Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32342d3234203d3e20313530363938.roa
File:                     36392e3136362e3232362e302f32342d3234203d3e20313530363938.roa (raw, json)
Hash identifier:          lhEsPLAhaNEbaWn9WygTsTJubEZ4WR9OIWo50AHxuv0=
Subject key identifier:   72:14:AA:D5:19:95:BE:D3:CC:BF:32:FA:40:D0:37:53:64:A9:50:1E
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       55252BBF0A36B12126C54CFACCE515BE591D7648
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32342d3234203d3e20313530363938.roa
Signing time:             Fri 24 Nov 2023 16:52:49 +0000
ROA not before:           Fri 24 Nov 2023 16:47:49 +0000
ROA not after:            Fri 22 Nov 2024 16:52:49 +0000
asID:                     150698
IP address blocks:        69.166.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:25:2b:bf:0a:36:b1:21:26:c5:4c:fa:cc:e5:15:be:59:1d:76:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov 24 16:47:49 2023 GMT
            Not After : Nov 22 16:52:49 2024 GMT
        Subject: CN=7214AAD51995BED3CCBF32FA40D0375364A9501E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:c1:fd:b7:b5:33:6d:d6:63:d8:3b:df:76:
                    17:1b:79:91:34:f3:8f:79:ae:93:1e:d3:88:b7:67:
                    3e:78:cb:9b:c3:e7:0f:97:6a:05:de:91:8e:e6:5d:
                    60:73:f5:85:0c:70:ed:02:74:46:89:ac:80:f4:7c:
                    a7:17:ae:c3:37:3f:6c:29:ed:c6:fe:32:f4:36:90:
                    c6:5c:84:93:a0:45:aa:b7:38:b9:21:fc:9f:0e:a1:
                    15:b2:d9:ae:9d:0d:de:04:d5:68:bf:25:cd:b1:a1:
                    c2:9e:81:f2:75:5a:61:32:5f:66:59:56:33:3f:00:
                    e5:b5:c6:2f:05:52:a5:f3:ae:f5:69:f9:8f:e8:a0:
                    ae:d5:93:81:bf:04:44:30:66:23:ee:b9:b8:0c:33:
                    69:34:a6:2d:78:64:cf:96:17:ab:20:6e:cc:a6:49:
                    f9:56:aa:e0:b8:4c:3b:a6:aa:63:53:f2:0b:78:94:
                    a7:05:9f:10:54:d9:37:7b:e1:c2:db:04:0b:25:3a:
                    30:81:bb:e3:45:d9:bc:d1:22:a7:d3:8e:5a:67:af:
                    03:a2:ce:c4:03:2f:19:0b:41:7e:8f:f9:0e:af:52:
                    f5:6f:6e:8c:85:ed:48:6f:23:cd:aa:cc:c3:c4:9b:
                    32:25:d5:1b:f4:7f:92:e0:86:f5:b2:bc:78:38:47:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:14:AA:D5:19:95:BE:D3:CC:BF:32:FA:40:D0:37:53:64:A9:50:1E
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32342d3234203d3e20313530363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:57:7a:07:0c:d2:04:10:b3:8e:06:74:1c:6a:9d:a5:7a:2d:
         95:d6:25:3f:08:ed:cd:bc:41:32:55:dc:fe:16:02:c5:c2:50:
         8c:cd:bf:d4:a8:56:35:5f:df:7d:0b:c4:d3:44:73:e9:1a:b1:
         27:63:51:f3:e4:56:85:70:4e:b3:d4:d7:6c:0c:6a:2c:a5:29:
         d5:25:7f:24:50:a1:2e:fe:b4:30:13:c4:f1:f2:0c:60:4f:79:
         4e:42:1f:e6:53:10:41:62:60:09:25:6b:0b:52:c4:d4:ea:75:
         dd:e8:92:70:2f:54:95:62:38:23:e6:bc:67:1a:1b:0d:40:ab:
         60:91:d3:c1:7a:a3:51:c4:12:ae:38:ca:48:b9:e4:42:a6:44:
         41:34:c5:79:26:02:bd:0b:bd:0e:ba:da:0d:f3:ca:a6:f0:39:
         ef:5e:d5:7c:21:94:7f:86:e2:a7:bf:0e:63:41:d5:38:c3:4b:
         eb:4b:6a:d9:39:38:36:9d:85:29:93:63:df:24:62:73:a8:1e:
         53:26:2a:c3:99:40:d5:2d:fa:10:09:81:56:46:9e:5a:66:b9:
         6e:38:6d:e4:28:c9:82:03:d3:29:a3:69:9c:5d:91:38:36:05:
         91:05:fc:55:38:e4:0f:6e:89:14:a2:9c:33:99:4c:0c:dd:14:
         cc:9a:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:02 2024 by rpki-client on console-ams.rpki-client.org