Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa
File:                     36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier:          XwHym9/TqudEBg5/knD7/MagUDQBqgE/j7RaTb1ND4c=
Subject key identifier:   71:08:F8:2E:51:34:8B:2E:53:46:FB:E4:EC:F2:B9:BA:AC:BE:09:3A
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       4484CE860E669BCC8267BDC2599FC1F5183CA2C7
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa
Signing time:             Fri 23 May 2025 12:28:34 +0000
ROA not before:           Fri 23 May 2025 12:23:34 +0000
ROA not after:            Fri 22 May 2026 12:28:34 +0000
asID:                     211440
IP address blocks:        69.166.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:84:ce:86:0e:66:9b:cc:82:67:bd:c2:59:9f:c1:f5:18:3c:a2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 23 12:23:34 2025 GMT
            Not After : May 22 12:28:34 2026 GMT
        Subject: CN=7108F82E51348B2E5346FBE4ECF2B9BAACBE093A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:1d:54:e0:ff:8f:ff:a1:98:1d:a9:4c:ce:
                    05:e2:8a:09:37:7f:8c:5d:29:3d:79:8c:b8:e2:7a:
                    86:a4:da:77:31:32:97:ff:46:47:8e:f1:17:43:33:
                    02:1f:7c:db:e8:86:f3:59:1d:49:1c:54:b8:ca:eb:
                    1f:d4:6a:6a:ef:f0:c1:4d:47:ca:b9:cd:49:27:8e:
                    5e:a8:ec:f1:27:63:80:2c:f1:7c:9d:f4:23:b4:5d:
                    ce:e3:92:8a:3a:dc:19:7a:ec:6c:0e:c1:c2:1f:b5:
                    a5:76:11:a5:eb:54:ea:79:d1:46:68:c8:7e:d3:de:
                    3d:23:80:5e:32:e7:8e:b9:e2:e8:7d:08:76:33:2f:
                    1a:8e:3f:2c:be:4d:29:e9:9c:5e:ca:79:cc:27:2f:
                    01:57:d2:40:2f:9e:3b:e3:fb:52:9b:0d:f3:cf:54:
                    46:96:69:2a:eb:9d:72:32:89:02:b0:ee:01:bc:28:
                    40:06:d8:0e:9c:cf:65:96:bc:56:d6:f4:fd:7f:21:
                    8c:9a:13:6f:96:a3:31:09:17:6c:22:68:2e:e5:b4:
                    c5:30:4c:19:7e:aa:a6:40:6d:df:66:69:e3:06:91:
                    74:99:a5:32:b7:a1:75:6b:56:93:04:be:1a:7e:53:
                    bc:79:b2:54:e4:99:59:1a:f1:3d:22:61:ac:d3:3b:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:F8:2E:51:34:8B:2E:53:46:FB:E4:EC:F2:B9:BA:AC:BE:09:3A
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:b4:ce:98:83:e4:90:b2:72:00:93:af:07:56:d8:3d:c0:
         9b:d1:98:8c:51:02:0c:8a:de:32:ee:d3:13:22:d5:2a:88:73:
         8b:c6:61:0a:87:fa:47:55:b0:24:49:f1:b6:0b:8f:0d:75:57:
         84:95:cc:bd:02:13:ac:48:af:aa:bd:11:20:6e:de:d1:64:d6:
         8c:7a:b2:e1:13:50:90:e2:fc:00:30:d9:d5:d1:e8:24:18:08:
         7b:0b:dc:ea:3a:5e:9a:9c:0c:b5:f7:a4:27:02:53:07:36:c7:
         2d:c8:5c:2c:39:7f:8d:4f:76:83:b1:bc:cb:61:f6:6e:13:a0:
         93:6f:69:af:e1:b1:a4:fc:40:ee:fb:6e:40:48:84:35:36:e0:
         d0:21:f8:3b:66:1d:24:c9:dc:1e:24:ce:20:5d:c8:bd:6b:d2:
         dc:0b:0c:a8:81:bb:d7:46:71:93:13:81:aa:59:3d:ae:9e:83:
         a0:24:d5:44:5a:b6:0a:41:b1:3c:e7:44:a8:f2:a3:3a:a8:74:
         3b:42:0a:3a:b7:71:e0:f4:40:56:5f:d3:df:dc:d3:5c:12:df:
         88:54:d0:6a:aa:2e:04:2f:57:03:c6:93:7d:b2:c2:e1:76:83:
         de:a3:48:ba:26:5f:c0:dc:2b:d8:1a:c5:55:2e:5f:0f:bc:c2:
         83:9a:f2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:28:43 2025 by rpki-client