Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32332d3233203d3e203137313339.roa
File:                     36362e3131372e31322e302f32332d3233203d3e203137313339.roa (raw, json)
Hash identifier:          d3euZamfEewRXV1X7TQZIuJGSzKUdk+GoTvGy3nnatE=
Subject key identifier:   11:2E:41:AF:16:AB:6B:9C:18:2D:76:B2:C3:70:34:85:B2:34:A1:F2
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       0B8ADAF8B8A0CAEA2A23DB4F09942E212EDAA162
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32332d3233203d3e203137313339.roa
Signing time:             Thu 15 May 2025 11:40:13 +0000
ROA not before:           Thu 15 May 2025 11:35:13 +0000
ROA not after:            Thu 14 May 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        66.117.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8a:da:f8:b8:a0:ca:ea:2a:23:db:4f:09:94:2e:21:2e:da:a1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: May 15 11:35:13 2025 GMT
            Not After : May 14 11:40:13 2026 GMT
        Subject: CN=112E41AF16AB6B9C182D76B2C3703485B234A1F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:b9:6e:fa:43:8a:56:69:30:de:ee:1b:67:
                    ca:dc:20:32:73:11:52:e9:48:0d:94:c0:17:ff:33:
                    eb:59:a6:ab:a7:b5:f8:9c:c7:5c:29:56:4d:22:03:
                    08:2f:70:9a:c2:9c:e8:42:96:64:7c:fd:ce:cb:b3:
                    6e:61:91:42:fd:d4:e2:59:d1:30:4c:f6:2a:ef:b3:
                    f9:ab:6b:7f:d8:6d:99:f7:3f:e9:66:ab:55:d2:0c:
                    d6:84:66:28:1d:2f:8e:33:65:6f:de:fd:aa:7e:1e:
                    07:62:fc:44:77:93:2e:00:62:c8:73:16:ab:97:fe:
                    bb:60:18:49:69:35:24:ee:0a:a2:1a:1a:b3:a1:0d:
                    a4:d8:df:cf:e5:36:59:14:16:15:93:2c:2a:c5:31:
                    e5:60:9b:f2:68:af:db:7e:23:f4:4f:93:b0:a3:08:
                    a1:2a:ac:82:b0:1c:93:4b:aa:6d:42:47:27:4c:d9:
                    50:b5:93:48:f8:a8:5e:4a:21:09:52:df:b8:cd:57:
                    c6:ba:37:22:c8:c3:94:7a:9f:6d:40:66:23:69:63:
                    b3:4c:9a:65:38:03:81:6e:b7:68:c9:fa:0b:58:bf:
                    e9:fc:45:01:6b:e2:5b:b0:14:99:9a:d3:b5:44:66:
                    45:41:e7:31:5e:ae:44:b7:3f:94:ba:9d:b7:66:cc:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2E:41:AF:16:AB:6B:9C:18:2D:76:B2:C3:70:34:85:B2:34:A1:F2
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e31322e302f32332d3233203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:6f:33:8c:f9:52:20:58:41:b7:00:0a:ab:a1:a9:f6:59:48:
         79:09:3f:32:42:58:bc:12:99:d1:9b:7d:59:0d:68:ef:5f:b8:
         df:d2:c2:52:b9:71:59:2c:20:c3:b1:15:a8:d6:d5:70:47:9a:
         c4:dd:c0:11:20:5d:f6:6c:4a:af:6a:cb:9f:83:6f:31:69:c0:
         b3:17:41:9b:99:f3:d7:16:37:00:f4:06:d5:13:6b:d8:35:24:
         e0:51:e2:b8:f9:cc:a6:e7:c7:5e:03:44:de:22:14:cc:db:c5:
         de:84:28:b6:ca:ea:79:a4:e4:10:9b:8d:56:7a:51:13:b0:f6:
         9f:ea:61:64:23:59:96:2b:a7:2e:4e:cc:a7:66:cb:b7:cf:16:
         35:a4:1a:2f:7e:f9:bf:af:18:ca:e2:9c:03:1e:0f:fe:7d:ab:
         e0:a2:9f:be:53:1a:e5:d3:3a:87:ef:f7:a6:df:e2:4f:d4:6c:
         fc:32:af:bf:86:da:29:52:dc:42:42:84:1f:0c:36:da:0d:dd:
         0a:59:2e:3d:44:e7:81:31:ab:24:25:48:90:0a:7b:d2:be:a3:
         28:71:a9:14:31:63:5d:de:3e:e2:e3:3a:f6:08:28:32:1b:8a:
         a4:40:ea:af:e3:09:9c:14:74:9a:39:c3:45:2e:12:1f:5a:76:
         d2:4f:57:49
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUC4ra+LigyuoqI9tPCZQuIS7aoWIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli
OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNTE1MTEzNTEzWhcNMjYwNTE0MTE0MDEz
WjAzMTEwLwYDVQQDEygxMTJFNDFBRjE2QUI2QjlDMTgyRDc2QjJDMzcwMzQ4NUIy
MzRBMUYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGi5bvpDilZp
MN7uG2fK3CAycxFS6UgNlMAX/zPrWaarp7X4nMdcKVZNIgMIL3CawpzoQpZkfP3O
y7NuYZFC/dTiWdEwTPYq77P5q2t/2G2Z9z/pZqtV0gzWhGYoHS+OM2Vv3v2qfh4H
YvxEd5MuAGLIcxarl/67YBhJaTUk7gqiGhqzoQ2k2N/P5TZZFBYVkywqxTHlYJvy
aK/bfiP0T5OwowihKqyCsByTS6ptQkcnTNlQtZNI+KheSiEJUt+4zVfGujciyMOU
ep9tQGYjaWOzTJplOAOBbrdoyfoLWL/p/EUBa+JbsBSZmtO1RGZFQecxXq5Etz+U
up23Zsz98wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBEuQa8Wq2ucGC12ssNwNIWy
NKHyMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzM2MzYyZTMxMzEzNzJlMzEzMjJlMzAyZjMyMzMyZDMyMzMy
MDNkM2UyMDMxMzczMTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFCdQwwDQYJKoZIhvcNAQELBQAD
ggEBACdvM4z5UiBYQbcACquhqfZZSHkJPzJCWLwSmdGbfVkNaO9fuN/SwlK5cVks
IMOxFajW1XBHmsTdwBEgXfZsSq9qy5+DbzFpwLMXQZuZ89cWNwD0BtUTa9g1JOBR
4rj5zKbnx14DRN4iFMzbxd6EKLbK6nmk5BCbjVZ6UROw9p/qYWQjWZYrpy5OzKdm
y7fPFjWkGi9++b+vGMrinAMeD/59q+Cin75TGuXTOofv96bf4k/UbPwyr7+G2ilS
3EJChB8MNtoN3QpZLj1E54ExqyQlSJAKe9K+oyhxqRQxY13ePuLjOvYIKDIbiqRA
6q/jCZwUdJo5w0UuEh9adtJPV0k=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:39:41 2025 by rpki-client