Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32332d3234203d3e20343030333034.roa
File:                     36342e34392e31322e302f32332d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          RSEVWmCQ1Urg0/IO07VVQHzx3XZjWvyJlqP2vAQezsw=
Subject key identifier:   40:55:0F:02:92:75:2E:D7:C3:47:49:C7:D1:15:9D:B2:B3:DD:1F:23
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       1A4A478F17B79DDF402FFCE9BABA60CF4ECF904B
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32332d3234203d3e20343030333034.roa
Signing time:             Thu 29 May 2025 23:33:12 +0000
ROA not before:           Thu 29 May 2025 23:28:12 +0000
ROA not after:            Thu 28 May 2026 23:33:12 +0000
asID:                     400304
IP address blocks:        64.49.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:4a:47:8f:17:b7:9d:df:40:2f:fc:e9:ba:ba:60:cf:4e:cf:90:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May 29 23:28:12 2025 GMT
            Not After : May 28 23:33:12 2026 GMT
        Subject: CN=40550F0292752ED7C34749C7D1159DB2B3DD1F23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:b6:c4:62:59:f7:f2:66:d9:2f:a0:e2:5c:
                    33:d3:68:8e:bb:c6:4d:14:a2:75:e1:b3:79:52:10:
                    d6:5c:5f:7a:d4:ef:49:03:77:5a:3f:9c:02:71:c6:
                    5c:af:3f:b4:21:31:ea:76:0f:56:7d:ac:f5:c4:63:
                    bc:f9:44:82:2a:c6:5f:71:d7:a9:6e:59:aa:93:13:
                    20:8e:f2:01:c2:48:5a:e6:91:b6:86:28:40:50:e2:
                    6f:b7:5a:fb:d8:d5:d4:95:f5:69:97:fc:9f:18:b7:
                    5b:84:36:e3:04:ce:0a:53:8a:70:a8:14:58:64:cf:
                    be:6b:20:5e:e2:9f:dd:e8:cf:09:ea:a5:dd:d8:95:
                    56:aa:d5:04:69:9d:eb:95:30:2b:3d:3d:b1:e1:d5:
                    cb:02:61:b8:3d:1b:52:68:e3:e2:cb:7e:fb:0a:08:
                    a7:97:e5:e1:e9:f5:38:f2:bd:0a:18:27:d2:36:a3:
                    54:3a:f5:f1:9f:16:ec:80:be:93:47:89:f2:b4:f1:
                    41:68:88:60:34:dd:c7:1d:fa:9a:15:92:48:d4:31:
                    b1:5a:0d:c1:11:3c:a6:d0:c0:9c:b6:3d:f1:84:4c:
                    e0:58:18:4a:81:9c:59:45:de:8a:cc:cb:fb:06:e2:
                    e0:6d:50:9d:78:25:5e:c8:62:8b:5c:df:30:69:d9:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:55:0F:02:92:75:2E:D7:C3:47:49:C7:D1:15:9D:B2:B3:DD:1F:23
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32332d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:94:cb:4c:ea:77:57:33:99:c6:cb:6c:99:2a:53:f9:9a:c3:
         38:c7:f1:14:a9:40:0e:9e:b4:3c:78:b6:21:09:cf:2c:3b:15:
         d8:39:b1:c6:ec:8e:f7:70:81:07:f8:ff:86:1c:15:47:9b:24:
         77:ea:fc:10:c9:2c:6e:7e:61:1a:98:0e:7a:b7:58:b4:03:b9:
         63:3f:14:cc:5a:d8:30:d5:3e:4f:17:28:06:0f:4f:3a:1f:29:
         29:e1:6c:d1:5c:62:36:2e:50:fb:c2:7e:31:93:3c:42:3d:b0:
         7e:e0:51:96:38:a5:9e:11:44:51:c1:2d:23:34:f7:6c:44:d3:
         29:99:dd:7b:e7:47:5b:76:3a:e4:92:88:a6:d3:ce:d7:30:b1:
         16:83:87:de:df:96:50:b7:60:01:d5:33:12:c1:2c:ed:10:c0:
         09:36:b1:78:e2:68:56:fd:18:ca:0c:11:03:4c:96:f3:e5:e1:
         73:6b:2b:39:6d:8b:52:bf:74:d5:82:ac:36:17:6a:7a:e6:65:
         f3:a4:89:2c:e2:24:27:f8:53:32:5c:07:eb:ef:6c:db:9e:36:
         86:5e:9e:34:35:fc:21:17:77:a9:22:60:82:0a:39:93:77:0e:
         53:18:f9:20:dc:3f:04:c8:c3:63:2e:0d:af:57:e7:11:38:fd:
         43:98:aa:cc
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUGkpHjxe3nd9AL/zpurpgz07PkEswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjUwNTI5MjMyODEyWhcNMjYwNTI4MjMzMzEy
WjAzMTEwLwYDVQQDEyg0MDU1MEYwMjkyNzUyRUQ3QzM0NzQ5QzdEMTE1OURCMkIz
REQxRjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13e2xGJZ9/Jm
2S+g4lwz02iOu8ZNFKJ14bN5UhDWXF961O9JA3daP5wCccZcrz+0ITHqdg9Wfaz1
xGO8+USCKsZfcdepblmqkxMgjvIBwkha5pG2hihAUOJvt1r72NXUlfVpl/yfGLdb
hDbjBM4KU4pwqBRYZM++ayBe4p/d6M8J6qXd2JVWqtUEaZ3rlTArPT2x4dXLAmG4
PRtSaOPiy377Cginl+Xh6fU48r0KGCfSNqNUOvXxnxbsgL6TR4nytPFBaIhgNN3H
HfqaFZJI1DGxWg3BETym0MCctj3xhEzgWBhKgZxZRd6KzMv7BuLgbVCdeCVeyGKL
XN8wadlFpwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFEBVDwKSdS7Xw0dJx9EVnbKz
3R8jMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzM2MzQyZTM0MzkyZTMxMzIyZTMwMmYzMjMzMmQzMjM0MjAz
ZDNlMjAzNDMwMzAzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFAMQwwDQYJKoZIhvcNAQELBQAD
ggEBADmUy0zqd1czmcbLbJkqU/mawzjH8RSpQA6etDx4tiEJzyw7Fdg5scbsjvdw
gQf4/4YcFUebJHfq/BDJLG5+YRqYDnq3WLQDuWM/FMxa2DDVPk8XKAYPTzofKSnh
bNFcYjYuUPvCfjGTPEI9sH7gUZY4pZ4RRFHBLSM092xE0ymZ3XvnR1t2OuSSiKbT
ztcwsRaDh97fllC3YAHVMxLBLO0QwAk2sXjiaFb9GMoMEQNMlvPl4XNrKzlti1K/
dNWCrDYXanrmZfOkiSziJCf4UzJcB+vvbNueNoZenjQ1/CEXd6kiYIIKOZN3DlMY
+SDcPwTIw2MuDa9X5xE4/UOYqsw=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:01:22 2025 by rpki-client