Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e2039333034.roa
File:                     36392e3136362e3234302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          raVzy/goxCqSp1mdAbfi/g1pIz/d02eL7sTCdfEBEwk=
Subject key identifier:   65:11:0A:4E:16:0A:84:EE:41:31:DD:81:ED:AA:F0:A9:BD:A0:9F:DA
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       4CF9656B88F1A1F9A2B094D699F50F220B092A89
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 21 Sep 2025 15:15:31 +0000
ROA not before:           Sun 21 Sep 2025 15:10:31 +0000
ROA not after:            Sun 20 Sep 2026 15:15:31 +0000
asID:                     9304
IP address blocks:        69.166.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f9:65:6b:88:f1:a1:f9:a2:b0:94:d6:99:f5:0f:22:0b:09:2a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Sep 21 15:10:31 2025 GMT
            Not After : Sep 20 15:15:31 2026 GMT
        Subject: CN=65110A4E160A84EE4131DD81EDAAF0A9BDA09FDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:06:e8:da:04:eb:35:f8:1e:ee:22:c7:45:
                    e3:d5:c3:12:3d:82:a5:e9:02:a8:b2:96:61:a3:b1:
                    97:fe:3b:28:9e:f4:c1:93:00:0d:0a:7c:ce:6d:fd:
                    da:cf:25:ee:d5:80:3a:e6:4d:bc:94:4f:0c:df:62:
                    dd:e7:3c:6b:eb:3d:49:90:9d:e0:47:2b:cd:e1:4d:
                    f3:3d:d0:f6:85:f9:c2:5a:5c:32:60:32:40:3a:70:
                    f4:0c:d5:e4:43:1a:0c:94:9c:10:3d:73:e5:31:b3:
                    0a:8f:49:d8:16:5f:3d:4c:59:95:d4:04:d5:a6:f2:
                    93:d6:b1:01:a0:db:ba:f1:4a:3a:53:d4:ff:0d:23:
                    fe:86:35:02:13:84:7b:0e:f8:5a:4e:5d:2c:22:c2:
                    1f:07:56:6e:e4:a4:33:a7:4c:35:26:9f:bc:49:0c:
                    a9:fa:48:c0:95:4c:20:fe:a7:67:d4:ec:83:29:6c:
                    be:3e:e7:8d:50:00:14:ea:46:30:a0:01:5d:1b:0e:
                    6a:04:40:96:cc:9a:1a:f5:ef:2d:57:32:c9:3c:33:
                    12:77:cf:88:31:bb:18:57:9e:fb:7e:e3:37:2c:55:
                    cf:fb:dd:d7:4f:e9:cb:33:ec:81:73:86:86:cc:ad:
                    89:ba:55:12:62:1a:21:b3:e9:d4:34:26:b8:62:b2:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:11:0A:4E:16:0A:84:EE:41:31:DD:81:ED:AA:F0:A9:BD:A0:9F:DA
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:47:a5:d4:fd:5d:49:13:da:95:fe:01:d7:62:e9:fa:d9:
         3b:07:6c:cf:a8:de:a4:01:7c:5f:7f:60:80:f4:00:6e:1a:bd:
         3a:4b:20:bb:99:82:fd:33:7b:0f:65:6e:16:d3:be:75:69:5f:
         63:4a:dc:44:8e:5c:37:fb:b0:ca:d1:c2:cc:c3:0b:0c:19:80:
         85:a3:a2:70:67:3f:d8:12:ab:e6:6c:be:25:9c:49:79:4a:44:
         d0:84:7f:c7:dd:ac:e1:c1:ab:b9:42:9d:39:88:5a:55:0c:93:
         6f:ea:fe:87:1b:53:7c:2b:83:18:ac:19:c3:02:b8:98:51:6c:
         00:8f:c5:2c:3d:52:b5:09:f6:17:3f:e3:15:94:81:21:66:7d:
         2a:15:13:04:fb:57:42:5e:2f:f7:85:2c:01:1d:1e:a6:c3:44:
         6e:c2:d0:98:25:81:1c:e5:12:48:41:ce:d3:86:75:89:8e:90:
         52:69:77:2b:3e:1d:9d:4a:bc:e1:a3:21:57:0f:f8:ab:ef:04:
         e2:25:83:97:94:e7:46:f7:ad:78:30:79:80:0f:3c:a4:14:2d:
         f4:33:61:08:bc:be:71:c5:ac:04:8d:cc:6a:f4:04:2c:3f:89:
         9e:c7:d7:40:7a:ff:9e:39:84:d0:17:e0:05:5c:a1:23:c5:72:
         a7:22:3d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:30 2025 by rpki-client