Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e203230343733.roa
File:                     36342e35322e31342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          qH8iveJJgE0OWO0gaCONU5NrltznYhjXdeamzjAMu0M=
Subject key identifier:   3F:51:6B:D1:13:36:2C:AA:8E:23:25:E4:A7:5B:44:0E:62:AE:31:BD
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       0BB60489A2859784A1205BCBE185231E6C14CBD7
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 22 Jan 2025 16:28:26 +0000
ROA not before:           Wed 22 Jan 2025 16:23:26 +0000
ROA not after:            Wed 21 Jan 2026 16:28:26 +0000
asID:                     20473
IP address blocks:        64.52.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 01:50:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b6:04:89:a2:85:97:84:a1:20:5b:cb:e1:85:23:1e:6c:14:cb:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Jan 22 16:23:26 2025 GMT
            Not After : Jan 21 16:28:26 2026 GMT
        Subject: CN=3F516BD113362CAA8E2325E4A75B440E62AE31BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a9:11:b5:f8:7b:05:0d:76:46:2b:60:6d:94:
                    fd:50:5f:87:71:7a:e4:b8:e5:1f:ea:0e:0b:98:46:
                    84:a7:b2:4f:11:0a:64:82:8e:72:87:97:47:33:78:
                    4e:55:9a:dd:c2:dd:7b:d4:23:a3:1c:4d:ff:6e:b7:
                    39:37:ab:c9:c7:ac:0a:33:34:e5:42:e1:67:db:3e:
                    d3:d8:8e:3e:12:39:a8:bf:0b:43:70:c3:ca:e6:25:
                    e4:df:e4:c3:05:cb:5a:51:c9:3c:e6:d4:8f:97:46:
                    da:0f:74:69:91:c1:49:d2:82:51:70:09:ff:6c:f6:
                    04:b6:62:bb:10:f1:73:06:43:8d:0c:0c:91:bf:58:
                    ea:cd:01:ef:6a:7b:0f:09:63:49:f1:8f:79:c7:dc:
                    52:41:c7:5a:43:fa:1e:6b:55:de:fd:4e:34:ae:e5:
                    cf:ad:68:b3:e7:df:f9:30:03:40:b6:e0:77:84:b9:
                    52:73:49:70:42:7e:73:a0:d6:9a:b5:cd:49:c0:a4:
                    a4:ca:80:58:d6:7b:bc:b9:70:76:d0:94:0d:7a:e4:
                    40:9a:20:8a:4b:d3:71:78:5c:4a:3c:4d:db:06:0b:
                    8a:07:3c:bc:06:d8:dd:fa:52:73:db:d9:cb:a4:bb:
                    3d:01:20:3b:db:1f:a1:cf:e1:b5:39:c3:54:22:f1:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:6B:D1:13:36:2C:AA:8E:23:25:E4:A7:5B:44:0E:62:AE:31:BD
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/36342e35322e31342e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.52.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:80:c2:63:21:73:f3:18:f5:f3:3f:ac:e9:ee:f2:ef:b8:0d:
         f0:74:7f:37:ca:fb:8e:ad:b1:a4:58:66:3e:18:4a:4a:3d:b8:
         01:7b:14:b3:40:bc:42:7c:2c:d7:51:42:d6:ce:f5:23:f2:04:
         03:f5:71:34:cf:87:f8:22:16:43:62:94:48:46:fd:fa:e6:d3:
         1e:3d:a0:c9:8a:03:f9:d0:99:9b:bd:f3:35:c1:51:68:5b:87:
         39:e3:6b:27:fb:d4:31:00:82:50:24:2b:23:82:5b:4f:b1:bb:
         19:bf:62:f7:40:ea:af:b0:10:b4:84:29:a7:42:dc:48:9e:26:
         5f:42:22:be:5c:61:55:86:d5:fa:ce:44:46:14:9d:75:c2:2c:
         fd:ae:89:8e:05:d9:b2:f1:d5:b6:13:a1:a4:72:5c:9f:17:6e:
         35:32:fd:0c:de:5b:cf:ba:92:3b:de:62:83:27:d2:92:4e:96:
         88:50:97:28:d5:a7:f9:4c:f8:11:b1:5b:8a:dd:c5:fd:18:1a:
         f2:0e:f5:ae:5e:be:45:69:26:be:10:bf:69:c5:e8:7e:78:5b:
         db:9e:74:d3:da:fd:60:9b:3a:86:22:79:df:52:46:15:b7:76:
         61:e4:e6:70:d4:3f:e8:62:3a:16:0f:32:27:78:76:d1:4b:71:
         a6:0f:13:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 16:03:45 2025 by rpki-client