Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa
File:                     36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          XMuIa12P7tZH0PAlwO/DmhcsdOIYCBKOzslknxFfC+4=
Subject key identifier:   60:8E:F2:FF:3A:39:A1:E2:51:8C:18:80:70:D8:62:5E:EC:04:08:7B
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       5C03A3C290DF501DF2A148DA29D5A57059FD4B86
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa
Signing time:             Fri 08 Dec 2023 10:05:58 +0000
ROA not before:           Fri 08 Dec 2023 10:00:58 +0000
ROA not after:            Fri 06 Dec 2024 10:05:58 +0000
asID:                     395839
IP address blocks:        69.166.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:03:a3:c2:90:df:50:1d:f2:a1:48:da:29:d5:a5:70:59:fd:4b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec  8 10:00:58 2023 GMT
            Not After : Dec  6 10:05:58 2024 GMT
        Subject: CN=608EF2FF3A39A1E2518C188070D8625EEC04087B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:8d:63:43:e9:3b:34:c1:5a:ca:ab:b7:f5:
                    6b:dd:42:4b:c6:55:28:5d:48:29:2e:cf:cb:b6:ac:
                    ff:ea:ed:53:6b:92:c8:d4:14:93:fb:8d:0f:b4:ac:
                    db:35:5a:fd:b7:de:77:7c:14:d3:ad:fc:66:ba:0c:
                    2f:26:6b:b5:e8:40:94:50:be:11:f2:d1:20:ee:b3:
                    ce:88:50:19:f8:4d:d6:b0:12:ec:ea:15:ad:a3:81:
                    62:aa:02:06:90:4c:47:c6:20:a6:7e:6d:f9:f2:b4:
                    b5:91:7d:c1:14:5b:80:91:43:ab:e0:0b:08:99:c7:
                    f7:7b:5e:d6:1e:f3:44:be:b3:58:81:ac:fb:c7:ff:
                    a7:f9:2e:94:82:ed:ed:c2:ec:52:6b:60:44:aa:b4:
                    26:8d:9b:43:55:36:93:94:3d:15:ba:aa:e5:3f:97:
                    7d:0c:b6:08:90:c5:ca:5d:cf:45:4e:58:5d:26:98:
                    f6:cc:42:fc:23:a9:cf:b0:50:39:e8:a0:7d:81:a1:
                    64:27:c8:b2:92:0e:a4:b1:ba:5e:85:47:8e:4a:3a:
                    fb:43:fb:2a:94:55:9e:3d:63:1a:f8:3b:24:aa:ef:
                    6b:ef:ef:a0:e0:58:72:83:2b:31:40:37:07:c5:0f:
                    f4:69:56:1b:82:72:35:8b:83:75:91:0c:22:c3:87:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8E:F2:FF:3A:39:A1:E2:51:8C:18:80:70:D8:62:5E:EC:04:08:7B
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:88:ea:65:f2:a9:73:03:b4:9f:c1:5e:ff:22:3d:8b:24:
         5a:f6:8a:58:db:24:30:7c:92:bd:7d:7c:3b:2a:4f:c2:75:88:
         33:b0:78:8a:d8:b9:19:bb:14:ba:fe:b7:79:bc:4f:ec:e8:58:
         d9:0c:65:02:18:e9:d9:d5:79:f3:7f:35:0f:df:0c:7d:39:12:
         74:cc:a9:6b:b3:d5:be:90:48:25:bb:02:52:f4:a0:38:7a:26:
         1a:02:82:f5:22:3a:03:7f:31:4d:e6:e0:42:36:88:73:82:73:
         0b:f2:69:fb:d6:a4:53:ba:b9:47:25:82:8c:31:2a:c3:ad:d8:
         26:25:e5:ea:6a:84:f8:27:17:cc:a2:b1:29:ad:86:49:f7:a3:
         0f:11:4f:25:f2:04:24:6b:e1:19:8b:27:c2:15:fa:ad:e5:07:
         5e:bb:14:0f:fc:a9:dd:39:ae:c0:ee:ee:42:0a:d7:9f:12:a9:
         65:3f:23:c7:4a:f6:30:6a:63:bc:07:b9:e4:a8:ea:b3:47:50:
         11:a5:17:aa:63:a5:da:65:d1:b9:e9:f2:51:15:7c:22:da:46:
         73:ac:6f:99:46:ce:d3:7b:42:26:8e:1d:37:77:49:3a:0c:09:
         82:b9:8a:f1:f9:c2:e6:70:31:4e:1c:37:b7:37:2d:3b:09:ba:
         2b:fb:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:01 2024 by rpki-client on console-fra.rpki-client.org