Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203233343730.roa
File:                     36392e3136362e3233302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          4lLwpZYwya3JULCstUmhnKDnCTdm1c2t0m4C05Afazs=
Subject key identifier:   40:14:55:48:3B:6F:87:B4:55:90:69:61:0D:E8:21:F1:C8:A0:68:55
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       167AA34380EA00D7064C5A319B3DC757E7A6054A
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203233343730.roa
Signing time:             Sun 01 Dec 2024 19:49:22 +0000
ROA not before:           Sun 01 Dec 2024 19:44:22 +0000
ROA not after:            Sun 30 Nov 2025 19:49:22 +0000
asID:                     23470
IP address blocks:        69.166.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7a:a3:43:80:ea:00:d7:06:4c:5a:31:9b:3d:c7:57:e7:a6:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec  1 19:44:22 2024 GMT
            Not After : Nov 30 19:49:22 2025 GMT
        Subject: CN=401455483B6F87B4559069610DE821F1C8A06855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:78:87:45:dc:ca:de:f1:dd:5e:7a:27:54:da:
                    bf:b1:74:ee:4d:74:a1:ca:52:5c:c0:91:94:ef:d7:
                    b6:33:7a:d6:45:20:dd:88:f2:ab:4d:4f:c6:30:6f:
                    2c:fe:96:21:5c:c1:da:8c:2d:79:d9:93:ac:51:48:
                    49:d6:dc:89:89:d0:2f:f6:42:05:1a:40:97:85:1d:
                    a4:5c:a5:af:05:b7:da:35:d0:55:ce:02:d7:d0:8a:
                    f9:93:da:f7:68:e9:41:01:e3:08:9e:6a:1a:2c:e0:
                    9a:e1:c0:3d:25:98:8b:b6:03:68:14:0c:82:90:bd:
                    62:18:e2:4d:cb:da:ed:5a:ed:36:74:35:0e:a9:47:
                    9b:52:ab:5a:c1:c2:f2:cc:8c:40:44:59:6a:18:98:
                    df:13:d1:e1:13:06:54:f1:4f:d4:3e:0c:96:09:12:
                    61:00:57:b0:25:5b:a8:ee:3c:40:c8:c3:da:1c:73:
                    e4:ce:e4:46:0f:77:36:57:d8:3d:ae:9d:dc:a8:c8:
                    c5:91:b2:fb:fe:34:3f:6c:aa:d2:33:4a:f2:82:40:
                    e4:ad:44:a0:da:5c:96:12:62:c3:2b:de:6a:b4:47:
                    16:f8:31:c4:8e:61:bd:c6:fd:97:37:e6:44:a2:cf:
                    1c:25:52:8f:05:03:82:33:a6:5a:a2:bf:98:45:fd:
                    34:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:14:55:48:3B:6F:87:B4:55:90:69:61:0D:E8:21:F1:C8:A0:68:55
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:cc:90:0a:0e:01:5f:0a:c2:31:af:a3:1a:52:a8:ce:01:
         bc:47:4b:be:b6:4d:96:92:d1:2e:f4:3d:1d:d1:ad:fc:24:d5:
         a4:29:1c:b0:9d:c0:44:66:1a:04:bf:49:5d:80:35:91:13:3f:
         95:75:95:ed:9f:e7:3b:24:b9:3e:1d:b6:36:31:dc:82:0f:7c:
         6a:17:e7:23:1c:f8:a8:a1:bd:05:99:22:47:fb:7d:fa:02:9d:
         ca:a5:62:11:27:40:f0:ba:29:38:01:96:81:1b:1a:e0:4d:22:
         4f:66:7c:8f:cc:50:d9:c2:60:4d:53:08:d2:30:78:23:22:17:
         4d:38:b4:16:b5:28:c7:d4:c7:fc:28:b7:63:cc:e5:89:df:a5:
         ca:9e:e9:f7:4b:51:4a:18:28:78:29:c8:80:be:eb:15:f4:c6:
         2e:9c:3a:a6:af:72:16:6f:f2:3c:23:fd:2b:c1:b9:52:67:81:
         7c:60:b7:33:88:21:e0:fd:a7:90:1d:cf:c9:a9:73:be:81:4d:
         ad:43:90:a5:0d:c9:d4:6d:2b:16:07:ae:31:59:11:37:56:b3:
         0b:82:ea:fc:9d:b9:f3:68:2c:6a:ac:b9:d8:3e:26:e3:cf:9e:
         b2:85:c5:ce:69:49:8b:f0:57:cd:3f:03:31:01:0b:15:06:44:
         29:99:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:32 2025 by rpki-client