Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20383334.roa
File:                     36392e3136362e3232332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          cALadTEg0qf/0fyo8lrR7Lk04uXMDp5/uagIA6hMvQc=
Subject key identifier:   48:A0:72:5A:04:75:A8:B2:AB:D4:F5:47:26:2D:A4:61:CE:CC:B2:F3
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       38389D7DE4DC3C9E342EE7884A8849C26DD7F7C2
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20383334.roa
Signing time:             Fri 26 Jun 2026 11:29:04 +0000
ROA not before:           Fri 26 Jun 2026 11:24:04 +0000
ROA not after:            Fri 25 Jun 2027 11:29:04 +0000
asID:                     834
IP address blocks:        69.166.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 16:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:38:9d:7d:e4:dc:3c:9e:34:2e:e7:88:4a:88:49:c2:6d:d7:f7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 26 11:24:04 2026 GMT
            Not After : Jun 25 11:29:04 2027 GMT
        Subject: CN=48A0725A0475A8B2ABD4F547262DA461CECCB2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:d5:63:e1:05:89:3e:92:a5:f0:ad:dc:e7:
                    c3:d5:6f:ae:cf:74:fa:9d:e6:28:60:81:07:f4:b1:
                    36:70:83:c0:d0:37:79:fe:6b:19:03:c3:5a:13:34:
                    93:b7:28:c9:d2:ad:75:5a:92:45:f5:c8:48:1a:62:
                    11:ef:aa:31:be:6a:b9:ea:b6:44:9d:a7:f5:23:e7:
                    9f:ce:ee:57:c2:7b:14:17:13:45:27:be:61:d0:30:
                    00:8d:f2:4f:e6:90:98:0b:37:8b:17:c1:d9:c2:61:
                    72:5e:a7:b5:0b:59:26:12:4d:02:2d:7d:63:5f:20:
                    86:fd:dd:6b:a2:d1:92:5e:0b:59:f2:eb:71:dc:ca:
                    ef:33:78:54:3c:0b:67:74:36:f9:c1:cd:a2:f7:39:
                    17:2d:3f:4b:81:24:39:d7:ae:80:be:1f:f1:20:e4:
                    ec:d2:17:22:45:07:85:16:d6:cb:be:1b:44:5f:fd:
                    90:7c:af:eb:99:db:65:0e:6c:cd:1d:ad:95:24:ed:
                    cb:fb:7f:90:06:2e:e0:56:b4:47:cf:08:33:4b:55:
                    5c:83:f9:ea:ae:5c:cc:84:0d:0d:40:28:86:bc:a9:
                    ca:70:db:40:ea:2e:b7:e2:83:be:9e:d8:54:fc:cf:
                    15:3b:c1:a3:32:61:c6:7d:6e:a3:a9:dd:9b:01:a9:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:A0:72:5A:04:75:A8:B2:AB:D4:F5:47:26:2D:A4:61:CE:CC:B2:F3
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:b7:8d:b1:bf:8e:ba:48:5d:05:e2:39:64:c2:fc:ad:eb:
         c6:93:bd:64:3e:fd:04:34:3b:5f:0d:26:0c:f8:a0:e9:24:22:
         d0:d0:42:f3:82:76:c9:8d:ca:21:7e:70:ec:c9:47:ad:55:ce:
         0a:4c:2e:90:f5:34:a1:67:55:bd:2a:ad:64:7c:bd:90:1c:b6:
         4c:23:33:af:33:c0:ab:30:2d:50:b4:8e:0a:51:cf:31:f4:17:
         ff:9b:37:db:73:08:cc:07:40:95:29:7e:a7:18:96:94:40:6a:
         b4:4e:50:f8:17:5b:c0:27:2c:8f:6d:e2:79:7d:10:0f:6b:1f:
         ee:25:d8:06:79:b8:4c:5e:a3:5e:d1:3d:15:e2:6d:e5:64:04:
         a9:f9:4a:c6:c8:54:83:f7:45:89:2c:f5:dd:72:7a:c8:6f:08:
         13:5a:f6:1e:fc:99:9f:84:a5:12:15:2c:5e:ae:f9:e1:1e:d8:
         09:69:b9:58:4c:fa:98:1c:03:33:6d:07:0c:03:a4:f6:96:7e:
         4a:c2:63:31:52:03:bb:f3:b2:b6:aa:4d:1e:15:7a:1e:c9:08:
         90:a0:a6:f5:62:23:ac:44:14:5c:aa:90:1d:77:3c:41:d8:ff:
         f7:90:22:f3:af:73:91:11:96:93:33:9f:32:6a:ea:61:40:0c:
         c9:2f:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:05 2026 by rpki-client