Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232322e302f32342d3234203d3e203136353039.roa
File:                     36392e3136362e3232322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          FX6CeGsS5qoat7iCjD5U+hh/KTT2weAzCSYu+UHyoqo=
Subject key identifier:   56:A6:C9:18:06:37:BB:FA:0B:0F:36:5B:0C:C5:70:10:78:6A:BB:80
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       374FE2B3E23F1210CBCA7559F7FF9868CEF0132A
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232322e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 21 Apr 2025 23:03:51 +0000
ROA not before:           Mon 21 Apr 2025 22:58:51 +0000
ROA not after:            Mon 20 Apr 2026 23:03:51 +0000
asID:                     16509
IP address blocks:        69.166.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 23:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4f:e2:b3:e2:3f:12:10:cb:ca:75:59:f7:ff:98:68:ce:f0:13:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Apr 21 22:58:51 2025 GMT
            Not After : Apr 20 23:03:51 2026 GMT
        Subject: CN=56A6C9180637BBFA0B0F365B0CC57010786ABB80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:51:b7:73:35:f7:a7:c5:b0:6a:8c:46:e4:
                    2b:7f:27:62:48:53:cb:7f:d1:5b:25:3d:cb:7b:4d:
                    ed:f9:31:c4:7a:c6:dd:47:05:5f:82:8c:a1:81:1b:
                    6f:80:57:ac:2c:1b:cd:32:dd:2b:01:9f:27:7a:46:
                    e7:70:42:3e:23:ef:f6:49:58:bb:f0:6d:d5:da:0f:
                    e5:fd:99:dc:48:d5:a7:cd:eb:53:cb:b4:c8:6f:ad:
                    44:92:c6:88:82:28:06:d7:46:62:af:03:c8:ca:41:
                    f9:38:8b:72:f3:e1:ed:12:6b:4c:72:88:33:49:86:
                    a2:9e:c4:15:98:b3:0e:3b:82:3b:01:10:9a:b4:bb:
                    36:6c:08:02:94:62:7a:5d:34:d7:02:d9:0a:a0:67:
                    ad:9c:86:79:58:8f:e0:c8:72:5e:1d:71:62:71:ea:
                    b6:fd:f0:3d:c2:03:06:42:4e:0e:99:88:39:59:2a:
                    16:56:68:0e:d8:e1:77:4f:1c:9e:9e:3c:c4:3d:4b:
                    d7:3c:f8:78:66:2a:6b:83:9f:47:f3:2c:c4:b7:4b:
                    19:ab:47:b8:76:1b:c5:8e:d3:54:8c:88:e1:1f:20:
                    c9:1c:91:b0:18:98:56:ca:2a:bc:81:09:51:89:67:
                    e0:70:e6:71:33:5f:56:51:55:2b:7d:25:dc:a6:84:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A6:C9:18:06:37:BB:FA:0B:0F:36:5B:0C:C5:70:10:78:6A:BB:80
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:46:4b:03:10:2b:cf:f2:2e:79:88:c0:4c:c0:12:de:41:79:
         95:48:27:d1:01:23:5f:e1:e0:b2:a9:7a:f4:80:a6:b5:d0:5a:
         81:c4:1c:c3:ef:e4:d3:32:3b:29:3f:f7:1f:8f:5f:b3:75:c9:
         b9:52:40:40:20:f0:29:cf:46:f7:53:b2:87:18:8e:a8:89:df:
         74:75:c4:9e:cb:91:c4:03:b5:2d:ac:d7:18:13:76:9f:a8:ab:
         4e:7a:27:51:2b:12:91:62:69:e7:e2:40:cf:40:c3:0a:1e:e4:
         c1:66:1e:3b:d0:d1:8b:ad:6b:9d:0d:89:b1:a8:83:da:a6:9a:
         9e:3f:93:4c:94:8a:51:3a:78:cb:27:32:8d:42:ab:97:08:0a:
         62:73:69:06:d6:4c:bb:42:23:36:61:6f:4d:e0:dc:38:33:ae:
         61:69:49:44:1d:91:6d:a0:b6:3b:f4:92:1b:54:3a:8f:c4:dc:
         b6:21:9e:2d:72:01:9f:e2:3d:85:3d:fe:c1:6a:64:e3:9d:a2:
         f1:4f:e4:c2:c6:9f:7b:96:bf:e7:25:53:03:b0:10:58:78:69:
         11:e7:8a:6a:20:24:68:3e:1a:92:c9:8b:7a:a8:be:25:7b:ad:
         81:60:df:72:91:6e:83:24:30:1f:b9:f1:7e:65:05:76:36:b7:
         e3:6c:32:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:18 2025 by rpki-client