Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35372e302f32342d3234203d3e20333938323536.roa
File:                     36342e38342e35372e302f32342d3234203d3e20333938323536.roa (raw, json)
Hash identifier:          z/mMXxs6MsWws09kH/lNY0h9ksjyYEI07Rl1q7aCaAo=
Subject key identifier:   DE:71:35:37:20:4F:0F:B6:DC:DF:03:B1:93:19:09:44:6B:FB:42:F1
Certificate issuer:       /CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
Certificate serial:       01555178BF9F8A72564CC1911C7D80B140DD8C22
Authority key identifier: A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35372e302f32342d3234203d3e20333938323536.roa
Signing time:             Mon 19 Oct 2026 13:07:17 +0000
ROA not before:           Mon 19 Oct 2026 13:02:17 +0000
ROA not after:            Mon 18 Oct 2027 13:07:17 +0000
asID:                     398256
IP address blocks:        64.84.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl
                          rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/4d96d9f0-6f14-41fe-bf49-eed930201a23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Nov 2026 21:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:55:51:78:bf:9f:8a:72:56:4c:c1:91:1c:7d:80:b1:40:dd:8c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c
        Validity
            Not Before: Oct 19 13:02:17 2026 GMT
            Not After : Oct 18 13:07:17 2027 GMT
        Subject: CN=DE713537204F0FB6DCDF03B1931909446BFB42F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:ff:fc:7d:ba:d1:27:8f:90:a2:77:c9:cb:
                    f0:2b:5c:32:dc:e8:ca:58:34:82:bc:50:5b:28:c6:
                    3a:4a:b7:92:e0:aa:25:a4:ab:9a:b9:d8:26:41:29:
                    98:df:e4:11:d2:fa:b7:5a:c1:20:34:74:40:ed:7e:
                    e2:50:83:84:33:3f:17:cb:f9:88:4b:3d:53:9c:d3:
                    e8:a8:b8:f0:79:f9:08:d4:c7:58:cc:7b:7c:1c:0d:
                    b7:f5:90:95:18:62:4b:ce:50:a5:a5:76:e3:44:f1:
                    71:26:ef:cb:69:ba:4f:29:6b:6b:fb:52:95:aa:4c:
                    e6:2c:9d:45:c8:15:aa:3f:ca:08:09:c8:b1:75:06:
                    f8:a6:ab:81:aa:b0:8f:94:67:b6:44:b5:30:74:d4:
                    db:fc:10:c6:de:b0:1c:b9:88:33:a2:db:27:2c:16:
                    48:bb:2c:ab:c7:0d:b7:5a:6f:16:16:44:9c:9f:b2:
                    b1:1d:8c:26:cb:0f:3b:94:d8:b8:4f:8b:ac:4d:1d:
                    5a:be:ae:11:cc:81:6a:26:3d:2f:3e:09:c0:24:57:
                    f8:30:07:64:99:6f:77:20:37:cc:45:d5:db:df:09:
                    98:1a:e5:17:ec:4e:29:ef:7c:f4:0f:3d:42:a7:a7:
                    bf:f6:de:a9:82:9c:55:e1:0a:09:3a:ca:5a:2e:09:
                    74:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:35:37:20:4F:0F:B6:DC:DF:03:B1:93:19:09:44:6B:FB:42:F1
            X509v3 Authority Key Identifier:
                keyid:A5:8D:EC:BE:AC:6A:D9:6C:03:FA:34:63:A2:48:3D:72:FA:D1:A0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/A58DECBEAC6AD96C03FA3463A2483D72FAD1A0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4d96d9f0-6f14-41fe-bf49-eed930201a23/89192ba6a6447ae8e0dfc18c30de8fb6818ba647d42765672c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/e8a764ddd93f4101899418ef4d2fde81/0/36342e38342e35372e302f32342d3234203d3e20333938323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:52:8f:f2:f8:fe:78:37:cf:5c:ce:69:65:e3:c1:fe:04:93:
         41:d7:a2:b0:6a:bf:16:6e:f8:65:15:1c:9a:62:fe:b6:5c:3f:
         e4:1e:a4:12:4e:81:93:c8:f6:1a:eb:96:93:9b:ac:85:ae:83:
         73:97:b4:ee:e8:3a:16:00:ee:a9:fc:43:13:86:5a:a2:e6:b5:
         86:99:21:74:fa:d7:f1:06:1b:cf:2f:08:65:4e:39:da:ce:ae:
         6a:01:f8:34:7c:36:3a:fe:ca:f4:0c:ee:cd:69:8b:cb:bd:a4:
         76:3d:27:e5:23:b8:ac:23:9f:b3:93:65:24:70:fd:32:b5:95:
         4c:9e:e4:0e:15:73:31:31:4d:70:d5:5d:0e:82:02:f7:5b:50:
         5f:4d:21:6e:50:41:ee:c6:cb:af:ad:4f:26:10:81:71:16:fe:
         97:0b:77:95:74:99:11:d6:a0:ae:6e:79:d5:77:25:b0:d7:fe:
         ca:ac:60:92:18:df:ac:12:46:bd:42:c3:61:cf:2b:ed:02:28:
         22:8a:26:f2:86:68:15:c7:dc:62:cb:b3:45:24:c0:ce:4c:31:
         fb:62:db:1c:e1:59:6e:59:c8:e2:70:17:8c:5f:7e:eb:c4:dc:
         69:c4:53:7c:72:b4:bb:7a:3d:d2:b9:b9:cc:1f:ae:92:79:43:
         85:6e:cb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:55:38 2026 by rpki-client