Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e203633303235.roa
File:                     36342e3235332e39312e302f32342d3234203d3e203633303235.roa (raw, json)
Hash identifier:          +2BpWdQoaSK4dK7oRQLp2bjLelsb3LMResA/qrOBJjw=
Subject key identifier:   59:1D:99:88:35:54:C1:2B:80:BC:2E:06:21:AE:A3:4F:86:AC:AF:29
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       79C00102140652E047B9EB1A08D8F80B05931B94
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e203633303235.roa
Signing time:             Mon 30 Jun 2025 11:38:15 +0000
ROA not before:           Mon 30 Jun 2025 11:33:15 +0000
ROA not after:            Mon 29 Jun 2026 11:38:15 +0000
asID:                     63025
IP address blocks:        64.253.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 17:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c0:01:02:14:06:52:e0:47:b9:eb:1a:08:d8:f8:0b:05:93:1b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 30 11:33:15 2025 GMT
            Not After : Jun 29 11:38:15 2026 GMT
        Subject: CN=591D99883554C12B80BC2E0621AEA34F86ACAF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:1d:65:ad:58:12:c4:ab:77:9a:90:4d:8c:
                    7e:35:d1:49:a9:c8:62:a4:e3:43:c8:c0:ec:4b:dc:
                    93:9a:5e:c5:0b:f3:79:01:df:ac:03:e6:e1:66:2c:
                    e0:44:09:ea:e2:5a:70:e8:51:37:44:34:97:2b:61:
                    b2:82:46:2f:be:e0:ac:4f:4b:b0:ec:44:d2:eb:87:
                    44:b6:85:71:08:4a:ef:ab:a3:87:92:50:8f:36:0e:
                    a3:93:dd:af:45:57:5e:40:ba:3c:1d:3f:13:41:19:
                    f9:d8:30:4e:fc:97:7c:d3:5f:ee:1a:41:cd:eb:4e:
                    bd:a3:43:3d:c2:c0:8e:17:23:d8:0b:48:00:40:d2:
                    77:b0:c3:1e:6c:c4:b8:ac:94:7f:19:ac:f1:f9:81:
                    17:cc:08:42:0c:33:90:4b:05:17:90:41:27:8b:b9:
                    a1:16:3c:f4:98:5a:27:29:bf:76:00:8b:96:47:f3:
                    28:cc:4d:30:53:b0:21:10:04:52:04:39:3a:15:fb:
                    ba:18:74:6d:a9:04:82:73:4b:18:44:4c:2f:7a:f3:
                    00:80:25:9e:54:67:61:42:58:72:d5:57:39:0d:66:
                    b8:94:ec:eb:0c:fd:f5:0e:a1:c7:9b:d7:cb:f5:bf:
                    c5:94:9f:1e:62:0b:c3:7e:68:a6:6a:bc:dd:5c:cc:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1D:99:88:35:54:C1:2B:80:BC:2E:06:21:AE:A3:4F:86:AC:AF:29
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39312e302f32342d3234203d3e203633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:14:92:3d:60:36:d9:75:3a:6c:98:5e:0b:21:53:60:da:
         a3:ba:0f:b3:cd:d7:5b:a2:ac:6e:27:db:84:5c:43:9d:b5:a0:
         da:12:40:9d:01:98:56:7d:85:d4:bd:05:d0:ae:0d:e0:cd:53:
         09:4e:25:91:77:4f:aa:df:0e:7a:d7:b7:ac:8e:20:af:bd:ec:
         7b:33:6c:be:8b:c6:bb:8c:27:1d:93:0c:0f:8c:f1:e3:2d:5b:
         01:f4:f9:99:2e:d1:66:49:75:25:64:f1:3d:b9:9e:45:25:f0:
         e3:53:bc:9f:dc:19:c3:2c:d9:3c:81:1f:8d:46:8a:b3:ce:52:
         56:6d:92:71:b3:a4:cb:33:26:f0:30:0c:a7:e5:19:0b:25:21:
         b4:7e:a7:91:f2:76:c1:e2:71:55:c6:f1:77:4c:f7:b2:3b:a8:
         d5:f7:b1:d9:fa:9d:02:25:8f:5d:31:58:98:1e:ca:bb:43:e3:
         d3:b8:0e:a4:7d:89:ce:93:5e:c8:d6:5b:fe:8a:8b:cd:79:c7:
         d3:3a:de:8b:8e:a0:8a:a0:3f:ee:79:8b:c4:82:0d:e0:5d:73:
         80:ee:47:65:17:89:7c:09:99:9a:45:f6:30:52:db:e8:77:fb:
         05:c4:32:fa:aa:a9:d6:8d:fc:cc:6d:aa:78:32:e3:b9:5a:16:
         c6:5d:2e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:04:17 2025 by rpki-client