Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230372e302f32342d3234203d3e203139343337.roa
File:                     36392e3136362e3230372e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          RbMSG7nIpeM5V9twplQ0pYQUZ9Ru92jvZreOOx7r5So=
Subject key identifier:   96:0F:9D:D8:C7:D9:E8:0D:9D:0F:F5:87:3B:3C:EA:E2:B0:E6:08:5F
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       60EA12E5C2EB53E020C11E02DF1BC448FFA400CB
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230372e302f32342d3234203d3e203139343337.roa
Signing time:             Mon 03 Jun 2024 15:01:15 +0000
ROA not before:           Mon 03 Jun 2024 14:56:15 +0000
ROA not after:            Mon 02 Jun 2025 15:01:15 +0000
asID:                     19437
IP address blocks:        69.166.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ea:12:e5:c2:eb:53:e0:20:c1:1e:02:df:1b:c4:48:ff:a4:00:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun  3 14:56:15 2024 GMT
            Not After : Jun  2 15:01:15 2025 GMT
        Subject: CN=960F9DD8C7D9E80D9D0FF5873B3CEAE2B0E6085F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8b:30:97:2b:76:a1:73:af:f3:f0:30:dd:19:
                    30:5a:fc:a7:82:c3:ce:31:68:61:5c:6c:f1:62:84:
                    09:9a:96:f9:bd:cc:e7:69:af:13:34:55:d1:01:51:
                    5b:07:a0:d2:45:9f:9f:19:a4:ca:6e:f8:ee:56:2b:
                    91:b7:8a:6e:0c:b1:fa:9e:8d:d2:ec:b6:fc:c6:20:
                    44:68:4b:6d:9c:c8:9d:d5:63:a5:46:d0:cc:46:5b:
                    14:a0:1d:78:7c:be:df:fe:43:48:a5:2d:42:61:d1:
                    ec:03:64:29:05:e6:0d:6d:c7:16:b6:03:b3:91:87:
                    c9:8b:3d:b2:bb:e0:25:fc:7d:9e:89:a8:38:0f:b8:
                    4b:2d:06:b3:cc:7d:72:05:91:e0:ff:22:26:e3:f2:
                    fa:fe:f0:eb:0d:32:bb:ff:8e:bc:1c:f2:04:3a:af:
                    63:db:55:60:cc:c3:de:9c:a4:33:c0:0c:8f:b7:06:
                    23:1e:d5:90:cd:3b:99:94:22:f4:05:40:b3:63:85:
                    44:0c:1d:b1:38:6c:a0:15:ff:1c:6b:46:53:3f:50:
                    e3:ab:1b:8d:f6:01:6a:30:4a:c1:a3:4a:cc:a7:e5:
                    2e:ce:23:c6:4a:60:1f:d0:a1:94:a1:b8:c1:0a:e6:
                    91:3a:35:29:25:7a:e1:76:2f:ac:5e:38:dc:c4:70:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0F:9D:D8:C7:D9:E8:0D:9D:0F:F5:87:3B:3C:EA:E2:B0:E6:08:5F
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230372e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:05:d8:4c:f8:5b:2c:46:7f:dc:91:83:8a:7c:5a:84:01:cb:
         7c:ca:3b:21:68:10:0d:98:df:8d:92:ef:7f:ab:7a:97:9c:7a:
         ef:3e:20:c5:e7:a6:e4:96:bb:b8:ef:2a:9e:13:e2:e3:cf:b1:
         fe:2f:b7:4d:06:df:93:3b:f2:a7:cc:e7:4d:f5:fa:87:7d:5a:
         54:62:9b:2c:4d:0d:d0:6c:2a:e1:25:bd:ea:b3:6e:32:b8:f3:
         81:be:d8:f9:62:26:5d:86:fb:e5:7e:b1:d0:cd:63:f6:39:e4:
         fb:a0:cf:a6:1e:73:9a:3f:c8:42:9d:36:cf:1b:ee:26:a8:78:
         94:9f:63:9e:6a:78:51:10:27:44:e3:c4:df:5d:b6:83:78:92:
         65:da:6b:a3:32:f1:26:4c:04:6f:f6:21:d1:8c:b4:0c:dd:73:
         00:4c:49:39:35:3c:b8:64:dd:07:0b:9d:8d:d6:e9:29:44:40:
         bb:22:59:f8:56:23:fe:66:a9:70:6e:43:e3:4a:d3:59:05:b4:
         61:89:97:90:5e:90:d0:82:5e:f5:ea:ea:3f:50:b8:46:7a:83:
         64:1f:80:29:63:7b:bd:5f:bd:26:04:23:ed:4c:6c:44:d1:b9:
         70:58:b4:34:e0:d4:4f:b0:05:87:7c:b7:ec:3e:4c:a8:c2:ba:
         71:81:35:dd
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUYOoS5cLrU+AgwR4C3xvESP+kAMswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQwNjAzMTQ1NjE1WhcNMjUwNjAyMTUwMTE1
WjAzMTEwLwYDVQQDEyg5NjBGOUREOEM3RDlFODBEOUQwRkY1ODczQjNDRUFFMkIw
RTYwODVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYswlyt2oXOv
8/Aw3RkwWvyngsPOMWhhXGzxYoQJmpb5vcznaa8TNFXRAVFbB6DSRZ+fGaTKbvju
ViuRt4puDLH6no3S7Lb8xiBEaEttnMid1WOlRtDMRlsUoB14fL7f/kNIpS1CYdHs
A2QpBeYNbccWtgOzkYfJiz2yu+Al/H2eiag4D7hLLQazzH1yBZHg/yIm4/L6/vDr
DTK7/468HPIEOq9j21VgzMPenKQzwAyPtwYjHtWQzTuZlCL0BUCzY4VEDB2xOGyg
Ff8ca0ZTP1DjqxuN9gFqMErBo0rMp+UuziPGSmAf0KGUobjBCuaROjUpJXrhdi+s
XjjcxHDZwwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJYPndjH2egNnQ/1hzs86uKw
5ghfMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMDM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEWmzzANBgkqhkiG9w0BAQsF
AAOCAQEAmQXYTPhbLEZ/3JGDinxahAHLfMo7IWgQDZjfjZLvf6t6l5x67z4gxeem
5Ja7uO8qnhPi48+x/i+3TQbfkzvyp8znTfX6h31aVGKbLE0N0Gwq4SW96rNuMrjz
gb7Y+WImXYb75X6x0M1j9jnk+6DPph5zmj/IQp02zxvuJqh4lJ9jnmp4URAnROPE
3122g3iSZdprozLxJkwEb/Yh0Yy0DN1zAExJOTU8uGTdBwudjdbpKURAuyJZ+FYj
/mapcG5D40rTWQW0YYmXkF6Q0IJe9erqP1C4RnqDZB+AKWN7vV+9JgQj7UxsRNG5
cFi0NODUT7AFh3y37D5MqMK6cYE13Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:27 2024 by rpki-client on console-fra.rpki-client.org