Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203233343730.roa
File:                     36392e3136362e3233302e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          ZuLo9qzdn0LUUtSx4WIgzwTJoHok5VgXv0TMBmg241o=
Subject key identifier:   C1:B9:4E:B7:52:A4:E1:F8:31:9F:05:7B:DE:52:5B:69:75:EF:56:78
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       4ACAAF986C5960E4B0FB6096A3A87E4B53CA7120
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203233343730.roa
Signing time:             Sun 31 Dec 2023 19:23:35 +0000
ROA not before:           Sun 31 Dec 2023 19:18:35 +0000
ROA not after:            Sun 29 Dec 2024 19:23:35 +0000
asID:                     23470
IP address blocks:        69.166.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:af:98:6c:59:60:e4:b0:fb:60:96:a3:a8:7e:4b:53:ca:71:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 31 19:18:35 2023 GMT
            Not After : Dec 29 19:23:35 2024 GMT
        Subject: CN=C1B94EB752A4E1F8319F057BDE525B6975EF5678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:b2:40:d1:d4:90:f2:9f:6b:77:59:be:60:
                    b8:4f:e5:79:b4:ba:e0:d9:f7:09:21:dd:26:58:42:
                    1d:a6:1c:bb:2a:8f:a5:e7:12:08:64:f4:f7:2c:51:
                    71:83:c6:e3:f9:0b:4b:5c:5a:01:1e:89:7b:b1:26:
                    5e:9e:1c:5d:bd:fa:c9:9d:cd:51:fa:38:ef:0b:b1:
                    37:10:e6:77:11:2e:82:ea:38:fd:bc:74:14:bf:58:
                    0a:23:6e:a3:44:e2:12:20:c1:7a:e1:a3:36:14:80:
                    54:66:07:14:6f:4d:c6:0b:cb:d7:1a:4b:6f:93:a3:
                    cf:35:97:44:bd:12:c6:d1:73:4c:5d:a1:ac:a6:8e:
                    93:1d:32:07:c3:e7:f1:ac:d0:f2:68:8c:33:bd:6f:
                    87:75:43:21:96:9e:b4:74:66:e0:5a:1d:bc:4e:f5:
                    df:de:27:d3:fe:9d:cb:54:9d:a5:b0:3f:76:98:96:
                    e3:fa:c3:96:1d:da:11:a1:42:32:8a:d8:70:ce:46:
                    88:7c:06:b8:25:57:b7:66:cf:31:c9:a3:69:9f:06:
                    13:c0:4f:f6:8a:f8:6e:f0:9a:95:a2:33:a4:19:83:
                    80:22:18:a4:c7:50:ae:64:90:05:7d:e9:98:d3:a2:
                    f5:67:95:59:37:f0:ec:70:92:37:c2:3e:07:4e:cb:
                    63:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B9:4E:B7:52:A4:E1:F8:31:9F:05:7B:DE:52:5B:69:75:EF:56:78
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:50:da:60:fd:af:c8:d4:f7:76:01:db:9d:3f:25:a1:87:
         a2:bc:f9:bd:e4:1e:89:d2:25:e5:eb:6c:26:49:4c:40:15:de:
         54:a4:17:02:39:08:75:13:fd:cf:7f:96:94:2b:26:62:cc:80:
         48:56:eb:12:63:ed:3f:84:fa:a5:72:a3:af:7d:68:0f:f5:02:
         7b:f0:c6:b4:dc:ba:e4:df:35:2d:bc:00:fa:fc:39:be:2b:59:
         df:03:9c:ea:8d:a0:be:e9:4e:d6:fb:db:56:00:37:53:e9:ad:
         2c:ac:47:b3:d0:b9:7d:b0:6c:12:65:ef:fa:72:39:bd:b0:6b:
         c5:0e:8b:57:bc:28:1c:0e:73:d7:35:bc:af:f9:13:d8:9f:9f:
         fb:96:f1:56:d9:61:dd:55:16:bc:0f:b0:81:d0:9a:f2:23:dd:
         9d:2c:18:ab:37:16:55:6c:27:a4:40:d8:4b:f3:73:95:2f:d7:
         e2:5b:6c:fb:de:c4:a3:6b:55:46:56:9d:f1:54:d4:49:78:26:
         4c:b9:4c:ad:39:ab:d3:90:25:e9:e5:6b:f9:8f:5a:63:cd:77:
         ef:fa:b7:1e:6d:a9:35:d8:2a:e4:b7:64:2f:23:96:cd:11:ee:
         2b:35:ce:ca:e6:14:54:82:43:ec:da:22:9c:35:c2:f5:6d:e6:
         fa:1c:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:43 2024 by rpki-client on console-fra.rpki-client.org