Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203233343730.roa
File:                     36362e3131382e3234342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          xjQHEJHn4iI45q0fLNHc19L9zSaN99f//9XZbnvAdXI=
Subject key identifier:   EE:3A:70:4C:01:7D:7B:8C:43:5A:48:94:84:63:EA:47:F7:47:CA:94
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       283F00863065EE0224A937C9FB82DF0F1E119270
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 20 Aug 2025 12:30:39 +0000
ROA not before:           Wed 20 Aug 2025 12:25:39 +0000
ROA not after:            Wed 19 Aug 2026 12:30:39 +0000
asID:                     23470
IP address blocks:        66.118.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 08:52:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3f:00:86:30:65:ee:02:24:a9:37:c9:fb:82:df:0f:1e:11:92:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Aug 20 12:25:39 2025 GMT
            Not After : Aug 19 12:30:39 2026 GMT
        Subject: CN=EE3A704C017D7B8C435A48948463EA47F747CA94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:4a:2a:03:3f:24:8c:3d:b4:e1:b3:fd:f7:
                    60:d2:b0:92:a0:cc:c0:ab:5c:06:df:5a:5c:19:bf:
                    63:93:5b:58:41:95:52:77:ed:93:01:3a:b1:ad:15:
                    72:ca:af:fc:d0:18:cc:f8:41:24:32:ea:cb:07:cb:
                    f1:cb:8f:a4:05:31:02:84:81:c6:84:2a:32:bc:6c:
                    71:8a:94:45:3d:c5:4c:70:d1:f9:64:06:c1:f0:05:
                    81:6a:38:b9:19:00:bc:2c:d3:ac:d2:ca:93:da:ce:
                    9c:f7:db:45:d0:d3:f8:ed:c1:21:f1:53:da:4c:ff:
                    a1:06:1b:28:06:92:75:ef:b2:f1:a1:81:88:7b:31:
                    5d:d6:65:16:e4:2e:e0:23:6f:b9:d3:0c:59:0a:b7:
                    c8:de:cf:96:5d:c2:16:5d:d2:9e:9f:50:08:07:64:
                    ca:1b:7b:e2:9b:06:00:cf:1d:af:7f:58:08:59:bc:
                    8d:36:ec:6a:4d:84:c3:f6:e1:47:db:a7:51:b1:c5:
                    b3:c4:6e:ba:fe:de:80:1c:cd:dc:b5:af:5c:16:9a:
                    10:2d:2f:ef:89:0d:f5:40:19:54:2f:9e:62:d5:d0:
                    a6:8f:56:ac:df:e8:97:1a:38:35:5b:e4:1c:61:42:
                    f8:3c:bd:f8:24:b7:39:10:04:22:8f:b3:d0:cc:2c:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:70:4C:01:7D:7B:8C:43:5A:48:94:84:63:EA:47:F7:47:CA:94
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:29:f5:c4:51:25:24:eb:ca:15:bd:a5:e7:a7:bc:95:6f:
         c1:53:7c:a4:4b:4e:6a:f9:e5:51:df:34:dd:31:20:59:75:a8:
         31:db:c8:a9:1d:91:99:fe:41:03:63:cf:66:ac:60:f6:5e:fe:
         d2:db:7d:d9:16:00:6b:d1:5d:e0:c1:00:7e:42:66:91:50:ac:
         00:ea:9d:c7:53:ca:d9:e0:c4:ec:70:ce:a1:56:36:d3:e2:37:
         26:06:82:b1:a7:b3:b8:00:83:96:c3:d1:36:24:fd:9c:33:9c:
         27:98:35:d5:33:2c:8b:52:65:65:4f:6f:f2:f1:bc:72:97:ce:
         94:ff:b8:63:a6:56:59:b8:c4:a8:d8:22:af:87:d9:80:10:e7:
         38:53:6a:80:bc:39:cc:66:90:c9:37:80:69:93:58:f6:90:5d:
         9c:a7:e8:27:fa:b9:0e:20:ef:03:18:c7:67:4d:ce:f9:a6:61:
         09:4e:c5:46:6e:85:65:e4:03:2b:9f:e6:48:f2:0b:a2:fb:b7:
         48:1c:f8:52:94:54:bc:91:d4:72:76:2f:b4:0e:f9:cf:e5:c5:
         e0:44:e5:91:ba:75:ee:aa:ad:66:4d:d3:bf:86:a4:ff:09:51:
         45:7f:94:b5:ae:29:27:62:ba:16:60:db:70:37:72:d6:0b:30:
         53:2b:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:03:40 2025 by rpki-client