Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa
File:                     36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          +LqjYPUIABbpJVpCaa+O9UMzjaMQnG2fjeoLcnYHLnE=
Subject key identifier:   63:62:9F:37:0C:02:69:69:99:26:76:74:2D:BD:EC:8A:27:64:A5:8B
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       3F057EE5261CE22542C5EC7B5DE370B305700535
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa
Signing time:             Fri 08 Nov 2024 10:49:21 +0000
ROA not before:           Fri 08 Nov 2024 10:44:21 +0000
ROA not after:            Fri 07 Nov 2025 10:49:21 +0000
asID:                     395839
IP address blocks:        69.166.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:05:7e:e5:26:1c:e2:25:42:c5:ec:7b:5d:e3:70:b3:05:70:05:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Nov  8 10:44:21 2024 GMT
            Not After : Nov  7 10:49:21 2025 GMT
        Subject: CN=63629F370C026969992676742DBDEC8A2764A58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:72:eb:bc:27:9d:4c:64:ca:a2:d8:a4:2b:7a:
                    4e:73:ef:0e:88:e6:af:27:0a:c1:21:e1:01:f3:78:
                    3f:f3:94:7b:80:49:79:60:1e:08:3a:f9:c4:5a:c8:
                    d6:8f:8b:02:06:9b:5d:e0:62:99:f5:1f:21:03:9e:
                    73:c8:02:9e:ac:8d:04:bd:da:6a:63:1a:bf:d0:4d:
                    54:ef:ad:51:48:13:72:00:5e:7d:31:a9:8a:3c:bc:
                    54:33:34:11:a8:77:76:aa:0c:8c:95:0f:8d:0a:e7:
                    e9:2c:42:66:5c:47:72:d7:33:fe:7f:e2:ff:d8:e0:
                    28:8c:96:56:1a:2d:fa:f9:66:96:ca:7e:2d:c2:1e:
                    c5:b0:98:06:eb:7c:c1:f1:ba:68:32:e0:fd:9b:38:
                    a2:a6:d7:98:d4:05:49:3e:13:ba:d6:72:57:1f:bf:
                    11:5c:d4:b1:28:18:1c:ab:38:67:67:48:c9:e4:30:
                    f8:ea:39:ed:8b:ae:e6:ae:08:06:81:12:0a:b7:31:
                    74:35:68:ba:9b:a8:e5:94:d5:c7:e8:a4:8f:c6:56:
                    72:14:a3:43:d7:96:9c:00:80:5d:c4:4a:17:b4:fc:
                    11:dc:a5:d6:89:d9:7a:d4:59:20:d3:2d:0e:f2:5c:
                    17:7c:fc:fa:18:1d:7f:aa:85:6e:e8:64:7d:35:8f:
                    0f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:62:9F:37:0C:02:69:69:99:26:76:74:2D:BD:EC:8A:27:64:A5:8B
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:65:f3:43:9e:e9:ba:5e:42:da:aa:2a:9a:63:e9:ad:92:5b:
         b3:7d:fa:bf:f5:ba:1f:82:44:77:c7:bc:e8:c2:44:58:fe:80:
         9f:f3:9a:04:79:a0:06:00:6b:1c:54:5e:74:43:67:16:07:40:
         f3:b4:14:08:eb:eb:36:84:1f:1a:d9:2b:10:86:f3:7a:70:ba:
         a6:d3:80:be:89:06:a1:0c:29:57:f5:9b:8f:d2:f8:21:f5:ba:
         27:2c:4d:ee:94:2d:57:06:6d:c2:5b:12:dc:07:d5:a7:a8:7a:
         dc:85:b2:f8:1e:04:5c:13:d5:2a:28:83:9d:95:c0:5a:7a:40:
         98:4c:ea:cf:56:b5:71:d4:d4:ba:c3:23:51:ec:e2:72:89:8b:
         15:1e:69:bb:8a:a8:80:c1:f2:52:98:9d:64:ca:d3:bc:c0:0a:
         5c:fe:a7:37:0c:0d:ac:34:fa:9e:a5:24:f6:9e:f7:c1:61:aa:
         9f:62:3b:56:5f:73:aa:99:5c:1f:27:c6:25:78:17:6b:64:65:
         46:e2:b1:ca:7c:e0:89:26:aa:ea:8a:c4:e5:af:37:d3:5c:e1:
         e3:e0:d0:5e:85:8a:97:a0:7f:18:5f:15:a8:50:0f:b7:9a:3e:
         38:47:eb:97:34:d3:72:3a:af:4a:0d:a9:66:fe:3e:8d:c3:f6:
         fc:71:1c:1b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPwV+5SYc4iVCxex7XeNwswVwBTUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjQxMTA4MTA0NDIxWhcNMjUxMTA3MTA0OTIx
WjAzMTEwLwYDVQQDEyg2MzYyOUYzNzBDMDI2OTY5OTkyNjc2NzQyREJERUM4QTI3
NjRBNThCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXLrvCedTGTK
otikK3pOc+8OiOavJwrBIeEB83g/85R7gEl5YB4IOvnEWsjWj4sCBptd4GKZ9R8h
A55zyAKerI0EvdpqYxq/0E1U761RSBNyAF59MamKPLxUMzQRqHd2qgyMlQ+NCufp
LEJmXEdy1zP+f+L/2OAojJZWGi36+WaWyn4twh7FsJgG63zB8bpoMuD9mziipteY
1AVJPhO61nJXH78RXNSxKBgcqzhnZ0jJ5DD46jnti67mrggGgRIKtzF0NWi6m6jl
lNXH6KSPxlZyFKND15acAIBdxEoXtPwR3KXWidl61Fkg0y0O8lwXfPz6GB1/qoVu
6GR9NY8PIwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGNinzcMAmlpmSZ2dC297Ion
ZKWLMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMzM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM1MzgzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARabtMA0GCSqGSIb3DQEB
CwUAA4IBAQARZfNDnum6XkLaqiqaY+mtkluzffq/9bofgkR3x7zowkRY/oCf85oE
eaAGAGscVF50Q2cWB0DztBQI6+s2hB8a2SsQhvN6cLqm04C+iQahDClX9ZuP0vgh
9bonLE3ulC1XBm3CWxLcB9WnqHrchbL4HgRcE9UqKIOdlcBaekCYTOrPVrVx1NS6
wyNR7OJyiYsVHmm7iqiAwfJSmJ1kytO8wApc/qc3DA2sNPqepST2nvfBYaqfYjtW
X3OqmVwfJ8YleBdrZGVG4rHKfOCJJqrqisTlrzfTXOHj4NBehYqXoH8YXxWoUA+3
mj44R+uXNNNyOq9KDalm/j6Nw/b8cRwb
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org