Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203633343733.roa
File:                     36392e3136362e3233362e302f32342d3234203d3e203633343733.roa (raw, json)
Hash identifier:          5NRx28wFq3cjOrvH1mgOEudzdQVhuBCeHw4rFDAnXAo=
Subject key identifier:   D6:08:3B:B3:73:DC:D9:9F:64:50:6E:C8:ED:31:44:4A:90:F0:ED:3C
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       787BD59B425407C1BF27DCBE73D963915F8C2C6E
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203633343733.roa
Signing time:             Wed 22 Jan 2025 22:51:54 +0000
ROA not before:           Wed 22 Jan 2025 22:46:54 +0000
ROA not after:            Wed 21 Jan 2026 22:51:54 +0000
asID:                     63473
IP address blocks:        69.166.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:7b:d5:9b:42:54:07:c1:bf:27:dc:be:73:d9:63:91:5f:8c:2c:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jan 22 22:46:54 2025 GMT
            Not After : Jan 21 22:51:54 2026 GMT
        Subject: CN=D6083BB373DCD99F64506EC8ED31444A90F0ED3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:7d:18:f3:d4:f7:de:ab:fa:25:74:f6:c6:
                    19:d9:4b:44:ae:94:10:c9:dd:b4:1c:5e:e1:90:d9:
                    6d:7c:0e:a6:41:25:c4:9d:d6:bd:7e:06:64:18:3a:
                    fd:77:e4:92:c2:56:1c:43:a4:a3:88:39:4b:9c:15:
                    9a:a4:61:72:55:30:89:b4:c2:f2:a2:66:b1:7c:11:
                    6e:ac:7b:cf:df:c7:e0:24:5f:4d:2f:f6:af:c7:07:
                    90:3c:e2:f6:b6:f8:30:43:a9:87:5e:5c:f3:a0:3c:
                    c2:e9:67:91:1f:c1:b2:c1:09:80:88:02:ef:0d:7c:
                    99:3a:fd:7f:85:69:c3:67:4b:57:d1:67:e1:aa:3f:
                    34:76:0e:d7:8b:94:9d:73:fc:f9:b0:c4:83:a6:e7:
                    07:09:b8:b0:9b:a6:96:6e:4f:08:36:d7:3f:0f:d1:
                    4b:6b:b6:05:e3:73:89:3a:79:22:42:7d:b5:ce:03:
                    d7:0f:57:3f:0e:91:ed:1a:e8:9c:7c:96:32:97:1a:
                    f1:96:38:0e:62:7c:21:89:00:5a:5a:d0:c5:d5:54:
                    33:52:a2:a6:6e:11:95:03:fb:b3:16:97:2f:e8:b0:
                    b1:66:c2:88:3a:0b:85:12:09:81:82:93:d5:b6:a7:
                    da:21:21:f3:9a:f2:5f:df:3e:0c:47:f4:1c:97:d5:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:3B:B3:73:DC:D9:9F:64:50:6E:C8:ED:31:44:4A:90:F0:ED:3C
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233362e302f32342d3234203d3e203633343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:6e:62:9b:61:ec:48:f0:98:0d:a8:a8:93:b8:fb:0b:46:
         7e:e3:b3:99:56:8c:66:2f:75:d3:b8:20:51:c4:6c:53:11:61:
         7c:16:67:cf:d9:f7:c0:a4:f8:bf:f4:b3:c2:5f:a5:a5:f7:e3:
         81:41:4e:f0:e6:b7:68:ee:12:a4:93:42:78:bf:e6:76:8b:5a:
         fa:d6:bf:fe:2d:0f:36:39:92:f6:e5:10:09:24:86:e4:04:d5:
         9a:04:ce:0d:48:ed:fd:91:b8:48:8b:06:30:2e:18:e0:bf:16:
         89:f8:8a:9c:2b:7d:42:e9:47:3d:0d:1d:35:1b:eb:f6:b3:1c:
         23:28:32:bb:69:d2:04:fd:4a:df:9a:19:15:62:1d:d3:be:bc:
         cb:a4:c8:0f:73:3c:07:94:a9:3d:a1:f0:ca:f3:00:de:6e:69:
         85:eb:44:08:9f:b0:5a:10:7c:54:be:08:27:1a:d5:03:0f:8d:
         e2:4b:78:64:a5:a7:b3:0f:5a:30:12:2c:43:0f:a3:ba:b4:25:
         a8:c6:8a:5e:b3:67:e7:3b:b9:63:dc:77:0c:c7:12:ab:96:56:
         d2:ad:43:5e:ab:a3:a8:85:78:79:a6:c2:4c:b3:61:5e:fe:1e:
         67:1a:c8:a3:92:4e:0b:20:ac:2a:4f:86:ba:91:e5:e6:71:cc:
         71:98:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:44:06 2025 by rpki-client