Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20323136343134.roa
File:                     36342e3235332e39342e302f32342d3234203d3e20323136343134.roa (raw, json)
Hash identifier:          ZygM5RYpxxnIL0fV6xEIKD2gQdmE7qqwwflnMLpMevY=
Subject key identifier:   62:D4:D0:CC:CF:8F:44:24:41:47:7C:C2:7B:4D:13:0D:17:17:3B:60
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       0BD9F090C4AD20DFE86D357DF1DB8D99C6789F4F
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20323136343134.roa
Signing time:             Thu 26 Dec 2024 02:28:23 +0000
ROA not before:           Thu 26 Dec 2024 02:23:23 +0000
ROA not after:            Thu 25 Dec 2025 02:28:23 +0000
asID:                     216414
IP address blocks:        64.253.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d9:f0:90:c4:ad:20:df:e8:6d:35:7d:f1:db:8d:99:c6:78:9f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 26 02:23:23 2024 GMT
            Not After : Dec 25 02:28:23 2025 GMT
        Subject: CN=62D4D0CCCF8F442441477CC27B4D130D17173B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:02:a1:91:dd:f3:34:95:c4:93:a2:70:86:
                    51:12:a7:cc:23:29:35:d4:a3:2e:10:46:85:7a:b9:
                    73:48:3f:e7:ce:d8:e1:4f:1c:93:5e:da:5b:72:00:
                    1b:9a:dd:c2:2b:8b:ce:6d:57:bc:6e:dc:0c:15:cf:
                    f6:96:20:12:be:da:52:91:98:b3:a3:b4:00:52:30:
                    39:d6:e0:18:1b:53:e6:11:a3:56:9a:cc:c1:6a:24:
                    7b:c5:c8:5a:3a:68:b5:2f:e8:ae:52:dc:18:be:47:
                    0c:fa:00:00:42:85:99:ce:c3:24:2c:50:6b:d4:c7:
                    fc:15:b9:49:5d:51:88:56:01:95:16:9c:01:1a:5c:
                    f1:5f:30:59:f4:fb:6c:1b:03:ae:88:0b:d1:11:6a:
                    28:25:72:f9:d0:75:c4:8e:2a:08:64:50:00:6d:2e:
                    ba:aa:db:65:5b:29:bb:21:2f:49:33:6d:de:c6:fd:
                    8b:9e:13:f1:14:1e:75:fa:7d:56:70:f8:c9:35:19:
                    7f:5b:23:35:33:19:9c:c0:f5:04:8e:c5:09:81:ec:
                    98:26:68:c9:ef:43:ef:83:38:7d:89:64:87:7b:ee:
                    48:34:45:ab:8e:7a:65:ef:d2:2c:9c:cc:02:14:ff:
                    14:8e:61:92:79:27:96:12:e8:e2:8f:0d:ef:b2:f9:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:D0:CC:CF:8F:44:24:41:47:7C:C2:7B:4D:13:0D:17:17:3B:60
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36342e3235332e39342e302f32342d3234203d3e20323136343134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.253.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:d6:93:33:d0:0b:31:30:59:6d:e5:f5:0c:54:c1:0d:06:
         31:ba:00:f0:64:b5:3f:bd:f3:6f:4f:3a:05:1c:02:26:23:8b:
         7a:20:5b:c2:6b:cc:cc:44:b0:4c:a8:d6:45:f3:ae:0f:7f:30:
         5d:96:cf:94:49:39:a5:00:d9:49:0c:00:96:b2:01:22:ef:13:
         15:e4:98:dd:8a:36:57:a3:8d:bb:1e:73:c4:f3:ae:e9:8f:62:
         6f:36:07:9b:e5:48:44:b8:88:ed:25:ff:e3:c0:95:7d:7e:96:
         1b:d6:3c:7e:22:bd:ea:b5:c7:7d:95:32:f0:cb:c1:03:c4:94:
         94:e7:27:ea:f8:4e:06:fd:9e:98:eb:70:55:d0:0c:fe:74:8b:
         60:21:c5:89:56:1a:51:33:08:03:77:4a:17:ac:72:b3:ba:3a:
         6f:47:1e:db:dd:df:4a:7a:96:90:ab:93:12:31:37:f4:6b:ee:
         50:78:89:4d:e4:d5:ea:31:3a:36:d7:07:51:a4:92:ee:d6:36:
         92:c7:a9:f0:f0:71:34:a8:b0:75:a0:62:d4:40:21:a4:15:e2:
         9a:1e:94:e8:23:47:c5:b5:84:0a:fb:8f:40:2b:18:11:b8:18:
         1f:cb:9a:20:80:0d:cb:31:23:24:f7:2f:d8:8f:f1:60:0d:3f:
         e2:7c:be:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:08 2025 by rpki-client