Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          LiUgRDSCpDEz4E2uObhoHiI/npaReLQNPvqTdoCo2jg=
Subject key identifier:   AA:AF:50:A0:FD:48:40:04:F7:25:7A:E5:21:1B:2D:0D:99:82:97:C7
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       68D6C254EC1AE65E82E3BEF837F901E3F7300C1D
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
Signing time:             Wed 12 Feb 2025 00:00:27 +0000
ROA not before:           Tue 11 Feb 2025 23:55:27 +0000
ROA not after:            Wed 11 Feb 2026 00:00:27 +0000
asID:                     36530
IP address blocks:        140.99.47.0/24 maxlen: 24
                          140.99.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d6:c2:54:ec:1a:e6:5e:82:e3:be:f8:37:f9:01:e3:f7:30:0c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Feb 11 23:55:27 2025 GMT
            Not After : Feb 11 00:00:27 2026 GMT
        Subject: CN=AAAF50A0FD484004F7257AE5211B2D0D998297C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:07:c3:35:78:9c:29:74:3a:8e:af:73:c9:
                    60:be:be:35:2f:ba:f1:d4:0f:fb:bb:32:19:68:45:
                    f3:f9:16:44:02:09:00:21:7f:b5:42:fc:e7:55:36:
                    74:75:d3:42:35:f7:e8:aa:be:55:78:51:53:e8:76:
                    24:21:22:83:95:b5:9b:cf:3d:3f:1a:09:98:f4:9e:
                    4d:cb:33:3b:bb:0d:da:df:56:df:cd:44:2c:38:6a:
                    e8:2d:9e:42:98:26:c9:2c:89:a6:39:a2:61:9f:07:
                    94:08:c5:0e:e5:23:95:25:e2:c2:59:5e:2d:8f:88:
                    64:6a:50:79:04:0a:c9:29:68:99:ce:3b:9f:bb:29:
                    de:73:38:a7:82:91:b9:c5:7d:c0:85:4b:a2:a6:b4:
                    d0:5d:c7:bf:5b:7f:57:c7:a6:d7:bf:53:18:ee:82:
                    72:8a:3a:98:63:e7:b1:82:6a:f7:05:24:c5:1c:62:
                    45:a5:2a:82:14:25:12:2c:8a:04:ff:c3:30:d4:09:
                    54:5a:46:db:6c:6e:97:05:ea:df:60:ea:0b:47:c6:
                    c7:dd:bf:b5:42:47:32:96:6c:42:c6:57:3f:86:e2:
                    d9:a6:c5:19:db:ff:24:c3:b0:2d:f9:ff:21:07:4d:
                    7e:57:ba:a7:40:2c:42:0d:9d:14:cd:bc:73:b4:e2:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AF:50:A0:FD:48:40:04:F7:25:7A:E5:21:1B:2D:0D:99:82:97:C7
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.47.0-140.99.48.255

    Signature Algorithm: sha256WithRSAEncryption
         66:fb:89:ff:c1:10:6e:b1:b4:e7:5f:44:3c:88:9d:95:37:df:
         8b:fe:3b:24:54:be:c5:a2:77:06:ab:00:dd:47:6d:32:13:b0:
         36:8f:44:77:e1:fb:7d:d5:4b:24:2d:cf:f4:3a:33:76:fe:b9:
         b4:17:d1:f5:51:e5:f6:62:5d:c0:a9:83:27:39:85:19:51:6b:
         87:10:64:24:57:ec:d1:c1:dd:b3:e5:23:d7:e1:e0:ed:86:36:
         79:ca:98:37:3a:72:33:7b:ae:37:10:30:a3:60:26:c1:66:b7:
         a9:ee:67:4e:6d:7d:f9:99:e2:7a:ad:20:75:2d:c9:2b:67:ca:
         91:e3:0a:5a:99:30:99:13:c1:d2:95:29:af:7e:44:dd:23:19:
         e8:14:a2:38:da:27:86:1a:2e:5d:2d:58:bc:39:b7:9c:81:b4:
         24:86:cb:7b:c6:96:90:5a:39:c5:b5:b1:c1:d1:c9:b9:58:45:
         6b:ae:44:0e:6a:64:db:7a:0a:e9:f4:68:47:9b:09:3c:22:80:
         3a:2a:6f:3f:8d:65:cf:8d:64:ef:4c:9f:c4:d6:61:94:74:88:
         c9:8e:d3:d8:3a:9f:aa:98:6b:11:97:0a:ef:d7:dd:ba:56:3f:
         52:17:48:86:fd:a9:77:f6:e4:65:f2:56:32:10:4c:56:cf:e7:
         4a:4d:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:05 2025 by rpki-client