Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230382e302f32332d3234203d3e20333935373933.roa
File:                     36392e3136362e3230382e302f32332d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          R+5sqoFDcIS8067KfrGHbQg9AtKnKkjiPwZ/G1Ukt7k=
Subject key identifier:   BC:E8:B2:C7:6C:29:22:86:1C:93:4B:15:31:3E:54:20:E2:7F:65:13
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       737EAFF1D76E9C25B689E1912741976DF4DEABF4
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230382e302f32332d3234203d3e20333935373933.roa
Signing time:             Wed 18 Dec 2024 06:01:24 +0000
ROA not before:           Wed 18 Dec 2024 05:56:24 +0000
ROA not after:            Wed 17 Dec 2025 06:01:24 +0000
asID:                     395793
IP address blocks:        69.166.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7e:af:f1:d7:6e:9c:25:b6:89:e1:91:27:41:97:6d:f4:de:ab:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 18 05:56:24 2024 GMT
            Not After : Dec 17 06:01:24 2025 GMT
        Subject: CN=BCE8B2C76C2922861C934B15313E5420E27F6513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:9a:ea:2c:69:d8:ba:ab:b2:a9:db:8e:af:
                    05:e3:60:c3:93:8c:5f:75:3e:11:f1:99:4c:f5:17:
                    c1:54:28:66:d6:83:7c:1f:42:c8:e6:c9:3d:8a:ae:
                    52:96:c5:e9:0a:dc:47:14:50:88:eb:b1:27:33:d9:
                    69:e3:60:ad:0e:ed:df:69:0c:97:07:f4:fb:2a:31:
                    9e:48:0e:c8:39:00:d3:b4:68:69:a9:f2:ae:e9:58:
                    9d:2a:d0:25:ef:c8:de:47:0a:81:f7:82:a3:72:a1:
                    a3:b2:f6:c7:8b:62:89:2a:df:5c:fc:66:db:2f:9c:
                    8d:b5:f5:78:af:5a:29:80:74:dd:c7:8b:28:e3:b6:
                    c2:67:7f:ae:53:a2:a0:aa:bd:cd:cb:88:9c:a7:7b:
                    7a:bc:97:ad:64:b2:81:80:10:8d:21:15:f9:f6:f1:
                    17:36:48:d3:30:4a:dc:d8:37:b2:72:ef:c4:15:23:
                    99:96:56:6f:93:65:d1:41:3e:17:77:10:b8:42:ad:
                    ea:81:0b:3b:07:40:20:61:d7:77:67:cb:b0:f6:92:
                    3a:c5:8b:40:82:a7:0e:74:09:25:b7:8e:74:64:bf:
                    86:6a:8d:ae:1a:54:97:2c:2c:0d:12:c5:c0:fd:bf:
                    61:db:93:00:77:0d:b6:ab:57:5d:07:af:66:46:a0:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E8:B2:C7:6C:29:22:86:1C:93:4B:15:31:3E:54:20:E2:7F:65:13
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230382e302f32332d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:02:56:5d:42:15:be:ce:91:a1:69:1e:43:72:2b:93:66:dc:
         c7:96:68:79:70:16:2d:20:ec:92:d9:a9:d2:ad:55:82:7a:a5:
         e6:29:7a:bd:87:85:45:5c:7c:09:b7:cd:6e:8b:30:87:a0:ef:
         cc:e5:cf:f9:df:a0:b2:cf:e0:cb:31:df:0c:4c:65:c9:66:c5:
         95:46:ca:be:31:84:ae:54:d1:0b:a4:fb:fa:33:32:ca:39:39:
         45:93:3c:a2:19:e2:32:eb:01:71:b7:85:87:2c:a3:fb:9b:ba:
         21:50:66:a1:41:72:08:92:7f:cd:26:2f:f6:3b:7a:a0:cd:a9:
         b4:a6:4d:27:e4:8b:82:59:d1:cf:80:5c:e1:fc:43:2c:9d:6e:
         4c:ac:0d:af:f0:d4:87:2d:bd:48:e0:34:9d:5f:5b:a7:e0:57:
         28:86:39:56:2c:86:67:bd:33:4d:8b:87:5d:9c:6e:fd:82:f2:
         47:86:15:70:d0:36:00:7a:49:d5:a2:a3:73:c3:e1:e0:60:d7:
         7d:38:17:58:7b:59:f8:60:a2:9e:d3:7f:4b:58:97:f4:96:c2:
         64:85:a5:6f:88:a5:61:46:bd:64:e7:52:e1:74:6f:ca:3c:09:
         39:f4:27:7e:3f:15:8c:ff:78:7e:46:77:e6:53:56:4c:45:37:
         b7:e8:6b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:12 2025 by rpki-client