Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203134333135.roa
File:                     36362e3131382e3234342e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          Pym/AqZv2W4FjFIZ2NqyUviDgTcZ907mJVIfqt0p4AE=
Subject key identifier:   5A:94:9A:A6:C8:78:E8:B2:57:A1:29:C7:1B:6C:B9:AF:71:ED:7E:04
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       773EDFFD636EC7F1D5D7AB60D4765CF2C0DB85DA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203134333135.roa
Signing time:             Sat 12 Apr 2025 06:25:45 +0000
ROA not before:           Sat 12 Apr 2025 06:20:45 +0000
ROA not after:            Sat 11 Apr 2026 06:25:45 +0000
asID:                     14315
IP address blocks:        66.118.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 02:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3e:df:fd:63:6e:c7:f1:d5:d7:ab:60:d4:76:5c:f2:c0:db:85:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 12 06:20:45 2025 GMT
            Not After : Apr 11 06:25:45 2026 GMT
        Subject: CN=5A949AA6C878E8B257A129C71B6CB9AF71ED7E04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:88:36:2f:db:23:cb:d3:5d:ab:ff:10:6e:92:
                    05:fd:f8:fa:96:71:33:7f:23:95:75:52:67:14:11:
                    6e:52:a1:6d:c7:16:b5:0c:5a:2b:30:9a:fe:05:51:
                    53:8d:08:b4:c3:d5:79:56:3f:4a:23:85:64:19:58:
                    44:d7:bb:06:19:87:c7:c2:7b:c6:74:ab:bf:82:74:
                    b5:2d:39:7c:66:ce:b4:45:93:86:62:60:eb:19:a1:
                    74:0a:81:d3:11:72:0c:fa:36:e3:25:56:c9:7d:36:
                    36:24:78:7b:38:bb:9f:cd:fc:c2:e4:74:07:83:82:
                    55:d4:48:7e:49:81:dd:c0:62:d5:ac:96:14:5c:07:
                    8d:af:2f:30:d9:c9:7c:a6:df:12:67:50:b1:7d:aa:
                    01:7d:c8:fa:db:4a:3f:74:50:39:8a:9a:c1:0b:c9:
                    a5:f2:ba:ac:b2:a3:4e:37:45:80:38:80:55:17:0b:
                    d2:d8:f0:fb:0b:39:96:d4:19:96:46:98:d6:fa:40:
                    1f:8d:7c:70:21:94:df:8e:ce:2f:fb:50:e0:aa:16:
                    6c:75:f1:d4:c8:83:b3:96:a1:3d:f1:b3:6e:d4:da:
                    be:56:f5:24:90:bb:cf:b0:ae:c8:d0:5c:37:51:34:
                    19:13:8c:c6:e8:74:9f:b7:86:42:33:27:3d:b7:11:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:9A:A6:C8:78:E8:B2:57:A1:29:C7:1B:6C:B9:AF:71:ED:7E:04
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/36362e3131382e3234342e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:22:f3:78:54:79:84:e8:eb:6b:2c:33:fe:c7:b7:d9:61:51:
         8c:f4:7e:fb:65:35:d5:9f:d4:6e:62:ee:75:99:a8:c7:83:75:
         33:38:2f:d5:65:19:00:b8:14:14:d6:01:c3:8f:f5:86:28:42:
         1a:4c:24:62:72:86:b6:24:c8:1a:d1:cc:17:cf:e1:4c:88:8a:
         31:ee:e4:5a:18:36:f5:39:b9:d1:92:bf:1d:8f:7c:66:24:6c:
         15:4e:2c:c4:09:3b:c0:29:fc:eb:5f:0a:e2:ac:33:16:db:6d:
         7c:37:fd:6b:89:d0:f3:21:d2:d8:9f:e6:20:ff:ba:cf:ab:61:
         72:92:d5:75:ea:51:60:c7:71:2a:be:3b:3a:87:a4:55:e6:95:
         0d:f4:55:5c:2e:f5:a3:93:9f:50:06:a2:4f:bd:24:79:30:15:
         51:ce:1b:5e:50:6c:8a:a6:3b:72:c2:e8:03:75:37:77:a5:aa:
         83:70:01:f9:ac:40:1b:1a:48:27:8d:8d:d4:ef:77:9f:28:89:
         ab:41:17:2a:e1:11:f8:b3:bc:44:e9:52:05:ce:05:30:f0:9f:
         ce:29:d1:50:8e:32:31:41:cd:42:f7:56:ef:af:d5:37:c5:44:
         29:30:d7:15:b0:22:8b:66:c9:4b:98:27:13:b4:4c:0a:3f:a4:
         b2:ac:5f:9c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUdz7f/WNux/HV16tg1HZc8sDbhdowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjUwNDEyMDYyMDQ1WhcNMjYwNDExMDYyNTQ1
WjAzMTEwLwYDVQQDEyg1QTk0OUFBNkM4NzhFOEIyNTdBMTI5QzcxQjZDQjlBRjcx
RUQ3RTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtog2L9sjy9Nd
q/8QbpIF/fj6lnEzfyOVdVJnFBFuUqFtxxa1DForMJr+BVFTjQi0w9V5Vj9KI4Vk
GVhE17sGGYfHwnvGdKu/gnS1LTl8Zs60RZOGYmDrGaF0CoHTEXIM+jbjJVbJfTY2
JHh7OLufzfzC5HQHg4JV1Eh+SYHdwGLVrJYUXAeNry8w2cl8pt8SZ1CxfaoBfcj6
20o/dFA5iprBC8ml8rqssqNON0WAOIBVFwvS2PD7CzmW1BmWRpjW+kAfjXxwIZTf
js4v+1DgqhZsdfHUyIOzlqE98bNu1Nq+VvUkkLvPsK7I0Fw3UTQZE4zG6HSft4ZC
Myc9txHePQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFFqUmqbIeOiyV6Epxxtsua9x
7X4EMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzM2MzYyZTMxMzEzODJlMzIzNDM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNDMzMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEJ29DANBgkqhkiG9w0BAQsF
AAOCAQEADiLzeFR5hOjraywz/se32WFRjPR++2U11Z/UbmLudZmox4N1Mzgv1WUZ
ALgUFNYBw4/1hihCGkwkYnKGtiTIGtHMF8/hTIiKMe7kWhg29Tm50ZK/HY98ZiRs
FU4sxAk7wCn8618K4qwzFtttfDf9a4nQ8yHS2J/mIP+6z6thcpLVdepRYMdxKr47
OoekVeaVDfRVXC71o5OfUAaiT70keTAVUc4bXlBsiqY7csLoA3U3d6Wqg3AB+axA
GxpIJ42N1O93nyiJq0EXKuER+LO8ROlSBc4FMPCfzinRUI4yMUHNQvdW76/VN8VE
KTDXFbAii2bJS5gnE7RMCj+ksqxfnA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:02:01 2025 by rpki-client