Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32342e302f32322d3234203d3e20383334.roa
File:                     36342e38342e32342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          0AzuFDVc+xe8zMSc7PZLNdjP+XIFxx349X/Ca7C//ng=
Subject key identifier:   36:32:5B:7A:55:CF:38:AC:19:13:FB:CF:41:91:B8:0C:9F:CC:32:4D
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       3C9D6496171AE1F99FA0A09858D6E4A1E9BDCFE1
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32342e302f32322d3234203d3e20383334.roa
Signing time:             Sat 29 Aug 2026 00:36:20 +0000
ROA not before:           Sat 29 Aug 2026 00:31:20 +0000
ROA not after:            Sat 28 Aug 2027 00:36:20 +0000
asID:                     834
IP address blocks:        64.84.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:64:96:17:1a:e1:f9:9f:a0:a0:98:58:d6:e4:a1:e9:bd:cf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Aug 29 00:31:20 2026 GMT
            Not After : Aug 28 00:36:20 2027 GMT
        Subject: CN=36325B7A55CF38AC1913FBCF4191B80C9FCC324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:73:55:7d:4d:9c:59:c5:6c:17:82:55:36:61:
                    4b:34:c7:36:ef:29:38:bc:dc:4c:fa:8e:26:6d:99:
                    45:e5:ff:79:35:d9:7c:c4:1e:f0:0d:37:b4:08:3f:
                    11:fc:ff:18:1e:23:89:e7:d2:08:1b:6b:37:90:4a:
                    2a:c8:b0:55:8b:f1:46:be:53:13:26:e4:33:f3:73:
                    48:ad:07:a2:fd:f8:ce:ad:1a:a9:80:f6:1c:ce:39:
                    d0:6e:96:9e:e5:86:5e:a9:3a:df:1f:18:15:88:e6:
                    d4:d2:c5:50:e5:3b:bc:64:2f:d1:97:a9:19:2e:24:
                    cb:e2:e4:f9:b7:dd:55:17:43:c2:70:b5:fc:95:ec:
                    9a:f4:de:95:18:19:42:78:41:17:38:77:6d:58:4c:
                    f0:49:60:3e:74:86:a6:c7:66:54:4c:51:57:3b:7e:
                    b3:46:17:7a:02:dd:8f:35:b1:1e:2c:ec:75:34:9b:
                    9a:1f:ee:ad:9d:0e:b8:64:5c:e3:0e:74:46:6f:59:
                    4e:8d:db:59:8f:0c:bf:01:4a:d9:5e:97:7d:2c:b8:
                    a3:6c:c2:9f:2b:0b:f4:e9:6c:4a:a6:89:f9:10:a8:
                    f3:0c:a8:53:d0:dc:a0:4d:f5:46:04:6d:50:04:a9:
                    37:18:d5:aa:a6:5a:1b:8f:a5:92:9a:7c:14:59:79:
                    8f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:5B:7A:55:CF:38:AC:19:13:FB:CF:41:91:B8:0C:9F:CC:32:4D
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e32342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:bf:d2:0c:ea:e3:dc:8b:41:95:b3:cc:a6:43:14:9e:7d:0d:
         ef:39:97:c5:e1:2b:e6:da:02:84:e8:2a:76:a5:41:50:ff:18:
         44:8e:5b:e1:a7:a6:ec:56:a7:2b:1a:53:16:db:6e:8d:1f:34:
         fa:3c:1a:b3:ce:22:e6:5f:6c:d8:29:0f:cf:18:32:6b:ab:bf:
         cf:19:45:24:23:18:d0:95:cf:fe:7f:ea:a1:16:17:03:ce:e1:
         78:96:b8:bb:f5:d1:95:f8:9c:4d:fa:4c:6b:95:28:10:68:73:
         5b:14:45:fc:42:48:b0:4b:da:f3:1d:df:3c:9d:1e:18:f4:a7:
         20:2f:a6:15:00:54:9d:5b:e7:8d:be:54:fb:22:b2:f0:98:7d:
         2f:a3:b2:f2:76:a3:63:3f:d9:6e:4c:c8:c6:21:74:98:b2:4f:
         10:24:95:75:d9:4c:5c:55:a5:b3:a0:d4:93:77:dc:65:fd:45:
         87:31:03:c2:8a:66:4f:2e:99:38:d4:e4:31:a2:6f:fa:0d:d0:
         41:89:98:37:81:de:88:b8:3a:09:01:0d:30:06:f5:21:5c:8b:
         68:ca:73:53:9e:cc:5a:b5:78:5a:c7:6d:f9:30:40:38:55:b4:
         75:25:f7:49:32:15:9e:1e:bc:c1:3e:bf:65:78:78:e6:b1:12:
         74:86:05:bc
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIUPJ1klhca4fmfoKCYWNbkoem9z+EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODkxOTJiYTZhNjQ0N2FlOGUwZGZjMThjMzBkZThmYjY4
MThiYTY0N2Q0Mjc2NTY3MmMwHhcNMjYwODI5MDAzMTIwWhcNMjcwODI4MDAzNjIw
WjAzMTEwLwYDVQQDEygzNjMyNUI3QTU1Q0YzOEFDMTkxM0ZCQ0Y0MTkxQjgwQzlG
Q0MzMjREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HNVfU2cWcVs
F4JVNmFLNMc27yk4vNxM+o4mbZlF5f95Ndl8xB7wDTe0CD8R/P8YHiOJ59IIG2s3
kEoqyLBVi/FGvlMTJuQz83NIrQei/fjOrRqpgPYczjnQbpae5YZeqTrfHxgViObU
0sVQ5Tu8ZC/Rl6kZLiTL4uT5t91VF0PCcLX8leya9N6VGBlCeEEXOHdtWEzwSWA+
dIamx2ZUTFFXO36zRhd6At2PNbEeLOx1NJuaH+6tnQ64ZFzjDnRGb1lOjdtZjwy/
AUrZXpd9LLijbMKfKwv06WxKpon5EKjzDKhT0NygTfVGBG1QBKk3GNWqplobj6WS
mnwUWXmPewIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFDYyW3pVzzisGRP7z0GRuAyf
zDJNMB8GA1UdIwQYMBaAFKWN7L6satlsA/o0Y6JIPXL60aC7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2U4YTc2NGRkZDkzZjQxMDE4OTk0MThlZjRkMmZkZTgxLzAv
QTU4REVDQkVBQzZBRDk2QzAzRkEzNDYzQTI0ODNENzJGQUQxQTBCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzRkOTZkOWYwLTZmMTQtNDFmZS1iZjQ5LWVlZDkzMDIwMWEyMy84OTE5
MmJhNmE2NDQ3YWU4ZTBkZmMxOGMzMGRlOGZiNjgxOGJhNjQ3ZDQyNzY1NjcyYy5j
ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2U4YTc2NGRkZDkzZjQxMDE4OTk0MThl
ZjRkMmZkZTgxLzAvMzYzNDJlMzgzNDJlMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNk
M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAkBUGDANBgkqhkiG9w0BAQsFAAOCAQEATb/S
DOrj3ItBlbPMpkMUnn0N7zmXxeEr5toChOgqdqVBUP8YRI5b4aem7FanKxpTFttu
jR80+jwas84i5l9s2CkPzxgya6u/zxlFJCMY0JXP/n/qoRYXA87heJa4u/XRlfic
TfpMa5UoEGhzWxRF/EJIsEva8x3fPJ0eGPSnIC+mFQBUnVvnjb5U+yKy8Jh9L6Oy
8najYz/ZbkzIxiF0mLJPECSVddlMXFWls6DUk3fcZf1FhzEDwopmTy6ZONTkMaJv
+g3QQYmYN4HeiLg6CQENMAb1IVyLaMpzU57MWrV4Wsdt+TBAOFW0dSX3STIVnh68
wT6/ZXh45rESdIYFvA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:33:59 2026 by rpki-client