Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e203130313033.roa
File:                     36392e3136362e3233322e302f32332d3234203d3e203130313033.roa (raw, json)
Hash identifier:          uB4Zq9RlyFLqec8g7T0v+P6bRLG3wD4TFQSFwCJ7Noo=
Subject key identifier:   FD:77:CE:E8:7E:DD:5F:B6:DA:E8:ED:C8:8E:F5:DD:B5:5A:6C:17:B9
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       4AF07E60926CF2D13AF4665DC55C47404F6726
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e203130313033.roa
Signing time:             Tue 24 Dec 2024 08:10:58 +0000
ROA not before:           Tue 24 Dec 2024 08:05:58 +0000
ROA not after:            Tue 23 Dec 2025 08:10:58 +0000
asID:                     10103
IP address blocks:        69.166.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:43:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f0:7e:60:92:6c:f2:d1:3a:f4:66:5d:c5:5c:47:40:4f:67:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 24 08:05:58 2024 GMT
            Not After : Dec 23 08:10:58 2025 GMT
        Subject: CN=FD77CEE87EDD5FB6DAE8EDC88EF5DDB55A6C17B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:22:ab:0f:8b:77:fe:ce:61:28:d8:29:d6:
                    61:0f:84:f8:e9:dc:93:62:5c:48:0e:ad:8b:30:ba:
                    73:b4:92:48:86:49:0b:83:4a:4c:ff:05:31:48:d8:
                    b4:f5:f3:e5:9c:2f:bb:4e:17:26:03:a9:4b:bb:7d:
                    84:05:ae:a7:88:a3:ec:e9:ee:d8:f1:6b:29:08:ad:
                    7f:b5:7a:83:f6:02:9e:19:24:af:fa:1d:3c:93:ce:
                    25:8c:39:96:b8:bb:ba:1d:f9:3c:c2:3f:cf:f6:b7:
                    8e:0d:28:05:3c:04:47:0e:bd:df:b3:24:1c:fb:a9:
                    ec:cd:6e:ec:fb:bc:3f:18:74:bf:34:e7:a8:b3:c0:
                    3e:36:f9:fc:51:38:68:be:55:cb:06:20:cb:b4:5d:
                    8e:89:50:f8:cc:88:f3:b8:13:4a:9e:f8:1e:c7:0f:
                    8d:c2:73:e5:4f:a7:db:d2:b5:1b:ca:ec:b9:58:87:
                    c6:c1:7a:05:4f:06:1a:cb:84:0e:10:0d:8a:96:ae:
                    ea:94:b8:e4:0a:e9:7b:ff:94:2e:90:1a:ba:ee:7b:
                    d6:07:4a:e0:d9:52:65:95:41:61:de:cc:36:7d:9d:
                    ef:a5:09:f8:a6:69:c0:37:8d:f5:b2:f0:00:0c:9b:
                    f1:25:c6:48:35:76:4f:9e:75:df:07:06:16:b7:ec:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:77:CE:E8:7E:DD:5F:B6:DA:E8:ED:C8:8E:F5:DD:B5:5A:6C:17:B9
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:22:8d:32:3d:18:db:3c:67:7b:58:c1:2e:06:4b:45:17:06:
         65:0b:d7:0b:bd:b4:6e:cd:15:64:97:cf:0b:6b:39:1a:53:bb:
         8f:ed:ba:61:2f:13:ca:bc:98:84:c0:6c:55:95:80:e3:69:c7:
         eb:ad:19:70:2e:67:f7:d0:df:ae:dc:7a:36:8e:f8:a0:42:3d:
         5f:85:1f:0c:b5:c5:0d:96:d8:41:2b:52:bb:75:c2:26:46:ea:
         a6:b3:88:11:c8:5e:ec:c9:df:71:fe:3b:00:71:34:9b:9c:c7:
         ef:3f:36:77:31:7d:bc:24:e5:71:5f:6f:b8:aa:14:0a:ea:7d:
         47:7e:3c:86:61:7e:83:0f:e0:87:48:01:6e:96:18:4d:18:9b:
         47:86:2d:23:de:a8:11:40:9b:51:0b:ed:89:b0:21:07:00:a2:
         e1:d0:b5:17:ce:0b:39:6b:65:de:9b:9d:a2:6a:23:0a:3b:16:
         f1:c7:66:94:94:fd:8d:ea:6e:b0:1a:a4:c3:19:43:2a:01:b1:
         f5:66:65:26:2f:7e:40:28:f9:48:28:5a:12:7e:10:4e:0a:0e:
         b7:10:dd:e5:7a:70:b0:2a:b5:fd:5e:6a:66:67:1b:ca:02:4f:
         af:af:25:e2:90:fc:bb:49:c6:8d:31:15:1b:0e:ba:67:d7:6a:
         27:60:5c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:06 2025 by rpki-client