Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e203232333430.roa
File:                     36392e3136362e3232382e302f32342d3234203d3e203232333430.roa (raw, json)
Hash identifier:          FyMNsmAJGr1+uUWhLJDk3uaD24BDGf1Gb93j7eFQrxo=
Subject key identifier:   4E:3C:B7:82:FA:A0:C1:A8:03:7F:EC:18:BA:42:DE:A8:6C:66:BF:E5
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       46ECB39AC67A6741C6D3DEFCCE91F756FBD24DAB
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e203232333430.roa
Signing time:             Tue 20 May 2025 15:49:57 +0000
ROA not before:           Tue 20 May 2025 15:44:57 +0000
ROA not after:            Tue 19 May 2026 15:49:57 +0000
asID:                     22340
IP address blocks:        69.166.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:09:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ec:b3:9a:c6:7a:67:41:c6:d3:de:fc:ce:91:f7:56:fb:d2:4d:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 20 15:44:57 2025 GMT
            Not After : May 19 15:49:57 2026 GMT
        Subject: CN=4E3CB782FAA0C1A8037FEC18BA42DEA86C66BFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:76:35:b6:52:5c:8d:06:46:0c:d1:2a:f0:26:
                    a9:c2:42:04:5e:b3:b2:ef:60:27:94:40:cb:b6:2c:
                    9a:ed:a2:55:db:27:6d:f2:0d:af:c4:22:6a:17:e7:
                    30:1c:f1:e3:06:73:c2:d0:87:26:11:f3:31:33:d4:
                    56:03:d3:48:26:6b:d6:6a:56:b4:65:a7:d4:89:57:
                    28:80:a7:bc:76:08:fe:97:bf:af:1c:ea:77:fa:8d:
                    94:c8:b7:7e:87:26:0b:3d:dd:70:ff:5d:74:38:34:
                    93:46:b3:77:11:83:51:d7:25:47:41:ab:bc:a3:20:
                    51:c7:87:3b:02:0f:eb:4d:de:81:b0:a3:60:0f:7b:
                    de:9b:15:bf:c0:8a:85:f1:13:9f:1f:ac:69:58:54:
                    6e:35:1d:49:37:dc:57:47:1d:5d:98:f5:71:53:57:
                    a6:ec:90:56:80:ff:5b:c5:9b:16:43:c7:25:1e:3e:
                    6b:1f:54:4b:df:af:d6:49:8a:24:9b:d8:7d:7b:c5:
                    44:83:e2:7c:ea:1f:62:61:1e:43:2e:ae:72:a4:b4:
                    8e:65:bd:ff:6b:5e:1d:6d:c9:1c:7d:08:0c:66:19:
                    ea:2e:29:25:88:0a:05:8e:bd:24:8d:65:39:73:c8:
                    98:82:03:2d:fb:90:b4:ee:6b:49:77:47:1e:ba:b5:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:B7:82:FA:A0:C1:A8:03:7F:EC:18:BA:42:DE:A8:6C:66:BF:E5
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e203232333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:52:7d:9c:e1:63:34:5d:cf:d6:a7:53:21:4b:f9:83:64:77:
         2d:7b:a5:bf:fd:a1:0b:76:6f:05:42:5a:51:ad:20:15:84:cc:
         8e:30:c2:ec:20:a1:41:c9:f3:ed:d8:62:4b:e4:60:15:b5:44:
         bc:0b:01:a2:cd:c9:7a:eb:b5:c6:6f:7e:c8:2b:88:3d:67:10:
         b2:3f:1a:a0:3b:d8:b4:6c:8f:81:4e:19:ed:f4:c1:df:9a:50:
         3a:d9:65:d3:4a:58:58:21:d3:b9:8c:03:a7:27:3a:58:28:6b:
         0d:91:1f:a1:c2:aa:09:e6:31:17:ae:f4:bb:8f:94:35:9a:e6:
         3d:4d:e0:0a:c4:15:60:67:e0:6c:af:0c:b8:5d:af:e8:d6:c0:
         62:65:36:aa:0c:e9:e7:0f:84:1d:73:57:a6:05:ab:28:84:d4:
         1a:1e:13:01:13:2b:e8:77:e2:bd:7b:ee:d9:1f:fa:94:85:aa:
         49:bb:8e:2b:60:aa:99:8b:c7:d8:0c:ca:43:89:6e:e5:d7:13:
         03:9d:65:c0:a2:9a:5a:db:32:50:2e:20:c7:e4:57:e5:ac:f9:
         82:4b:e8:15:e5:63:dc:7b:ef:0e:23:b5:a0:c3:33:2a:e6:a6:
         fe:b2:ef:48:86:dc:5d:6c:12:96:2f:a4:17:15:c3:fb:dc:ad:
         19:85:3f:c3
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIURuyzmsZ6Z0HG0978zpH3VvvSTaswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjUwNTIwMTU0NDU3WhcNMjYwNTE5MTU0OTU3
WjAzMTEwLwYDVQQDEyg0RTNDQjc4MkZBQTBDMUE4MDM3RkVDMThCQTQyREVBODZD
NjZCRkU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnY1tlJcjQZG
DNEq8CapwkIEXrOy72AnlEDLtiya7aJV2ydt8g2vxCJqF+cwHPHjBnPC0IcmEfMx
M9RWA9NIJmvWala0ZafUiVcogKe8dgj+l7+vHOp3+o2UyLd+hyYLPd1w/110ODST
RrN3EYNR1yVHQau8oyBRx4c7Ag/rTd6BsKNgD3vemxW/wIqF8ROfH6xpWFRuNR1J
N9xXRx1dmPVxU1em7JBWgP9bxZsWQ8clHj5rH1RL36/WSYokm9h9e8VEg+J86h9i
YR5DLq5ypLSOZb3/a14dbckcfQgMZhnqLikliAoFjr0kjWU5c8iYggMt+5C07mtJ
d0ceurVFqwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFE48t4L6oMGoA3/sGLpC3qhs
Zr/lMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMjMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEWm5DANBgkqhkiG9w0BAQsF
AAOCAQEAXVJ9nOFjNF3P1qdTIUv5g2R3LXulv/2hC3ZvBUJaUa0gFYTMjjDC7CCh
Qcnz7dhiS+RgFbVEvAsBos3Jeuu1xm9+yCuIPWcQsj8aoDvYtGyPgU4Z7fTB35pQ
Otll00pYWCHTuYwDpyc6WChrDZEfocKqCeYxF670u4+UNZrmPU3gCsQVYGfgbK8M
uF2v6NbAYmU2qgzp5w+EHXNXpgWrKITUGh4TARMr6HfivXvu2R/6lIWqSbuOK2Cq
mYvH2AzKQ4lu5dcTA51lwKKaWtsyUC4gx+RX5az5gkvoFeVj3HvvDiO1oMMzKuam
/rLvSIbcXWwSli+kFxXD+9ytGYU/ww==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:57 2025 by rpki-client