Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3231332e302f32342d3234203d3e20333935373933.roa
File:                     36392e3136362e3231332e302f32342d3234203d3e20333935373933.roa (raw, json)
Hash identifier:          Xzazrz9KRCw5RQHPHC7Nmo0jPE9W6x5KHfK/zu9o3NI=
Subject key identifier:   DC:DC:BB:B2:4A:1D:86:98:6E:81:F7:BC:C0:6C:DF:F2:8B:96:4D:3F
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       344D8339E9961E47FFC795BF8E6CCAA7AC63B5FA
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3231332e302f32342d3234203d3e20333935373933.roa
Signing time:             Wed 18 Dec 2024 06:01:25 +0000
ROA not before:           Wed 18 Dec 2024 05:56:25 +0000
ROA not after:            Wed 17 Dec 2025 06:01:25 +0000
asID:                     395793
IP address blocks:        69.166.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4d:83:39:e9:96:1e:47:ff:c7:95:bf:8e:6c:ca:a7:ac:63:b5:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 18 05:56:25 2024 GMT
            Not After : Dec 17 06:01:25 2025 GMT
        Subject: CN=DCDCBBB24A1D86986E81F7BCC06CDFF28B964D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:fe:56:3f:55:4e:92:92:1d:c9:81:46:d9:
                    22:7e:a4:b8:6b:4c:54:bd:91:89:d2:8c:95:13:a4:
                    bf:91:bd:0c:76:c6:02:7d:c4:27:92:37:e4:16:7f:
                    f0:df:f1:57:d1:e5:88:0f:df:1a:6d:05:5f:68:d3:
                    94:62:8c:ec:d2:10:e2:49:f1:c6:80:63:78:85:2d:
                    40:7f:9e:4c:08:3e:b3:c7:59:6f:d0:dd:44:91:d8:
                    f5:09:70:ad:7b:25:cd:cf:ce:b7:4f:43:7d:92:56:
                    8b:40:07:c3:17:79:77:ca:a5:2d:f4:cd:76:58:4c:
                    f3:3e:a0:c8:cc:eb:c0:2c:f9:ac:bc:1a:dd:10:d5:
                    e8:12:e8:c1:ef:eb:05:67:47:ae:4d:d1:04:6d:0f:
                    97:b9:b6:2c:25:cc:1c:15:a0:5e:b7:a5:7b:ab:52:
                    72:28:4d:47:d8:09:9a:89:d0:3b:32:52:c4:3a:3a:
                    2b:73:b8:1b:e9:34:35:55:a1:05:8d:f8:99:7d:8b:
                    83:96:0d:a3:d3:ba:93:9c:47:db:1b:30:38:1b:11:
                    67:6c:ad:2e:d3:e5:a0:3a:55:a4:d5:82:9f:26:a4:
                    42:55:7d:a0:fd:16:67:ee:c1:c1:78:55:a1:7e:ef:
                    31:63:22:0a:ea:e5:d5:9d:87:e8:fa:5d:3d:0d:1c:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DC:BB:B2:4A:1D:86:98:6E:81:F7:BC:C0:6C:DF:F2:8B:96:4D:3F
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3231332e302f32342d3234203d3e20333935373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:5d:44:83:de:cf:5a:6e:66:ad:db:00:96:80:4f:ea:9e:c9:
         b4:25:72:a1:38:8b:2e:f1:ee:7c:be:99:3d:9f:bc:ed:99:a9:
         cc:2c:c0:9a:6e:d7:9b:3e:04:39:be:eb:78:1d:83:63:2b:bf:
         44:8e:ea:5f:08:e6:95:56:05:31:83:2f:4a:47:ff:17:5c:e5:
         a8:9b:04:87:d3:09:b2:a4:88:e1:e5:2b:2a:11:ec:5d:a3:79:
         5f:e1:fc:35:dd:00:f5:60:7b:fe:dc:9e:c0:ca:55:94:09:b2:
         b3:16:26:4c:3b:2e:cd:df:8c:2c:cc:2f:68:26:e2:c0:a7:fd:
         d9:91:c1:66:b2:c0:87:a8:82:9f:01:35:04:70:31:00:91:11:
         ff:e0:f9:fe:d9:b5:bd:31:6f:b4:28:08:f3:9a:44:fc:c7:5c:
         dc:90:19:09:ee:d3:fd:c3:6b:f1:19:e9:4f:b9:a8:46:05:07:
         c2:6b:44:2d:df:14:09:be:d6:d4:0d:43:c8:2d:3c:b1:38:52:
         59:b5:09:12:e2:09:84:a5:8f:30:18:d9:fd:fd:f2:34:21:d3:
         2e:71:81:e5:72:28:0c:9d:9c:96:9e:18:7a:5b:17:b1:f5:be:
         92:64:f0:bc:8c:02:82:c2:a9:12:80:40:da:c1:a0:fd:aa:f5:
         df:32:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:40 2025 by rpki-client