Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e33302e302f32332d3234203d3e2035363530.roa
File:                     36342e38342e33302e302f32332d3234203d3e2035363530.roa (raw, json)
Hash identifier:          Ai1WAFm8lFEGOXeESpSmpFHi6uu9wxRDxU0GxQBn67Y=
Subject key identifier:   CA:E0:E6:77:6C:0A:C1:8D:B2:81:BF:9D:27:28:F4:4B:EE:60:93:32
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       7C68B6215F7CE5590AF594D7E4BD6766C17D1410
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e33302e302f32332d3234203d3e2035363530.roa
Signing time:             Sat 29 Aug 2026 00:36:20 +0000
ROA not before:           Sat 29 Aug 2026 00:31:20 +0000
ROA not after:            Sat 28 Aug 2027 00:36:20 +0000
asID:                     5650
IP address blocks:        64.84.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:35:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:68:b6:21:5f:7c:e5:59:0a:f5:94:d7:e4:bd:67:66:c1:7d:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Aug 29 00:31:20 2026 GMT
            Not After : Aug 28 00:36:20 2027 GMT
        Subject: CN=CAE0E6776C0AC18DB281BF9D2728F44BEE609332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:4f:67:8c:ce:76:02:53:91:bb:79:36:55:
                    c5:43:0b:87:09:dc:b2:10:e6:c4:f4:82:b1:14:91:
                    12:94:2f:1d:41:af:ed:db:60:6d:23:7a:ab:67:d7:
                    24:fc:ee:64:2e:24:11:a8:58:75:e3:37:a8:7b:9c:
                    d8:87:a8:f3:25:4c:36:f8:3e:05:c1:90:75:35:77:
                    e8:f3:08:cd:36:0a:4c:51:24:06:88:13:8f:31:dc:
                    6f:f7:39:27:43:eb:f6:45:35:c8:ca:2f:fc:c0:65:
                    9f:95:47:85:76:55:8e:34:98:f4:45:a6:34:96:73:
                    21:bf:d4:f7:70:24:24:5d:12:ec:de:7e:56:ee:20:
                    47:0f:0b:66:30:cf:78:ed:f0:46:5a:68:9a:c5:e0:
                    b0:02:a4:2a:0b:49:b3:9f:f8:b0:ee:1d:14:c9:f0:
                    c9:d0:97:49:ea:8a:a2:18:e2:95:d5:7f:6a:9a:2c:
                    59:29:1f:e6:b2:d1:7a:22:66:a7:42:af:ca:29:da:
                    46:d7:81:d1:97:4b:68:a9:6b:c9:37:1d:81:72:57:
                    71:79:33:72:a9:e2:af:49:48:3d:10:97:76:c8:6a:
                    24:ff:08:db:e0:e0:b8:cf:f4:9c:c3:a6:7f:63:44:
                    4f:96:3e:b9:de:e3:2d:7c:a2:64:0e:23:da:95:a8:
                    43:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:E6:77:6C:0A:C1:8D:B2:81:BF:9D:27:28:F4:4B:EE:60:93:32
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e33302e302f32332d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e4:75:fd:fa:1e:28:52:ca:87:48:fe:7e:69:29:8d:1e:51:d6:
         21:0d:dc:5f:16:0b:b6:69:b9:f1:30:26:e1:30:38:7c:ce:b1:
         c8:1b:90:3b:a4:b3:68:80:9f:42:cd:b3:57:6d:ce:e8:59:ca:
         29:d3:68:41:44:cb:9b:98:b4:7c:6f:e0:7c:28:da:c3:b9:84:
         37:b8:83:98:ed:3b:96:23:5d:6c:69:f1:7d:5d:94:2f:89:9f:
         a8:2d:00:36:0c:cd:c4:14:5b:05:f6:f7:75:f4:3a:cb:f9:34:
         0a:a8:51:96:cc:4a:63:6d:90:21:e9:e8:4e:df:c3:fc:8c:b1:
         95:9d:38:18:bb:ee:d6:fc:8f:38:1d:3d:e4:1d:06:1a:20:b6:
         63:c7:51:72:58:b9:44:5c:e9:de:30:b7:65:ee:15:14:cf:f6:
         88:21:0c:8b:0e:33:ba:fb:36:02:14:22:75:1b:dd:57:78:5e:
         52:81:27:96:24:45:26:29:72:01:d4:f5:05:af:7e:18:03:14:
         90:9d:56:16:b5:4d:5f:3e:0d:a7:7c:84:b7:af:51:e0:c4:d2:
         2a:58:71:e6:69:b3:13:94:52:95:09:26:aa:50:53:84:8a:7a:
         c7:cc:d3:6a:cf:34:35:c3:75:33:43:7b:5e:b2:27:12:97:dc:
         9d:67:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:08:24 2026 by rpki-client