Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa
File:                     AS36217.roa (raw, json)
Hash identifier:          N5/TfYy6Jt7bGhbOX+GjsrfwV4Z3ZSYgQEg1plHlHnk=
Subject key identifier:   40:A8:3A:4A:AD:9B:E6:32:53:8D:FE:8C:96:41:6A:E2:3D:5F:85:72
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       300318B9D3729B7C415373550B638A9385642D21
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa
Signing time:             Mon 02 Oct 2023 22:55:40 +0000
ROA not before:           Mon 02 Oct 2023 22:50:40 +0000
ROA not after:            Mon 30 Sep 2024 22:55:40 +0000
asID:                     36217
IP address blocks:        66.85.249.0/24 maxlen: 24
                          157.53.224.0/24 maxlen: 24
                          2607:f740:e00a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 08:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:03:18:b9:d3:72:9b:7c:41:53:73:55:0b:63:8a:93:85:64:2d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct  2 22:50:40 2023 GMT
            Not After : Sep 30 22:55:40 2024 GMT
        Subject: CN=40A83A4AAD9BE632538DFE8C96416AE23D5F8572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:05:82:0b:17:b6:43:b7:c1:0c:f3:0d:4a:
                    1c:b9:27:ad:7a:63:1d:e0:f0:3e:16:e2:e8:e8:18:
                    8e:ea:a9:a8:1e:03:28:6d:70:3b:99:04:9c:89:b1:
                    a2:a7:e7:77:8f:17:1c:fb:74:a6:35:2d:08:2d:a1:
                    03:75:95:8c:09:44:05:37:77:31:6a:45:39:01:83:
                    b9:7d:94:36:5f:46:3d:95:b2:75:26:a5:62:f8:63:
                    c2:19:80:69:54:85:78:0c:e1:9c:f6:45:cc:09:93:
                    cd:bc:2c:2f:80:5f:b3:e4:9a:e4:c7:7e:7d:57:3b:
                    ee:09:cd:d7:d1:ba:6b:3c:d8:6b:57:da:26:3b:a9:
                    6a:e8:d7:65:f3:d3:d0:a5:f4:a1:40:f7:26:87:af:
                    38:dd:da:aa:22:e9:f0:53:50:75:8d:25:6c:a9:b1:
                    a7:6e:98:16:3a:89:d8:7f:45:c3:ae:35:08:b1:dd:
                    54:be:7e:28:4b:fa:d4:62:bd:f7:c6:82:92:4e:f9:
                    29:7e:a0:fa:3a:e8:67:62:d3:7c:ed:c0:58:23:17:
                    2a:5d:3b:4f:75:c8:68:ed:be:18:5f:4c:e3:94:41:
                    a9:2c:76:af:fe:b4:50:6a:d8:89:3e:89:f4:71:e2:
                    7f:41:2a:55:41:9e:07:c1:55:07:08:e7:f9:9e:b0:
                    61:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A8:3A:4A:AD:9B:E6:32:53:8D:FE:8C:96:41:6A:E2:3D:5F:85:72
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS36217.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.85.249.0/24
                  157.53.224.0/24
                IPv6:
                  2607:f740:e00a::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:4a:fa:c1:af:02:44:ae:00:8f:2f:06:2b:80:14:49:f3:37:
         a9:b8:21:17:86:bc:84:b3:40:0a:44:38:5d:a0:77:8e:7d:c3:
         22:46:2e:41:ca:86:47:92:53:b8:3f:31:d7:8c:15:ec:e9:6f:
         eb:c3:13:fe:f5:1f:99:04:60:5c:01:c0:87:6c:ce:a9:4b:c8:
         9e:be:74:60:d7:6b:53:f1:62:72:dd:44:70:8d:b0:f0:2f:9d:
         c6:71:8a:4c:a3:cc:df:81:11:9e:bd:af:62:89:05:b3:b6:3d:
         78:63:24:18:b5:39:0d:3b:60:2e:81:50:19:83:3a:ee:51:ec:
         e4:f6:0e:5e:dc:0e:84:e6:f9:db:a4:e0:9c:12:94:f4:91:1b:
         64:a4:1f:fa:59:84:6e:f1:57:a3:c6:b8:cc:5f:98:d0:4d:e8:
         cc:29:05:c5:70:be:59:e3:e0:b5:83:62:8e:e5:7d:71:05:24:
         a7:e0:1b:be:7c:00:cd:93:bd:03:23:87:5a:f4:36:0b:60:7a:
         94:2e:ce:55:5b:a9:17:2b:30:1f:f1:ea:91:b2:92:4b:ef:f4:
         5f:fe:d0:18:e1:f6:0b:3a:4d:24:f7:45:7c:6d:0f:b2:4e:fe:
         79:82:7e:a1:e1:32:a0:c1:5b:6d:c5:58:ff:c9:be:fb:d9:5d:
         53:92:ca:d7
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUMAMYudNym3xBU3NVC2OKk4VkLSEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm
ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjMxMDAyMjI1MDQwWhcNMjQwOTMwMjI1NTQw
WjAzMTEwLwYDVQQDEyg0MEE4M0E0QUFEOUJFNjMyNTM4REZFOEM5NjQxNkFFMjNE
NUY4NTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM0FggsXtkO3
wQzzDUocuSetemMd4PA+FuLo6BiO6qmoHgMobXA7mQScibGip+d3jxcc+3SmNS0I
LaEDdZWMCUQFN3cxakU5AYO5fZQ2X0Y9lbJ1JqVi+GPCGYBpVIV4DOGc9kXMCZPN
vCwvgF+z5Jrkx359VzvuCc3X0bprPNhrV9omO6lq6Ndl89PQpfShQPcmh6843dqq
IunwU1B1jSVsqbGnbpgWOonYf0XDrjUIsd1Uvn4oS/rUYr33xoKSTvkpfqD6Ouhn
YtN87cBYIxcqXTtPdcho7b4YX0zjlEGpLHav/rRQatiJPon0ceJ/QSpVQZ4HwVUH
COf5nrBh4QIDAQABo4IClTCCApEwHQYDVR0OBBYEFECoOkqtm+YyU43+jJZBauI9
X4VyMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv
MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0
ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw
ODRiODYvMC9BUzM2MjE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYG
CCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQlX5AwQAnTXgMA8EAgACMAkDBwAm
B/dA4AowDQYJKoZIhvcNAQELBQADggEBAKVK+sGvAkSuAI8vBiuAFEnzN6m4IReG
vISzQApEOF2gd459wyJGLkHKhkeSU7g/MdeMFezpb+vDE/71H5kEYFwBwIdszqlL
yJ6+dGDXa1PxYnLdRHCNsPAvncZxikyjzN+BEZ69r2KJBbO2PXhjJBi1OQ07YC6B
UBmDOu5R7OT2Dl7cDoTm+duk4JwSlPSRG2SkH/pZhG7xV6PGuMxfmNBN6MwpBcVw
vlnj4LWDYo7lfXEFJKfgG758AM2TvQMjh1r0NgtgepQuzlVbqRcrMB/x6pGykkvv
9F/+0Bjh9gs6TST3RXxtD7JO/nmCfqHhMqDBW23FWP/JvvvZXVOSytc=
-----END CERTIFICATE-----
Generated at Sun May 12 07:43:08 2024 by rpki-client on console-fra.rpki-client.org