Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323134363534.roa
File:                     36392e3136362e3232352e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier:          grqs8gRwrx40tgQ6bbAvOWkTSWgg9xfLwKvya580fbw=
Subject key identifier:   0B:67:DA:1D:B5:02:3A:76:FE:69:E7:D4:31:B2:13:F5:70:01:C4:43
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       419F08F56C2470BE3BAFD8DDEA142C106D7758B2
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323134363534.roa
Signing time:             Thu 29 May 2025 09:49:37 +0000
ROA not before:           Thu 29 May 2025 09:44:37 +0000
ROA not after:            Thu 28 May 2026 09:49:37 +0000
asID:                     214654
IP address blocks:        69.166.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9f:08:f5:6c:24:70:be:3b:af:d8:dd:ea:14:2c:10:6d:77:58:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 29 09:44:37 2025 GMT
            Not After : May 28 09:49:37 2026 GMT
        Subject: CN=0B67DA1DB5023A76FE69E7D431B213F57001C443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8d:2f:f4:d8:f4:dd:46:58:d6:b2:44:db:15:
                    76:e0:7b:56:e4:cd:88:48:3c:74:f0:c0:4b:df:a3:
                    11:16:20:96:2f:93:41:b3:43:92:8b:b3:07:81:b5:
                    c5:9b:5a:77:26:42:7c:33:11:8e:a6:52:63:9f:f5:
                    4b:fb:d4:15:1a:a0:3e:6b:74:4f:be:5d:d8:e0:6b:
                    ba:29:86:2b:ce:be:d5:ce:d0:25:63:9c:5f:5d:58:
                    3a:89:b6:f5:f9:54:ce:ca:b2:94:8f:cb:95:49:c4:
                    6d:49:e7:db:8e:6f:cb:75:e0:59:70:fc:47:9e:2a:
                    6d:13:49:b7:57:ea:32:a4:16:35:3a:96:41:a0:20:
                    a7:4d:a0:83:ff:e1:66:2b:93:a6:af:6a:92:52:99:
                    e4:30:95:2e:b1:79:15:4d:b1:3c:d9:80:c9:bd:fd:
                    60:e9:99:22:43:96:48:8f:59:2e:63:a0:82:37:fb:
                    b1:53:76:83:cc:db:14:54:d5:4d:37:d4:c1:3a:c9:
                    da:0c:6f:1d:4b:ff:b9:6c:9b:b8:e2:c7:07:1f:5b:
                    17:b1:6b:dc:f6:aa:48:09:9d:fe:30:17:2d:0e:b7:
                    be:8a:ab:b3:53:e8:af:8f:7c:c4:5b:b8:06:7c:c0:
                    4c:2a:6b:73:85:f7:ed:e1:f6:c1:15:7d:f9:6f:12:
                    ef:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:DA:1D:B5:02:3A:76:FE:69:E7:D4:31:B2:13:F5:70:01:C4:43
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323134363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:48:91:f3:16:e8:a4:48:e9:c7:7e:19:ac:d2:51:44:48:88:
         c7:00:f3:bb:44:4e:49:bd:c9:f7:e8:28:42:08:4e:e4:fb:6a:
         58:95:07:09:30:a8:78:0c:b9:a6:3d:66:1b:8c:30:ba:cd:4d:
         e4:19:95:a8:f1:73:68:c9:69:c0:07:ce:4f:b7:31:35:20:90:
         10:77:8e:77:3b:72:2c:78:8b:0b:02:ee:3e:5b:eb:39:71:b5:
         f9:5f:d7:04:07:2c:01:01:88:6b:23:7b:2f:36:0f:0c:14:6e:
         6f:8c:05:bc:51:b9:21:9c:8a:43:54:dd:40:a7:d9:a9:88:e4:
         6e:46:66:75:40:70:c1:d4:7d:b1:2c:54:f3:0e:7c:e7:4d:e0:
         b7:6b:9e:d1:d1:03:65:b2:28:5f:c7:4a:0e:d5:64:0d:0e:df:
         0f:9e:cf:f0:49:42:e9:f4:89:29:01:3d:66:2b:fc:4a:b8:b7:
         80:a3:86:c9:2c:43:da:96:81:4f:f0:a1:25:c8:c9:64:e0:27:
         c4:0c:73:ae:c4:53:f4:b9:42:a1:00:ce:fe:48:a2:fe:86:f2:
         3d:96:4e:b4:9a:61:ac:46:aa:ad:d9:92:d9:e6:80:b0:2a:81:
         90:9f:3e:c4:26:3d:d2:8b:6f:13:ab:75:b5:f9:0d:ca:7d:e1:
         ae:f0:90:34
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUQZ8I9WwkcL47r9jd6hQsEG13WLIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjUwNTI5MDk0NDM3WhcNMjYwNTI4MDk0OTM3
WjAzMTEwLwYDVQQDEygwQjY3REExREI1MDIzQTc2RkU2OUU3RDQzMUIyMTNGNTcw
MDFDNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu40v9Nj03UZY
1rJE2xV24HtW5M2ISDx08MBL36MRFiCWL5NBs0OSi7MHgbXFm1p3JkJ8MxGOplJj
n/VL+9QVGqA+a3RPvl3Y4Gu6KYYrzr7VztAlY5xfXVg6ibb1+VTOyrKUj8uVScRt
Sefbjm/LdeBZcPxHniptE0m3V+oypBY1OpZBoCCnTaCD/+FmK5Omr2qSUpnkMJUu
sXkVTbE82YDJvf1g6ZkiQ5ZIj1kuY6CCN/uxU3aDzNsUVNVNN9TBOsnaDG8dS/+5
bJu44scHH1sXsWvc9qpICZ3+MBctDre+iquzU+ivj3zEW7gGfMBMKmtzhfft4fbB
FX35bxLv3QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFAtn2h21Ajp2/mnn1DGyE/Vw
AcRDMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM0MzYzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARabhMA0GCSqGSIb3DQEB
CwUAA4IBAQAaSJHzFuikSOnHfhms0lFESIjHAPO7RE5Jvcn36ChCCE7k+2pYlQcJ
MKh4DLmmPWYbjDC6zU3kGZWo8XNoyWnAB85PtzE1IJAQd453O3IseIsLAu4+W+s5
cbX5X9cEBywBAYhrI3svNg8MFG5vjAW8UbkhnIpDVN1Ap9mpiORuRmZ1QHDB1H2x
LFTzDnznTeC3a57R0QNlsihfx0oO1WQNDt8Pns/wSULp9IkpAT1mK/xKuLeAo4bJ
LEPaloFP8KElyMlk4CfEDHOuxFP0uUKhAM7+SKL+hvI9lk60mmGsRqqt2ZLZ5oCw
KoGQnz7EJj3Si28Tq3W1+Q3KfeGu8JA0
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:07 2025 by rpki-client