Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e20343031333632.roa
File:                     36342e38342e35362e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier:          wXRKhRgs+inZfepJep/pMrB1EF+J1FNN7sG/0gCCoaU=
Subject key identifier:   66:6D:B1:4C:3C:95:A1:B5:67:F8:76:C9:EA:4E:48:9B:11:42:E7:5C
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       1183D00218C2A4932959B6976F1E5D7D31B519C4
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e20343031333632.roa
Signing time:             Wed 16 Sep 2026 02:43:37 +0000
ROA not before:           Wed 16 Sep 2026 02:38:37 +0000
ROA not after:            Wed 15 Sep 2027 02:43:37 +0000
asID:                     401362
IP address blocks:        64.84.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 01:27:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:83:d0:02:18:c2:a4:93:29:59:b6:97:6f:1e:5d:7d:31:b5:19:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Sep 16 02:38:37 2026 GMT
            Not After : Sep 15 02:43:37 2027 GMT
        Subject: CN=666DB14C3C95A1B567F876C9EA4E489B1142E75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:03:75:b7:07:c3:cc:f9:04:a8:67:3b:0e:22:
                    fb:32:7f:29:d8:39:eb:7b:cb:38:f4:0d:dd:cf:81:
                    24:e4:eb:e4:e3:9e:52:73:65:da:d4:09:8d:de:42:
                    8a:73:fe:11:80:f5:d5:86:45:8e:d4:80:8f:03:ab:
                    2c:d3:20:c6:69:5a:59:3f:b8:f5:bf:c4:eb:7e:a0:
                    5c:7e:5c:e9:7b:bc:cc:1c:5a:d2:4c:90:d3:b3:75:
                    55:e4:32:c2:6e:1f:bc:f1:d4:12:09:82:23:b1:a9:
                    b5:83:66:3b:ba:8c:cc:48:47:01:c5:51:f4:6f:1a:
                    81:fd:d9:0f:f0:ca:47:4a:35:c2:e6:c4:73:c2:39:
                    f4:d7:b2:06:db:76:78:8b:e4:f1:ee:f5:af:11:8a:
                    78:7a:84:b3:06:e1:09:f6:4f:3e:9a:b0:45:48:9f:
                    ee:fc:e3:40:fd:db:06:ea:a8:ea:aa:cc:56:e3:4b:
                    5f:5f:56:a2:e5:66:e5:e9:a2:d6:2f:57:c2:31:08:
                    89:06:4e:92:d3:fc:b4:6a:34:af:d6:77:1d:fd:4c:
                    4e:23:0e:3c:94:cb:19:c8:90:c7:32:56:78:4b:3a:
                    fd:5e:c2:10:99:15:c1:cf:a8:eb:c5:ef:f1:79:94:
                    33:81:f2:98:ec:7c:73:19:68:ab:2b:95:ba:2e:8e:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6D:B1:4C:3C:95:A1:B5:67:F8:76:C9:EA:4E:48:9B:11:42:E7:5C
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35362e302f32342d3234203d3e20343031333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:b1:a8:ad:ef:06:85:c2:22:28:f5:82:32:15:e1:a4:46:
         c0:00:97:86:e2:20:db:e2:68:ff:b9:e3:ba:e9:61:50:0e:87:
         f0:09:bb:b6:34:9a:db:bf:26:05:19:ab:68:e9:77:68:63:5a:
         2d:bf:e6:e4:44:68:20:2a:d8:a0:a9:62:0e:b5:31:1c:d4:b3:
         e4:bf:02:8a:1f:46:1b:80:9d:18:0a:f9:0d:6f:6c:be:b0:62:
         7f:86:22:ab:a3:e5:71:9d:ed:fa:c2:d5:81:e5:00:ee:23:c3:
         90:ce:fc:62:e5:8f:d8:01:b7:84:9b:bb:06:7f:9d:5d:0d:c6:
         eb:28:50:12:0e:03:32:a2:64:e1:4d:3e:aa:eb:c0:59:83:42:
         89:1c:c0:da:e9:1f:6d:7a:27:39:7e:68:f9:4f:3f:dc:97:be:
         6c:84:b4:4f:0f:a5:4d:d0:e1:59:4f:39:d6:4c:80:50:d5:e3:
         8b:a1:58:f6:6b:0a:08:ea:d4:1a:56:0d:02:e6:8b:ee:d8:15:
         e2:c0:ad:26:8d:50:f0:1b:f7:2a:20:44:5c:4e:25:dd:79:b8:
         c2:84:1d:9b:a1:fb:9c:c0:60:97:7a:ea:1d:4a:d0:89:d3:ed:
         d4:9a:68:b4:79:2a:b8:7b:96:69:a8:2b:25:72:43:26:ef:6f:
         a7:55:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:05 2026 by rpki-client