Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/f78666a00d194aac8323e3a292fbe5ae/0/36392e35372e33322e302f32302d3230203d3e2036303739.roa
File:                     36392e35372e33322e302f32302d3230203d3e2036303739.roa (raw, json)
Hash identifier:          KjgeattrbzPvMJQvzWtYSILlzF8RiQsWUbk0nGPLfgI=
Subject key identifier:   AC:E5:5F:8F:E7:E8:5F:D2:C9:45:FA:D0:FF:05:7A:93:F5:D3:3B:8C
Certificate issuer:       /CN=91132b90677148456a8540a4dcea5282c63e79f6633851f9dc
Certificate serial:       7920DFD0FB2A5E919407FC910FAA83AAF2E92ACC
Authority key identifier: 3F:48:C1:71:9C:F0:43:85:C0:0C:C9:83:A4:D6:06:3B:C9:45:A3:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/91132b90677148456a8540a4dcea5282c63e79f6633851f9dc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/f78666a00d194aac8323e3a292fbe5ae/0/36392e35372e33322e302f32302d3230203d3e2036303739.roa
Signing time:             Fri 06 Feb 2026 15:47:16 +0000
ROA not before:           Fri 06 Feb 2026 15:42:16 +0000
ROA not after:            Fri 05 Feb 2027 15:47:16 +0000
asID:                     6079
IP address blocks:        69.57.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/f78666a00d194aac8323e3a292fbe5ae/0/3F48C1719CF04385C00CC983A4D6063BC945A3B0.crl
                          rsync://rpki-rps.arin.net/repository/f78666a00d194aac8323e3a292fbe5ae/0/3F48C1719CF04385C00CC983A4D6063BC945A3B0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/91132b90677148456a8540a4dcea5282c63e79f6633851f9dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/34cf8eea-bcc0-4832-9847-b1c5cd531840.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/34cf8eea-bcc0-4832-9847-b1c5cd531840.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:20:df:d0:fb:2a:5e:91:94:07:fc:91:0f:aa:83:aa:f2:e9:2a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91132b90677148456a8540a4dcea5282c63e79f6633851f9dc
        Validity
            Not Before: Feb  6 15:42:16 2026 GMT
            Not After : Feb  5 15:47:16 2027 GMT
        Subject: CN=ACE55F8FE7E85FD2C945FAD0FF057A93F5D33B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d9:ab:1e:00:f2:f8:9e:0b:ed:19:8f:94:69:
                    53:e5:15:b4:5d:cb:94:48:40:ce:73:d4:40:8a:67:
                    15:c5:92:17:27:56:76:51:01:18:b5:03:aa:06:29:
                    81:12:2f:cb:f0:e0:14:44:73:b0:8b:e0:4d:d1:fd:
                    54:9a:99:2b:1e:42:e8:9d:e2:62:42:87:6a:97:99:
                    6e:07:1d:3d:dc:f7:83:18:7f:49:b0:51:06:61:70:
                    d0:8c:05:77:dd:f1:3a:d6:b9:b1:98:5f:6a:d2:2c:
                    6a:62:35:e8:0a:a6:67:ef:79:f3:19:0d:71:95:3c:
                    83:da:8f:29:a5:25:92:55:b4:e2:c5:76:6b:93:32:
                    27:f8:d2:6f:5c:56:c9:e6:32:61:57:29:30:e3:16:
                    5e:27:84:7b:40:09:04:dc:60:39:38:68:a3:da:14:
                    e9:35:45:5a:ad:8a:ed:8f:6f:18:9a:2f:af:53:4d:
                    17:33:78:15:7b:3b:14:0f:b3:d1:c0:33:b2:c7:53:
                    20:4e:3c:6e:ab:84:02:31:a8:38:eb:fc:00:b1:20:
                    d3:a9:8e:22:81:36:e4:a9:dd:8d:f7:d2:b6:50:24:
                    fa:f4:58:ae:d7:c7:70:c2:00:6f:39:06:17:49:22:
                    f7:4c:9a:e9:3e:03:4b:86:fc:64:ac:89:e6:52:1a:
                    c0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E5:5F:8F:E7:E8:5F:D2:C9:45:FA:D0:FF:05:7A:93:F5:D3:3B:8C
            X509v3 Authority Key Identifier:
                keyid:3F:48:C1:71:9C:F0:43:85:C0:0C:C9:83:A4:D6:06:3B:C9:45:A3:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/f78666a00d194aac8323e3a292fbe5ae/0/3F48C1719CF04385C00CC983A4D6063BC945A3B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34cf8eea-bcc0-4832-9847-b1c5cd531840/91132b90677148456a8540a4dcea5282c63e79f6633851f9dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/f78666a00d194aac8323e3a292fbe5ae/0/36392e35372e33322e302f32302d3230203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.57.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:92:9d:83:a5:fe:cf:9f:22:16:12:99:c2:29:78:f1:14:9f:
         9e:83:25:de:f9:ab:92:78:87:e6:5e:7b:42:2c:c0:fa:8e:39:
         17:1b:a7:9e:d6:1c:ee:ec:5d:e0:af:99:b3:05:9c:0b:6c:fe:
         9d:75:dd:eb:40:e7:21:71:3e:5d:bd:70:22:09:8c:8f:9d:d9:
         3c:83:72:e4:e4:53:d9:9d:5c:3e:b7:0a:cb:eb:b6:d7:b0:3a:
         e6:b6:31:ed:fe:13:e6:ec:f5:2e:c7:e8:f4:17:16:67:10:d4:
         99:5d:ea:31:c7:d0:b9:66:0b:d9:35:b1:16:50:ba:bc:1e:f7:
         54:a8:ec:15:af:7e:d7:a3:08:f0:b1:89:d7:11:6a:ea:21:52:
         28:cd:01:e2:f0:7a:71:b4:f0:fc:de:53:fb:58:83:56:65:a2:
         73:88:ae:91:64:ad:09:ec:e7:43:1c:41:11:bc:ec:c9:8d:0b:
         a5:d7:01:4c:13:1b:e9:77:db:d5:f8:7f:26:fb:c0:43:65:ce:
         4d:16:ca:20:2c:29:34:56:06:c8:a4:3d:28:53:5b:95:ac:e5:
         d2:2d:f2:df:d4:52:3e:45:ba:46:9c:98:cd:41:14:c8:27:1e:
         73:ac:67:28:7b:55:4e:8c:81:09:12:e4:45:dc:46:a6:16:32:
         cc:2e:99:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:40 2026 by rpki-client