Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          WvAADjcl/9D+uR0GQo8OoUr8+IMsBLvty7ythkckRO4=
Subject key identifier:   AE:B9:C9:23:09:7B:D0:AC:DE:E0:73:2D:D9:58:C3:B4:E4:43:B7:94
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       6BDF034544601C60D75984E66C80686307802F97
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa
Signing time:             Thu 17 Apr 2025 18:28:30 +0000
ROA not before:           Thu 17 Apr 2025 18:23:30 +0000
ROA not after:            Thu 16 Apr 2026 18:28:30 +0000
asID:                     7018
IP address blocks:        69.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:df:03:45:44:60:1c:60:d7:59:84:e6:6c:80:68:63:07:80:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Apr 17 18:23:30 2025 GMT
            Not After : Apr 16 18:28:30 2026 GMT
        Subject: CN=AEB9C923097BD0ACDEE0732DD958C3B4E443B794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:9c:19:d7:6a:6b:4d:01:c0:c2:36:77:99:
                    32:2a:78:1e:e5:be:39:36:da:ab:01:f6:ec:20:99:
                    51:23:0d:00:02:e9:d2:3f:d3:16:2d:1c:91:f5:6e:
                    4b:86:33:75:e7:0e:3c:a9:3a:00:43:f6:c9:c6:76:
                    f7:ed:ec:af:e5:ad:f3:79:cb:9c:a4:d7:ee:a9:1d:
                    3c:0b:55:44:af:ea:34:38:9a:50:9f:35:06:58:eb:
                    3e:f0:ad:c0:fb:a2:67:8e:59:cb:16:22:a4:9a:4d:
                    6e:a6:91:d0:64:c9:1b:56:9c:94:e8:6f:03:49:d2:
                    f1:e2:c3:2e:bb:4e:dd:3d:d5:13:1a:d9:d8:d8:1e:
                    6c:36:29:a8:84:59:9d:72:b7:2f:fa:a4:20:9f:d3:
                    3a:97:0c:29:58:59:51:66:24:53:aa:b8:3f:91:96:
                    1e:a4:ce:c4:1b:ce:d0:28:2d:f6:f3:45:61:d7:e1:
                    cd:7a:fa:7e:6a:83:3a:a4:09:f6:ef:16:5b:81:4a:
                    7c:4e:7b:dc:29:3e:be:cc:38:d8:fa:80:33:f8:e1:
                    5d:c8:ab:63:fc:76:14:e4:34:59:3c:cd:f6:74:87:
                    98:25:6d:a9:c5:1f:ee:fa:3c:93:15:03:3c:88:da:
                    1f:c6:2e:c1:cb:6d:de:7e:c5:17:c9:3a:d6:46:de:
                    37:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:C9:23:09:7B:D0:AC:DE:E0:73:2D:D9:58:C3:B4:E4:43:B7:94
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:de:63:73:96:e4:63:69:fe:18:66:90:c3:bf:30:78:b0:
         54:95:a6:f9:ce:08:39:d9:6c:1b:78:3f:88:91:fc:90:d4:40:
         0d:21:56:be:68:da:f3:77:f4:c5:52:ea:cf:b7:3d:b7:bd:c9:
         02:f3:54:08:e0:f7:b8:05:48:76:a6:b4:99:ee:61:41:95:91:
         ee:28:6c:72:a9:1a:17:db:f9:63:67:7d:7f:db:03:06:6d:e5:
         a9:ab:2d:c3:17:d8:80:67:c4:0f:95:35:ee:54:d8:e2:bf:8f:
         b2:16:c1:c2:e4:96:9a:a4:48:c3:12:ac:1d:47:c2:4c:d8:bd:
         f0:bb:54:25:06:3c:5e:0e:d0:e4:9c:0b:43:53:3b:95:67:dd:
         77:fb:b9:ba:99:d9:67:d2:96:22:18:a8:0a:91:58:12:2e:99:
         f3:fd:60:97:96:11:3a:06:7c:7a:5f:c9:48:ce:26:e0:84:6e:
         3b:eb:94:7e:98:39:98:97:98:6b:72:c3:22:07:49:32:2c:69:
         b3:b7:77:17:06:be:b6:23:c6:4b:85:0f:df:f8:15:0d:2b:fc:
         96:74:87:35:03:ba:91:a0:57:6c:c2:f4:a3:46:89:de:07:b7:
         5b:db:d6:23:d0:4f:c8:67:0d:5f:aa:db:52:ff:fd:82:ff:04:
         9b:e4:59:71
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUa98DRURgHGDXWYTmbIBoYweAL5cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjUwNDE3MTgyMzMwWhcNMjYwNDE2MTgyODMw
WjAzMTEwLwYDVQQDEyhBRUI5QzkyMzA5N0JEMEFDREVFMDczMkREOTU4QzNCNEU0
NDNCNzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQCcGddqa00B
wMI2d5kyKnge5b45NtqrAfbsIJlRIw0AAunSP9MWLRyR9W5LhjN15w48qToAQ/bJ
xnb37eyv5a3zecucpNfuqR08C1VEr+o0OJpQnzUGWOs+8K3A+6JnjlnLFiKkmk1u
ppHQZMkbVpyU6G8DSdLx4sMuu07dPdUTGtnY2B5sNimohFmdcrcv+qQgn9M6lwwp
WFlRZiRTqrg/kZYepM7EG87QKC3280Vh1+HNevp+aoM6pAn27xZbgUp8TnvcKT6+
zDjY+oAz+OFdyKtj/HYU5DRZPM32dIeYJW2pxR/u+jyTFQM8iNofxi7By23efsUX
yTrWRt43/QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFK65ySMJe9Cs3uBzLdlYw7Tk
Q7eUMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMDM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABFps0wDQYJKoZIhvcNAQELBQAD
ggEBAEXw3mNzluRjaf4YZpDDvzB4sFSVpvnOCDnZbBt4P4iR/JDUQA0hVr5o2vN3
9MVS6s+3Pbe9yQLzVAjg97gFSHamtJnuYUGVke4obHKpGhfb+WNnfX/bAwZt5amr
LcMX2IBnxA+VNe5U2OK/j7IWwcLklpqkSMMSrB1HwkzYvfC7VCUGPF4O0OScC0NT
O5Vn3Xf7ubqZ2WfSliIYqAqRWBIumfP9YJeWEToGfHpfyUjOJuCEbjvrlH6YOZiX
mGtywyIHSTIsabO3dxcGvrYjxkuFD9/4FQ0r/JZ0hzUDupGgV2zC9KNGid4Ht1vb
1iPQT8hnDV+q21L//YL/BJvkWXE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:39 2025 by rpki-client