Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e20323034373635.roa
File:                     36352e38372e32372e302f32342d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          Hulyyu6/sizq9W9EMYjTmHr4cjeB3LCfcm/tqVJWdlc=
Subject key identifier:   3A:96:59:61:CB:25:34:38:08:D4:47:82:A2:C2:5B:FE:1D:EE:65:F1
Certificate issuer:       /CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
Certificate serial:       2BA75AA002D8154BA1F7FEB487FAECBAE2673DF2
Authority key identifier: 07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e20323034373635.roa
Signing time:             Wed 16 Sep 2026 10:19:14 +0000
ROA not before:           Wed 16 Sep 2026 10:14:14 +0000
ROA not after:            Wed 15 Sep 2027 10:19:14 +0000
asID:                     204765
IP address blocks:        65.87.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl
                          rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/5686afac-80b6-44e3-98b2-73fb6cd2b14b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:5a:a0:02:d8:15:4b:a1:f7:fe:b4:87:fa:ec:ba:e2:67:3d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3
        Validity
            Not Before: Sep 16 10:14:14 2026 GMT
            Not After : Sep 15 10:19:14 2027 GMT
        Subject: CN=3A965961CB25343808D44782A2C25BFE1DEE65F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:92:bd:cf:f9:3d:d8:11:2f:57:81:27:44:79:
                    6a:ea:57:85:12:2a:ef:2f:c8:58:31:5f:d5:ed:4e:
                    a1:d5:1c:55:52:57:d3:bb:f8:80:f3:8b:15:dd:eb:
                    25:00:29:a0:7e:2f:c5:09:d2:05:75:ff:30:34:3a:
                    83:dc:b7:f3:87:17:b7:7a:05:29:f8:9b:8f:b5:96:
                    fe:9e:f9:90:3f:82:39:80:bf:be:2d:76:48:02:64:
                    73:bc:a9:41:49:1a:55:6d:15:ce:66:1c:86:5c:3d:
                    ec:7d:1c:bc:ef:5d:89:26:eb:b7:ab:91:39:a0:26:
                    6d:ef:08:38:27:62:e0:18:13:f3:f3:2a:93:30:73:
                    84:00:7c:b1:5f:b1:06:d7:3b:68:78:b9:61:d1:95:
                    22:97:b1:ff:9a:ea:0e:1e:c7:51:a7:9d:21:dd:1c:
                    98:ca:11:12:4d:43:c8:42:10:29:ac:e7:44:b4:41:
                    d0:13:a8:7f:6b:37:07:2a:bb:fe:ce:b9:48:ba:e8:
                    43:f7:98:00:a1:93:e7:a7:87:5f:a9:f6:05:2f:e7:
                    9d:eb:18:25:f9:b0:80:9d:41:8a:f2:0d:22:8b:fe:
                    de:86:09:37:a7:53:36:dc:46:ab:a5:7e:62:2e:80:
                    5a:ec:eb:ab:18:5a:12:e4:5d:cf:a4:8f:85:99:1c:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:96:59:61:CB:25:34:38:08:D4:47:82:A2:C2:5B:FE:1D:EE:65:F1
            X509v3 Authority Key Identifier:
                keyid:07:4B:E8:50:DB:10:5F:3F:4E:A8:AF:18:CB:12:92:47:AC:F9:B8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/074BE850DB105F3F4EA8AF18CB129247ACF9B869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5686afac-80b6-44e3-98b2-73fb6cd2b14b/e5c4c655b2c699f170c72a9295345f0ba862ce8530254c3ce3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c0a9eae0486148b6a1099728612c0b16/0/36352e38372e32372e302f32342d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:02:9a:0d:ca:75:89:bc:51:45:cf:81:4f:3f:c3:17:cd:3c:
         56:73:86:8f:69:5c:e6:fb:88:45:3b:bb:4e:0a:48:5c:77:48:
         ed:7d:16:b8:49:dd:4a:1e:e0:b7:c2:40:92:d1:0d:bc:06:d9:
         60:ec:32:75:50:b5:70:7b:b9:ee:b8:63:18:24:ff:81:88:5d:
         63:c9:a6:e2:0a:16:1f:2b:9e:cd:af:b8:8c:c6:db:ea:33:7c:
         13:cf:01:50:db:41:d8:e1:a9:30:0f:f3:06:cd:8b:26:a2:6a:
         22:27:2a:6f:18:82:ac:c9:eb:c2:78:28:2f:59:74:b5:de:d0:
         59:61:89:d8:ab:6e:fe:11:00:7b:a8:f3:c3:61:c3:e6:72:34:
         78:9a:cb:90:3d:3f:79:c0:1c:f6:a0:6b:62:d8:a0:33:24:38:
         96:e1:9d:59:f2:b3:94:c5:3a:db:79:c1:38:e6:d6:b2:d8:bd:
         02:59:10:0f:74:9f:f7:e2:49:0d:2a:f5:2e:a2:4a:b9:ee:ac:
         4b:73:62:61:7d:a3:e9:19:ab:d8:ab:45:e8:61:d9:29:36:7e:
         40:ea:0e:8d:f4:77:f5:35:3f:2f:db:b5:66:3a:25:68:65:c2:
         d4:28:c1:12:16:59:15:58:3f:02:19:2d:fd:09:4d:e3:fd:38:
         0e:fe:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:49 2026 by rpki-client