Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139332e302f32342d3234203d3e20343031383037.roa
File:                     36392e3136362e3139332e302f32342d3234203d3e20343031383037.roa (raw, json)
Hash identifier:          +Jr1Sk673BIxH9dUBwPMThJmknq9/fkNshRoOcI00bI=
Subject key identifier:   9F:A5:36:F7:52:9A:87:FF:3B:5B:F6:70:A1:2F:F6:DF:D5:0D:81:85
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       7CD81AD2A9C01E7FE0ABB1BBC7DDCC44697505BA
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139332e302f32342d3234203d3e20343031383037.roa
Signing time:             Sun 31 Aug 2025 11:07:13 +0000
ROA not before:           Sun 31 Aug 2025 11:02:13 +0000
ROA not after:            Sun 30 Aug 2026 11:07:13 +0000
asID:                     401807
IP address blocks:        69.166.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Sep 2025 13:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d8:1a:d2:a9:c0:1e:7f:e0:ab:b1:bb:c7:dd:cc:44:69:75:05:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 31 11:02:13 2025 GMT
            Not After : Aug 30 11:07:13 2026 GMT
        Subject: CN=9FA536F7529A87FF3B5BF670A12FF6DFD50D8185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b7:2c:3b:db:85:32:ae:af:0b:c8:68:87:53:
                    29:48:72:14:63:15:6c:ea:80:79:91:da:49:14:db:
                    dc:7d:d5:0b:20:04:d5:64:da:33:ce:ed:d5:99:37:
                    be:1b:4a:62:31:6c:e8:09:cc:74:3c:c2:48:53:fc:
                    d0:24:d1:2c:98:92:ed:c7:68:66:5d:49:39:42:2c:
                    70:94:0f:c1:5a:e0:28:52:09:20:39:da:3b:6f:c1:
                    74:0c:cf:8b:8c:25:06:4c:f1:50:c0:c1:c6:0c:e8:
                    b5:30:5e:16:d0:f1:91:3a:03:c6:13:35:02:fc:69:
                    37:57:9e:ed:8b:2b:30:c6:b6:44:5e:ec:2b:83:ea:
                    9e:ae:2b:8c:f3:96:e4:da:e0:f5:4f:4c:20:59:fd:
                    8f:e8:2e:7d:0c:27:82:70:88:8a:1e:ef:65:c6:7a:
                    4a:e3:ed:d5:d7:0c:49:39:2e:4b:cf:ce:40:17:55:
                    8b:5d:d2:c8:ab:5b:59:e0:a4:f0:0a:62:0e:4c:e1:
                    6d:57:67:b6:45:49:12:83:4b:4a:19:44:38:f8:fc:
                    c8:b5:2b:00:6b:9d:49:58:b4:00:f5:72:70:ba:56:
                    5f:de:b3:79:05:0a:cf:bf:5d:63:d0:91:51:57:76:
                    c5:9c:77:21:82:31:f4:f0:e1:cd:0d:73:6b:3e:f1:
                    98:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A5:36:F7:52:9A:87:FF:3B:5B:F6:70:A1:2F:F6:DF:D5:0D:81:85
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139332e302f32342d3234203d3e20343031383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:46:d8:f3:fd:05:16:bf:a5:ab:80:00:8b:07:4e:02:f9:ce:
         d1:41:c8:8b:d8:df:91:c2:af:b8:fb:17:1d:2b:ab:4e:28:83:
         27:c5:70:60:77:77:e5:3d:1a:82:65:0f:01:27:ef:86:20:22:
         18:61:50:5f:26:b3:4e:00:4b:b9:f2:f3:18:b9:29:68:cb:12:
         d0:98:f2:b5:e1:c4:3a:31:63:76:53:b1:09:94:15:1e:bb:74:
         60:dc:98:4d:d3:53:30:32:79:22:ce:ec:d3:9a:57:74:ac:6d:
         4c:93:04:22:69:88:50:1b:17:bb:8a:7a:24:72:64:68:da:05:
         03:4f:b3:be:fe:1f:cb:98:4b:be:18:ce:48:b1:2c:b4:8d:c4:
         f0:8e:62:e4:42:ca:02:ea:8f:fc:8b:e2:f0:6f:ff:f0:9a:21:
         b8:23:4c:a3:8d:46:7c:93:0e:88:cc:3a:60:59:c8:34:47:8d:
         e5:1a:90:15:bf:12:8e:3c:55:c7:b3:e1:9f:be:12:09:ac:ec:
         18:f5:13:6e:f7:b9:f0:53:58:59:ef:54:64:ef:59:1c:87:d1:
         a1:ed:17:08:7f:83:ae:cd:b5:34:b7:b3:68:0c:3e:17:cd:2d:
         f6:22:87:75:99:4b:4f:ac:05:6c:65:74:1a:bd:3a:12:5e:a5:
         4f:43:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:52:08 2025 by rpki-client