Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          sge/PiKJWwHO6Iz4P0UuDeeryBBU0CHrnxWrYKHxKO0=
Subject key identifier:   83:AD:97:05:F7:4F:89:48:6B:DB:1D:74:B2:CC:1E:46:73:88:C4:E7
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       7DEE08A55C348C86439F2B2AFF4FF39875EECF09
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa
Signing time:             Thu 16 May 2024 17:29:01 +0000
ROA not before:           Thu 16 May 2024 17:24:01 +0000
ROA not after:            Thu 15 May 2025 17:29:01 +0000
asID:                     7018
IP address blocks:        69.166.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 00:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:ee:08:a5:5c:34:8c:86:43:9f:2b:2a:ff:4f:f3:98:75:ee:cf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 16 17:24:01 2024 GMT
            Not After : May 15 17:29:01 2025 GMT
        Subject: CN=83AD9705F74F89486BDB1D74B2CC1E467388C4E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:04:96:e4:d0:e8:1c:86:bf:76:a0:de:44:
                    66:33:d9:06:e2:4c:da:4d:54:62:55:1f:4f:7d:84:
                    fe:ef:66:5a:b6:d3:55:c4:de:8c:30:a2:c8:35:db:
                    bb:c7:fc:c0:ce:e7:f5:bb:89:ef:f1:74:d7:34:e6:
                    c2:78:c6:04:dd:3c:22:2e:24:43:33:2f:72:f2:15:
                    36:52:8d:cd:ab:f2:43:bc:1c:30:b5:c1:b0:64:3f:
                    eb:3e:a8:a2:5a:f2:c3:c8:74:1f:ea:64:49:01:84:
                    9b:ee:1a:81:db:31:72:42:b9:64:57:f4:fb:1f:f8:
                    2b:c8:b3:43:84:82:fd:18:5a:9b:32:13:ec:6c:0a:
                    d5:02:80:a0:8c:04:94:d3:22:ea:b9:a9:ff:4f:54:
                    d5:39:c6:9d:54:09:21:7a:05:cf:4c:77:f1:b5:d8:
                    5d:64:a4:4e:00:c0:f5:d4:08:0a:46:53:18:b0:34:
                    87:13:ad:6f:fa:b6:cc:fe:72:5b:c1:23:76:ac:bf:
                    e9:7d:6d:f6:53:6a:92:2f:77:ec:3b:71:46:19:e5:
                    7d:bf:35:4c:b5:af:49:4b:4f:7d:a6:64:32:16:ef:
                    ba:fc:3d:fd:76:78:0e:9c:2f:a0:00:16:71:1e:30:
                    91:d0:4e:2f:a5:97:cf:ab:b2:fb:47:42:f7:39:b0:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AD:97:05:F7:4F:89:48:6B:DB:1D:74:B2:CC:1E:46:73:88:C4:E7
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:95:0f:fa:b1:fb:8c:54:30:86:38:e7:bb:73:93:06:ca:a9:
         85:a8:f3:3c:d1:67:1d:ae:e8:d1:89:00:64:0a:c9:31:d1:49:
         32:95:cc:98:f6:74:b6:ea:c5:2b:1a:fe:61:81:f4:d1:ee:fd:
         b5:3b:ca:ae:97:4b:e9:9d:f7:ab:07:29:5a:5a:e4:20:e1:8b:
         77:14:54:e4:86:6d:36:51:f1:cf:c0:6a:77:c0:af:3d:fa:67:
         5a:0f:cb:f1:31:4a:d4:4b:37:74:41:55:46:ce:dd:1d:b8:99:
         78:95:40:7b:46:b3:db:6f:31:88:d9:35:85:1a:3f:f8:4c:7b:
         a8:54:1c:ec:d3:f1:a4:dc:f2:47:b6:60:eb:c0:d3:24:13:d2:
         0a:26:fc:c3:18:ed:13:58:33:8e:1e:cb:0b:3c:c3:b5:44:d0:
         cb:24:5d:01:e0:ad:70:de:67:5f:de:dd:12:40:80:e6:f0:b5:
         4d:14:21:b0:ae:d1:ae:39:db:89:bf:1b:c4:5f:f3:79:9a:0b:
         04:25:b5:8a:64:f4:1e:b1:97:bd:57:ff:dc:e0:09:74:dd:31:
         76:c1:e3:9e:67:75:13:19:38:9d:ee:e6:2a:8f:93:7b:4f:c1:
         72:25:d1:1c:19:39:56:b1:b8:12:23:65:0c:a2:59:e8:ef:2b:
         62:26:1e:d7
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfe4IpVw0jIZDnysq/0/zmHXuzwkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQwNTE2MTcyNDAxWhcNMjUwNTE1MTcyOTAx
WjAzMTEwLwYDVQQDEyg4M0FEOTcwNUY3NEY4OTQ4NkJEQjFENzRCMkNDMUU0Njcz
ODhDNEU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW0EluTQ6ByG
v3ag3kRmM9kG4kzaTVRiVR9PfYT+72ZattNVxN6MMKLINdu7x/zAzuf1u4nv8XTX
NObCeMYE3TwiLiRDMy9y8hU2Uo3Nq/JDvBwwtcGwZD/rPqiiWvLDyHQf6mRJAYSb
7hqB2zFyQrlkV/T7H/gryLNDhIL9GFqbMhPsbArVAoCgjASU0yLquan/T1TVOcad
VAkhegXPTHfxtdhdZKROAMD11AgKRlMYsDSHE61v+rbM/nJbwSN2rL/pfW32U2qS
L3fsO3FGGeV9vzVMta9JS099pmQyFu+6/D39dngOnC+gABZxHjCR0E4vpZfPq7L7
R0L3ObA3awIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIOtlwX3T4lIa9sddLLMHkZz
iMTnMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMDM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABFps0wDQYJKoZIhvcNAQELBQAD
ggEBAAyVD/qx+4xUMIY457tzkwbKqYWo8zzRZx2u6NGJAGQKyTHRSTKVzJj2dLbq
xSsa/mGB9NHu/bU7yq6XS+md96sHKVpa5CDhi3cUVOSGbTZR8c/AanfArz36Z1oP
y/ExStRLN3RBVUbO3R24mXiVQHtGs9tvMYjZNYUaP/hMe6hUHOzT8aTc8ke2YOvA
0yQT0gom/MMY7RNYM44eyws8w7VE0MskXQHgrXDeZ1/e3RJAgObwtU0UIbCu0a45
24m/G8Rf83maCwQltYpk9B6xl71X/9zgCXTdMXbB455ndRMZOJ3u5iqPk3tPwXIl
0RwZOVaxuBIjZQyiWejvK2ImHtc=
-----END CERTIFICATE-----
Generated at Fri Jun 14 22:02:21 2024 by rpki-client on console-ams.rpki-client.org