Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20343032323135.roa
File:                     36392e3136362e3232332e302f32342d3234203d3e20343032323135.roa (raw, json)
Hash identifier:          6y2nD+1dtsPWEKFJ+aXnrX4ZkdeGqk5OqQ3PGjLolMc=
Subject key identifier:   F1:D2:E5:F9:0E:ED:2D:FF:96:BA:73:EB:00:F3:C1:CF:F8:7A:73:DD
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       543ACC4BD23B59869A12B7E3842B461343326C21
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20343032323135.roa
Signing time:             Thu 16 Apr 2026 06:53:51 +0000
ROA not before:           Thu 16 Apr 2026 06:48:51 +0000
ROA not after:            Thu 15 Apr 2027 06:53:51 +0000
asID:                     402215
IP address blocks:        69.166.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3a:cc:4b:d2:3b:59:86:9a:12:b7:e3:84:2b:46:13:43:32:6c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Apr 16 06:48:51 2026 GMT
            Not After : Apr 15 06:53:51 2027 GMT
        Subject: CN=F1D2E5F90EED2DFF96BA73EB00F3C1CFF87A73DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f8:1b:e0:db:fa:23:e7:2a:8a:b7:b6:66:af:
                    5b:ac:d3:a3:f1:09:d3:bf:a8:ab:30:46:53:9e:13:
                    4d:83:69:03:f8:93:87:e1:57:a0:88:c1:60:fe:07:
                    e5:52:6b:e2:70:da:cc:3e:b3:08:91:b0:88:55:ab:
                    1f:28:34:e2:ca:fe:00:48:7b:66:60:2f:62:11:27:
                    15:87:ea:73:5a:0b:18:dc:aa:01:10:70:16:76:d8:
                    e4:27:b8:49:65:71:19:c3:ea:1d:44:3e:ca:5c:7c:
                    e8:a5:7a:98:1b:91:1c:46:0e:54:ea:c3:ba:b9:15:
                    a5:04:93:7c:b2:b9:9e:12:6e:3b:fc:61:f9:47:07:
                    1c:1b:4e:29:4a:3e:b9:18:5f:47:9a:df:fd:6d:65:
                    a6:b0:85:69:90:94:f9:ab:1f:c7:f1:3c:06:35:d5:
                    c3:e3:31:da:a3:05:24:6a:21:b8:46:31:ff:90:bb:
                    09:d7:51:ae:2d:ee:6c:84:fe:1d:16:7e:c8:7a:dc:
                    21:33:a0:4c:54:4e:fa:63:7e:b4:1d:e7:76:e8:d3:
                    60:d8:13:60:b3:32:f3:10:45:47:04:b9:a4:3f:e2:
                    31:3d:68:6e:1c:7f:10:01:b9:bf:fe:89:53:94:81:
                    d1:3b:30:29:2d:20:b0:99:16:dd:02:cb:1c:ff:17:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D2:E5:F9:0E:ED:2D:FF:96:BA:73:EB:00:F3:C1:CF:F8:7A:73:DD
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232332e302f32342d3234203d3e20343032323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:6f:34:a5:89:3e:b3:49:da:7b:91:de:53:b4:a4:fc:7f:90:
         88:b7:89:eb:5e:b5:ef:94:8f:5e:2d:85:29:b9:78:4d:ac:cc:
         80:ba:96:24:77:44:cf:f1:73:3d:60:a9:50:d7:ef:ca:e5:7e:
         aa:40:52:76:f9:7e:17:8d:ed:8c:93:03:8d:9a:5c:6c:7c:a3:
         dc:c6:fb:ad:b6:78:eb:d8:d3:3a:33:a3:53:c6:2b:d0:24:d1:
         66:e1:d7:5a:cd:a5:03:c3:5f:45:f5:08:78:7f:28:e5:7b:fd:
         ff:12:b5:b6:86:47:80:86:e6:7b:c6:a2:8b:43:cd:a0:84:cc:
         6b:61:d3:5b:34:ce:e8:98:27:46:55:c0:6b:8a:5c:58:20:39:
         99:5f:5a:da:39:1c:d5:a1:20:2c:31:ba:ab:27:c2:5c:4d:fb:
         53:24:d9:31:ec:ac:8b:5b:5d:e2:c9:b2:0f:58:0f:11:85:d3:
         26:13:90:7a:0e:65:37:a6:69:7d:cd:fe:f0:33:67:d4:8f:b1:
         81:5b:82:8a:3f:3c:74:fc:56:af:83:35:21:8f:f9:ea:02:5a:
         a6:93:3a:4a:c0:ee:c5:66:d8:ce:dc:b0:ae:1a:5e:59:7e:4d:
         44:56:a9:79:22:29:a0:f4:ff:3f:5b:2e:d6:83:68:a7:7d:aa:
         66:39:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:52 2026 by rpki-client