Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203333363539.roa
File:                     36342e3235332e39302e302f32342d3234203d3e203333363539.roa (raw, json)
Hash identifier:          BrjfW6M7kgtWbd/xCpXFDKV060irgXH7hNdrWOTj3TA=
Subject key identifier:   AD:12:8E:99:85:F1:6F:D6:0A:19:C5:2D:EE:73:F6:A4:16:3B:96:71
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       25B50F3C37A1C6A0DBEB146FBFCDAB94804092A7
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203333363539.roa
Signing time:             Fri 03 Jan 2025 18:48:07 +0000
ROA not before:           Fri 03 Jan 2025 18:43:07 +0000
ROA not after:            Fri 02 Jan 2026 18:48:07 +0000
asID:                     33659
IP address blocks:        64.253.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b5:0f:3c:37:a1:c6:a0:db:eb:14:6f:bf:cd:ab:94:80:40:92:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan  3 18:43:07 2025 GMT
            Not After : Jan  2 18:48:07 2026 GMT
        Subject: CN=AD128E9985F16FD60A19C52DEE73F6A4163B9671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:c2:c4:0a:a9:94:b7:61:a9:7c:f6:72:a8:
                    5a:aa:40:db:59:d5:ad:0e:d0:24:d4:e7:4b:67:95:
                    e4:8b:d2:f5:37:1b:61:f0:e8:7f:bc:09:d7:79:8c:
                    48:e3:89:2d:6c:de:0d:f3:0b:73:21:d5:93:79:f6:
                    8c:ff:09:58:05:b7:08:c9:ce:50:d9:e0:d5:34:09:
                    9f:04:ba:4b:07:21:45:ce:d6:c6:bf:aa:8b:d7:1d:
                    78:39:8d:01:f6:80:8f:40:0b:88:4b:71:a6:c9:59:
                    78:f5:5c:32:3c:db:68:99:4b:40:39:28:3d:02:7a:
                    e6:5a:06:e4:a3:07:c4:e1:79:6f:57:ac:cc:56:73:
                    f3:65:71:37:3d:58:12:6b:74:47:ca:b4:64:27:7c:
                    c6:ec:3c:7b:b6:31:29:bc:47:94:f8:a3:b0:0c:94:
                    39:9f:8b:29:9c:d3:a7:cc:5b:7e:e5:19:c5:b9:92:
                    1e:e1:d7:dd:38:ae:89:1f:18:b1:92:59:b6:4f:52:
                    83:30:b8:f1:fc:e9:8d:44:f7:bd:cb:cc:8a:62:b8:
                    ac:d8:4b:e7:75:fc:e1:bd:87:29:ec:1d:1e:d5:72:
                    fd:cb:0d:69:1e:b9:71:33:8c:61:38:71:41:eb:b7:
                    ea:b8:32:96:9d:cb:a1:52:20:68:e1:60:95:54:bc:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:12:8E:99:85:F1:6F:D6:0A:19:C5:2D:EE:73:F6:A4:16:3B:96:71
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39302e302f32342d3234203d3e203333363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:44:57:fd:2a:44:61:b5:5a:af:d7:d5:d5:9c:cc:86:c0:f0:
         18:c5:59:ec:ad:c8:0b:01:30:02:5a:1c:be:c7:4f:3c:3d:95:
         b8:b6:0c:17:76:02:da:70:eb:f5:17:3b:e0:f8:02:f4:27:31:
         bc:b8:ee:b9:24:31:fd:43:ad:6e:52:d2:84:24:14:3f:7c:0e:
         da:f8:91:a0:10:ff:91:51:44:57:4c:8e:dc:46:be:ef:c9:0e:
         4c:f9:0e:f0:bf:30:32:f9:1c:16:42:b9:89:8e:62:e6:84:9f:
         67:4e:5f:24:15:3c:de:40:4a:be:31:97:2b:f9:79:3b:7f:55:
         3b:6d:02:03:36:f2:d5:5e:84:7b:03:83:78:74:7b:34:29:3d:
         ed:21:5b:a0:84:dd:94:7f:5b:a3:26:cc:90:24:b5:f6:c2:7b:
         e9:f5:47:08:ff:36:5a:21:8f:56:38:b7:9e:b0:10:fe:f5:98:
         00:9b:03:d2:32:5d:dc:e6:0e:b8:36:bc:be:4d:83:b5:d8:05:
         37:e4:dd:db:a4:24:f0:f3:cf:67:3c:39:d2:98:e0:5a:f3:e3:
         53:27:de:1d:77:6f:39:3c:89:27:6d:27:6c:2e:f7:77:b5:e8:
         90:4e:96:22:b5:e9:cc:7a:89:6b:6a:5e:5c:dc:f7:47:7e:92:
         99:39:5c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:33:25 2025 by rpki-client