Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32342d3234203d3e20343031383037.roa
File:                     36392e3136362e3139322e302f32342d3234203d3e20343031383037.roa (raw, json)
Hash identifier:          8dzEyitSguRPxiKfIR4MrH2ZH8jvxHsRNIVCdFSCZKU=
Subject key identifier:   AD:08:46:CF:66:F7:7F:70:7C:90:13:A0:0C:6A:67:4C:B8:05:DE:DF
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       44F2B0FEE0D98B04D6DF71BE30EEA51DF5D1D4E7
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32342d3234203d3e20343031383037.roa
Signing time:             Sun 31 Aug 2025 11:06:47 +0000
ROA not before:           Sun 31 Aug 2025 11:01:47 +0000
ROA not after:            Sun 30 Aug 2026 11:06:47 +0000
asID:                     401807
IP address blocks:        69.166.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 13:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:b0:fe:e0:d9:8b:04:d6:df:71:be:30:ee:a5:1d:f5:d1:d4:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 31 11:01:47 2025 GMT
            Not After : Aug 30 11:06:47 2026 GMT
        Subject: CN=AD0846CF66F77F707C9013A00C6A674CB805DEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:f1:3d:11:6b:c5:e8:f2:61:f6:2f:65:ae:
                    be:49:0b:bc:bd:48:c6:20:e2:00:79:dc:72:72:8c:
                    f6:86:e5:0b:38:4e:79:1f:79:ac:d8:e5:62:39:0b:
                    e0:97:6f:b2:91:af:07:18:fb:6e:25:5e:ef:29:68:
                    b0:9e:71:99:23:d3:80:39:5a:e2:8e:6f:b9:b2:fa:
                    9c:e7:f2:57:72:e5:80:ae:70:6b:7b:5e:d2:67:c8:
                    35:63:88:bf:6e:cf:62:f3:a5:a1:e0:e0:70:32:dd:
                    f9:77:b8:54:67:18:56:e5:9a:a9:af:40:20:93:d3:
                    d1:88:77:aa:5d:ba:c1:87:ee:bf:f5:b3:1d:1b:0d:
                    0c:18:d2:38:61:40:2f:38:fc:33:cc:35:41:f6:45:
                    7d:07:a3:73:a9:4c:a6:ad:cb:73:62:5e:20:21:7f:
                    6c:cb:47:dd:cb:56:87:e4:b4:5a:5c:6f:40:f7:3e:
                    bf:90:21:34:8b:b6:72:d5:c1:ef:6a:e2:a1:83:27:
                    fc:19:6e:b9:d5:74:31:a9:95:23:fe:fc:ef:31:87:
                    b8:20:99:ab:b3:00:cd:14:34:61:f4:59:6f:72:68:
                    6a:5d:e6:17:12:77:7a:74:ba:e1:27:a6:34:f4:8d:
                    b8:bd:13:b4:54:6a:84:a9:88:3f:fe:b7:24:c3:19:
                    d3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:46:CF:66:F7:7F:70:7C:90:13:A0:0C:6A:67:4C:B8:05:DE:DF
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32342d3234203d3e20343031383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:20:28:cd:bd:eb:cb:58:1d:93:02:ff:fb:e0:95:0a:fe:77:
         35:21:e4:e1:5b:12:d7:de:02:a5:67:e7:cb:46:6b:0a:41:78:
         83:db:90:f7:a4:e9:a5:02:30:62:07:a0:64:b2:c2:f6:2c:da:
         f1:ea:84:3e:68:e8:62:fa:0c:fb:e6:c5:6a:94:4b:30:d6:89:
         a0:56:e9:e9:ed:2a:e4:8c:b3:84:c0:1d:23:dd:14:c9:7d:bd:
         ae:d6:61:9d:91:e4:52:19:c4:67:b9:bb:45:45:96:95:62:71:
         de:81:88:d5:32:f3:5c:66:c9:9a:a4:21:df:ad:9e:83:fa:2c:
         f7:bf:fc:54:94:80:12:80:a9:28:d3:42:02:f6:e8:18:d5:4f:
         cc:ff:a6:4b:87:81:69:33:55:a9:f5:a5:4f:6c:b9:85:1c:91:
         a3:fe:ab:61:bf:23:e6:fd:4a:9b:fb:fc:5b:cd:23:56:23:45:
         aa:04:d1:f0:01:3b:ec:0e:b6:bf:16:42:20:f0:c3:08:d7:57:
         56:3d:e0:59:79:7f:9c:5d:ec:74:c1:2c:b5:c9:fb:5d:0a:e9:
         e6:79:2a:c8:f8:01:b2:19:bf:c7:4d:21:f4:8a:b8:dd:8c:ff:
         79:ff:c0:05:46:b1:23:37:06:c4:0a:51:4a:0c:f8:97:e5:e2:
         d8:ef:ed:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 19:01:21 2025 by rpki-client