:5b:e4:7c:9d:7a:
         22:fd:d6:dd:5b:e7:cb:6d:3e:0d:39:6c:da:10:2c:06:0e:a7:
         b8:7b:7c:70:54:a1:13:07:93:6c:00:47:99:c7:6d:35:96:c4:
         b1:2a:e1:b9:8c:17:39:16:18:46:7d:de:de:ed:c2:68:aa:e4:
         87:e7:f8:ae:64:f0:a4:cb:55:b7:cb:1d:d5:50:44:45:2d:8f:
         73:1d:81:ad:f7:8d:f3:68:ea:86:85:c5:ca:82:f8:83:42:ed:
         8a:6f:c9:63:72:0b:fb:da:ba:04:53:1a:4c:db:34:05:29:d1:
         d4:c6:98:6b:08:4f:d4:e5:ce:23:c5:54:aa:7b:b7:85:ae:c9:
         a6:0f:2d:32:86:d3:29:22:b9:75:65:5d:40:ec:c0:14:ed:de:
         04:09:b0:b7:cd:a8:c5:91:56:16:87:ed:0d:18:5c:76:81:87:
         a8:bd:9f:9b:65:ed:99:ab:eb:ca:93:d7:46:38:87:53:8e:e0:
         1f:0f:a0:f4:21:ab:6b:8d:8a:9a:28:db:6c:a4:8a:d6:b4:18:
         13:dd:b0:b3:3d:5e:2b:a8:17:7e:9e:ea:ec:e6:54:fb:eb:8f:
         9c:8c:0b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:24 2026 by rpki-client