Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e203534333339.roa
File:                     36342e3235332e39332e302f32342d3234203d3e203534333339.roa (raw, json)
Hash identifier:          0o41oy59sMROz3oO3A2+bK3MfARcOZI24au6dAvm+H4=
Subject key identifier:   F4:B2:CA:A7:DE:0C:A0:88:24:1E:9C:E2:0B:10:5E:7E:29:CB:23:E4
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       3C8DB818FE303AA7AB7671DC1AD6EB5BEF08C0B8
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e203534333339.roa
Signing time:             Wed 22 Jan 2025 02:36:19 +0000
ROA not before:           Wed 22 Jan 2025 02:31:19 +0000
ROA not after:            Wed 21 Jan 2026 02:36:19 +0000
asID:                     54339
IP address blocks:        64.253.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8d:b8:18:fe:30:3a:a7:ab:76:71:dc:1a:d6:eb:5b:ef:08:c0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan 22 02:31:19 2025 GMT
            Not After : Jan 21 02:36:19 2026 GMT
        Subject: CN=F4B2CAA7DE0CA088241E9CE20B105E7E29CB23E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:79:53:60:1f:fb:09:97:22:a2:a4:89:13:
                    58:2a:e6:d3:39:fe:a3:5d:ae:6c:05:2c:f4:f9:d0:
                    76:46:bb:36:0e:22:4b:b0:b2:80:c9:d9:8c:e2:74:
                    5d:f4:88:f3:7e:4a:26:5b:1b:16:be:5e:90:23:b8:
                    da:28:95:a3:fe:62:91:e1:58:2d:63:f3:38:26:2a:
                    1b:99:c5:88:16:9f:07:3b:eb:46:6e:af:a0:f9:f7:
                    a8:1d:e0:16:91:30:af:07:aa:ba:26:4e:d8:bb:4c:
                    d8:b8:7f:70:d6:60:04:96:d6:fe:b4:b4:b7:12:ef:
                    ff:7e:92:f6:84:5f:07:fd:94:a0:87:5f:f1:03:ec:
                    9c:60:db:06:dc:85:8c:5b:33:c8:d5:97:c7:37:fe:
                    26:82:0a:1a:3b:36:7e:83:c7:18:c4:92:58:70:e5:
                    07:06:7d:d2:48:2b:00:c1:6e:c1:e3:31:f8:0b:bf:
                    10:95:de:22:73:c8:6b:23:18:2b:0d:6b:62:a5:8d:
                    91:a5:13:8a:ac:34:61:1f:44:93:94:dd:52:a7:fd:
                    06:74:c8:87:aa:7e:4b:ee:da:ce:cd:e2:91:82:03:
                    0a:6a:8a:4b:a4:dc:13:17:f3:4e:db:22:91:95:58:
                    d2:0e:8f:f6:5a:0e:30:5e:f6:ee:a0:86:b6:4e:48:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B2:CA:A7:DE:0C:A0:88:24:1E:9C:E2:0B:10:5E:7E:29:CB:23:E4
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39332e302f32342d3234203d3e203534333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c1:b7:93:0c:6b:c7:e2:93:29:2c:7a:f1:22:e3:3b:c4:dd:
         d2:6f:8e:1b:73:43:7d:75:39:f5:91:d3:f7:16:ce:88:68:e8:
         26:f6:ff:a8:4a:10:3d:0c:b2:1d:83:08:68:2f:81:e1:95:b9:
         f5:9c:17:91:10:54:f7:69:1d:c9:f5:83:a2:d5:48:f3:ed:33:
         1d:08:31:fa:b6:c1:a9:7f:ff:f3:37:18:d5:ba:c1:55:71:7a:
         bf:99:b8:7f:2f:a1:21:7d:65:74:09:94:b7:e5:71:1e:ae:dc:
         91:26:cb:b6:d1:4d:e9:16:2c:09:a1:c0:19:fe:7e:20:22:cf:
         46:55:7a:4d:57:32:fc:aa:53:1b:a1:99:36:a4:97:a7:30:06:
         1a:e5:d1:b8:cf:1a:1b:57:da:f3:69:60:89:a3:de:be:16:cf:
         7d:ca:9c:a8:e5:44:8a:1d:ca:34:23:91:8d:77:61:76:58:18:
         20:87:d7:5d:86:a9:ce:19:6e:56:0e:c1:61:54:5e:b6:a8:02:
         0b:ec:fb:f8:8c:f6:e1:99:fb:76:8a:9c:d5:60:47:25:68:04:
         f9:64:e5:5b:03:f8:91:a9:9f:ea:2f:65:f8:ef:cc:19:db:db:
         80:4f:e3:12:25:87:a2:2b:c2:ae:c6:b2:3e:b5:94:71:05:e2:
         08:81:62:7e
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUPI24GP4wOqerdnHcGtbrW+8IwLgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjUwMTIyMDIzMTE5WhcNMjYwMTIxMDIzNjE5
WjAzMTEwLwYDVQQDEyhGNEIyQ0FBN0RFMENBMDg4MjQxRTlDRTIwQjEwNUU3RTI5
Q0IyM0U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1F5U2Af+wmX
IqKkiRNYKubTOf6jXa5sBSz0+dB2Rrs2DiJLsLKAydmM4nRd9IjzfkomWxsWvl6Q
I7jaKJWj/mKR4VgtY/M4JiobmcWIFp8HO+tGbq+g+feoHeAWkTCvB6q6Jk7Yu0zY
uH9w1mAEltb+tLS3Eu//fpL2hF8H/ZSgh1/xA+ycYNsG3IWMWzPI1ZfHN/4mggoa
OzZ+g8cYxJJYcOUHBn3SSCsAwW7B4zH4C78Qld4ic8hrIxgrDWtipY2RpROKrDRh
H0STlN1Sp/0GdMiHqn5L7trOzeKRggMKaopLpNwTF/NO2yKRlVjSDo/2Wg4wXvbu
oIa2TkgZRQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPSyyqfeDKCIJB6c4gsQXn4p
yyPkMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzQyZTMyMzUzMzJlMzkzMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM1MzQzMzMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABA/V0wDQYJKoZIhvcNAQELBQAD
ggEBAD/Bt5MMa8fikyksevEi4zvE3dJvjhtzQ311OfWR0/cWzoho6Cb2/6hKED0M
sh2DCGgvgeGVufWcF5EQVPdpHcn1g6LVSPPtMx0IMfq2wal///M3GNW6wVVxer+Z
uH8voSF9ZXQJlLflcR6u3JEmy7bRTekWLAmhwBn+fiAiz0ZVek1XMvyqUxuhmTak
l6cwBhrl0bjPGhtX2vNpYImj3r4Wz33KnKjlRIodyjQjkY13YXZYGCCH112Gqc4Z
blYOwWFUXraoAgvs+/iM9uGZ+3aKnNVgRyVoBPlk5VsD+JGpn+ovZfjvzBnb24BP
4xIlh6Irwq7Gsj61lHEF4giBYn4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:04 2025 by rpki-client