Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e203233353332.roa
File:                     36392e3136362e3233322e302f32332d3234203d3e203233353332.roa (raw, json)
Hash identifier:          EAm/E/5WCDcEmwAd6+jSP7q05jqKB/Bzgu/n11rd7/o=
Subject key identifier:   46:D7:F2:3F:17:04:38:D5:A2:C2:8E:C5:F0:7F:37:30:72:07:BA:E0
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       770DD45B34A5B576474259ECA27F1C5AE1D08310
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e203233353332.roa
Signing time:             Tue 24 Dec 2024 12:03:03 +0000
ROA not before:           Tue 24 Dec 2024 11:58:03 +0000
ROA not after:            Tue 23 Dec 2025 12:03:03 +0000
asID:                     23532
IP address blocks:        69.166.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 02:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0d:d4:5b:34:a5:b5:76:47:42:59:ec:a2:7f:1c:5a:e1:d0:83:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 24 11:58:03 2024 GMT
            Not After : Dec 23 12:03:03 2025 GMT
        Subject: CN=46D7F23F170438D5A2C28EC5F07F37307207BAE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:e4:9d:9a:f9:c4:69:3a:6f:2f:12:aa:8c:
                    7f:e1:b5:bb:c7:79:6d:24:45:74:e9:0e:65:ba:00:
                    07:80:02:40:ce:be:1f:1e:36:73:81:88:01:80:47:
                    0c:03:5f:5b:8c:f8:f0:f6:ab:c6:fd:c4:86:8b:66:
                    16:61:a4:e1:fc:e9:41:fb:7e:02:09:31:61:36:08:
                    d1:c6:b7:a1:29:d9:5d:ea:21:ca:18:55:ce:6b:5e:
                    e8:92:a7:f1:c5:f3:d7:c3:59:c1:e3:40:8b:fa:d9:
                    17:b4:71:fe:38:15:e6:3e:e5:36:34:86:ff:46:29:
                    97:43:25:83:6f:9c:e4:8d:8c:e4:13:fe:b4:cf:97:
                    6a:bf:ab:b2:b9:08:90:96:f0:d2:7a:e4:8e:26:11:
                    7c:12:5a:3c:f8:01:84:9b:a4:3d:22:fd:2c:a9:a2:
                    d3:8d:35:86:42:7c:3d:42:db:c2:1e:9b:75:9e:49:
                    bf:5a:3f:a2:ca:82:5f:5f:9e:29:1c:62:77:c7:72:
                    bb:8a:e6:09:6e:1d:02:0c:b3:6f:d3:b9:3b:ff:fc:
                    e0:b3:2e:90:47:5e:12:76:39:be:80:98:64:42:36:
                    e7:2d:34:7e:e8:3b:0d:05:9b:0b:51:56:8c:67:55:
                    47:cc:ab:14:95:7a:9b:29:7a:72:d3:a6:01:54:03:
                    ba:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D7:F2:3F:17:04:38:D5:A2:C2:8E:C5:F0:7F:37:30:72:07:BA:E0
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e203233353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:06:68:b9:10:a6:fc:e2:75:5e:0d:6c:c9:93:e9:9a:2f:44:
         90:20:cb:6f:43:d1:97:81:a7:00:3c:d3:29:5a:f0:c4:6b:a6:
         17:c5:67:c3:22:50:76:b5:24:50:fb:8e:ff:1a:a6:2f:ca:26:
         f2:e7:60:56:13:25:e3:b5:38:da:60:1d:5a:d1:71:7c:4d:78:
         2e:b4:4f:41:37:8c:95:e8:33:9b:2b:42:b0:14:18:9e:c0:f0:
         bf:de:e3:c7:29:55:7e:7e:df:fb:98:9e:17:50:06:47:0c:e0:
         d2:26:c5:c0:50:8c:b3:b9:3c:e6:63:e7:a2:5c:ba:22:35:e5:
         51:bc:5d:c3:29:95:3a:3c:dc:1d:06:71:d7:cb:90:91:84:23:
         c6:0b:cd:4a:5d:a2:ab:97:b5:11:82:9f:8a:78:de:f6:fe:32:
         ee:d7:2d:ae:53:87:43:79:10:c2:62:a4:e2:4e:7d:32:02:92:
         aa:14:dd:90:8a:c3:e7:cc:e3:79:0a:86:50:a0:3f:05:52:53:
         44:40:01:43:90:b4:d7:25:ee:39:1d:fa:bc:ef:89:1b:ac:2a:
         32:b5:1b:8d:39:91:52:b0:4e:c1:a0:51:a2:c5:ef:dd:f4:32:
         2a:63:ad:c7:43:3e:a3:47:b0:e8:d9:e7:a4:d1:71:a3:fb:5e:
         a7:da:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:43:54 2025 by rpki-client