Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233352e302f32342d3234203d3e203534363030.roa
File:                     36392e3136362e3233352e302f32342d3234203d3e203534363030.roa (raw, json)
Hash identifier:          4yg8ZrYVoKTdxTFkH1ZZZHtns02GafWynhA2uJXpow8=
Subject key identifier:   9D:81:ED:A3:FA:AE:C3:8E:1E:93:66:F4:20:04:13:5F:20:89:82:91
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       73D1ACD0C2C1F7C4487D7ACE52EF0987AD1AE1E3
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233352e302f32342d3234203d3e203534363030.roa
Signing time:             Fri 07 Jun 2024 10:21:33 +0000
ROA not before:           Fri 07 Jun 2024 10:16:33 +0000
ROA not after:            Fri 06 Jun 2025 10:21:33 +0000
asID:                     54600
IP address blocks:        69.166.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d1:ac:d0:c2:c1:f7:c4:48:7d:7a:ce:52:ef:09:87:ad:1a:e1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun  7 10:16:33 2024 GMT
            Not After : Jun  6 10:21:33 2025 GMT
        Subject: CN=9D81EDA3FAAEC38E1E9366F42004135F20898291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d1:4f:6c:dc:bf:33:ba:09:5c:ae:5d:f6:99:
                    aa:1a:c0:d5:5b:3b:cf:de:2c:7d:29:97:15:42:21:
                    4c:d9:5f:e2:97:05:6e:01:55:2c:4d:6c:50:6b:57:
                    ad:fd:08:cc:1f:44:71:67:2b:c8:72:0d:49:7c:50:
                    14:41:c5:04:ac:ab:95:c0:bb:53:b6:1e:13:06:dc:
                    5a:95:2d:f5:9d:16:12:63:6f:8f:fc:38:91:59:d2:
                    7c:1c:f7:d3:d1:59:f2:61:4f:08:e4:03:e2:2a:e9:
                    f6:95:2e:d0:92:1d:3f:18:60:3c:ac:2c:0b:75:a3:
                    0d:ea:82:ce:f2:4a:f3:ea:bb:57:fe:2e:de:e4:a5:
                    c9:79:74:75:55:6c:5f:c0:29:7b:17:b5:78:5d:97:
                    90:1c:01:0b:9d:53:44:ca:ee:b9:84:68:92:27:2c:
                    da:df:77:2c:cf:5a:b2:78:80:3b:6a:74:40:c4:62:
                    6c:bb:51:c9:48:2c:71:48:a7:2e:ff:d3:81:6c:81:
                    bc:9f:d8:af:1a:81:a0:ac:ba:2f:cb:56:91:5b:48:
                    9f:16:e5:19:52:e4:55:73:e0:fb:4a:92:40:ef:16:
                    1d:af:d8:41:9a:75:86:41:f8:3c:9f:6d:f3:6e:94:
                    19:66:58:53:1a:b0:ad:8b:e1:05:d0:3b:79:62:b4:
                    aa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:81:ED:A3:FA:AE:C3:8E:1E:93:66:F4:20:04:13:5F:20:89:82:91
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233352e302f32342d3234203d3e203534363030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:78:4e:72:ad:2e:76:60:0e:b4:bc:97:e7:7e:6c:09:1c:9b:
         a1:82:7c:4d:d1:ac:39:0e:95:18:cf:86:4b:2e:5d:67:9e:11:
         af:a1:0d:de:04:a4:31:dc:a0:db:8f:b4:65:11:40:74:2c:ab:
         c6:52:88:4d:c5:a2:09:f2:14:a3:00:de:00:1b:d1:dd:00:b1:
         64:ec:eb:37:6e:65:7b:d6:05:5f:60:3d:da:88:af:00:35:b6:
         8b:07:52:82:0f:03:1f:c4:57:dd:72:58:07:84:0b:5b:20:23:
         54:53:aa:bd:66:77:64:a9:4b:d2:25:00:1d:a5:06:c9:3a:85:
         18:0d:0e:b0:c0:f3:2c:fd:a4:89:77:94:6c:db:a3:41:94:ca:
         b8:d6:26:04:52:16:c6:4e:5b:61:56:29:79:03:6f:be:14:61:
         af:b4:85:37:69:df:56:88:0e:5d:32:6b:a2:c7:9f:ff:dc:ed:
         9a:2f:67:ab:4c:ab:e1:14:6e:a3:4b:bd:bc:f7:ef:c6:6a:f8:
         93:31:b2:66:20:a8:a5:ac:18:61:2e:8a:07:9f:09:f6:a7:71:
         18:8d:9b:ba:60:92:41:55:61:6c:4b:38:77:95:51:82:9d:d8:
         c1:8f:1c:70:1e:4c:8e:63:0d:b2:03:2d:d7:e0:be:65:63:21:
         c9:9c:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org