Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e2035303635.roa
File:                     36342e3235332e38392e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier:          0BUE5pDtYgLLnwwjhna69c89Hovvp8RI1EfPsZkfBWE=
Subject key identifier:   8A:2D:C4:2D:FB:84:19:0F:CF:3D:33:F4:81:D3:B9:7B:7B:1A:C9:FD
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       481E42AA35B4A4363D965E41892C0898369D711B
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e2035303635.roa
Signing time:             Mon 10 Mar 2025 08:28:26 +0000
ROA not before:           Mon 10 Mar 2025 08:23:26 +0000
ROA not after:            Mon 09 Mar 2026 08:28:26 +0000
asID:                     5065
IP address blocks:        64.253.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1e:42:aa:35:b4:a4:36:3d:96:5e:41:89:2c:08:98:36:9d:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Mar 10 08:23:26 2025 GMT
            Not After : Mar  9 08:28:26 2026 GMT
        Subject: CN=8A2DC42DFB84190FCF3D33F481D3B97B7B1AC9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0d:ef:2c:9d:5c:78:b0:20:04:17:06:ff:3d:
                    0e:45:7d:b7:4d:e9:80:72:23:36:22:9a:ae:d2:4a:
                    cd:36:07:8d:98:2c:8f:3e:98:f3:ad:69:11:fd:dc:
                    f3:1e:37:41:9c:ab:c6:ac:e2:7a:75:4d:f2:63:d7:
                    93:10:74:f8:47:10:ca:fe:a2:ab:9d:ec:1e:c4:12:
                    b8:a1:58:fd:66:26:35:a2:1c:e9:c0:7e:b7:e2:2f:
                    1d:2c:11:07:f4:06:91:0c:41:aa:1f:6c:ab:a1:a0:
                    47:2b:0e:40:96:40:4c:ef:61:25:cf:d6:00:c0:d3:
                    ed:d5:f5:f9:05:76:42:a4:97:f1:4b:64:07:f9:2f:
                    bb:3b:c4:b6:6f:bb:72:a1:8d:00:33:68:51:b1:04:
                    09:8c:29:9d:6e:c9:db:c7:25:88:05:24:d7:b0:d1:
                    25:bf:6e:91:da:7a:17:d9:c6:36:6a:84:98:13:31:
                    f6:14:44:c1:53:f2:85:cb:ab:49:90:87:1f:76:83:
                    48:41:03:93:3e:12:74:d7:c9:76:c2:c7:01:be:aa:
                    cb:d8:4d:5e:a3:93:f1:eb:55:00:66:5b:16:03:cc:
                    df:c7:9d:cf:6f:ec:c7:ca:e4:f6:a9:a6:67:85:93:
                    90:17:47:64:5a:db:75:47:3d:fe:31:3f:ed:b5:18:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:C4:2D:FB:84:19:0F:CF:3D:33:F4:81:D3:B9:7B:7B:1A:C9:FD
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e38392e302f32342d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:1f:d8:a5:2b:18:30:31:20:27:d8:d7:c6:e8:06:75:63:88:
         89:fb:b4:f3:f0:90:3a:6f:8d:b8:64:c1:1c:9f:d5:66:12:9b:
         b2:bc:7d:31:02:c1:2d:2a:30:6b:49:c2:22:5a:98:04:1f:33:
         a2:57:13:7c:a8:34:3f:91:1b:0f:35:01:a5:58:d0:82:eb:32:
         f4:1a:b2:54:d8:76:1a:94:f8:31:76:5c:82:ca:0b:c0:52:9e:
         02:63:50:1c:8d:15:75:a0:c7:87:21:96:2b:bc:d2:c4:22:cc:
         70:f6:99:65:57:e8:bf:5d:29:cd:77:a5:9a:89:2a:6f:10:cd:
         b3:86:f9:42:6b:32:fa:35:fe:5b:3c:de:fc:97:f2:7d:b2:0b:
         0c:89:95:65:af:70:7c:e9:cb:6e:5a:b3:84:37:23:c7:81:19:
         a8:05:1f:08:46:cf:9b:9c:aa:3a:73:47:53:7d:3c:17:f6:12:
         07:64:05:82:95:9e:2b:ef:c4:92:0e:06:48:0b:77:ef:c6:d0:
         8d:2c:1c:06:ce:97:a8:64:5c:a4:33:f9:45:19:a8:32:0c:26:
         86:d3:80:1d:be:47:d4:16:09:e9:32:a6:08:d5:b3:df:53:41:
         62:3b:3d:2b:06:e1:f1:58:d9:f4:b0:42:89:e6:c2:5a:44:ee:
         a8:b1:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:43 2025 by rpki-client