Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e2039333034.roa
File:                     36392e3136362e3232352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          5xb01t6IuOtW0nQ3ALM7S/9wRylecoFwW67TYRMPgi0=
Subject key identifier:   70:BE:68:14:4B:76:40:42:94:CC:6B:4A:B3:C0:09:D6:D6:AE:FB:1A
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       412C1F82741D32048B279A3602183E2A7A587C4F
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 04 Aug 2025 13:49:44 +0000
ROA not before:           Mon 04 Aug 2025 13:44:44 +0000
ROA not after:            Mon 03 Aug 2026 13:49:44 +0000
asID:                     9304
IP address blocks:        69.166.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 05:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2c:1f:82:74:1d:32:04:8b:27:9a:36:02:18:3e:2a:7a:58:7c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug  4 13:44:44 2025 GMT
            Not After : Aug  3 13:49:44 2026 GMT
        Subject: CN=70BE68144B76404294CC6B4AB3C009D6D6AEFB1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:3f:60:74:d7:04:36:d6:cf:49:39:1d:b1:
                    f7:23:61:ba:4b:5e:08:ca:60:99:d6:58:37:75:68:
                    50:98:b5:02:ef:7e:36:d3:ee:37:24:e3:6e:29:34:
                    54:3c:98:ff:1b:73:68:0f:17:df:a4:51:93:90:1d:
                    81:2f:9d:59:14:0e:a7:4d:89:72:2e:69:f7:0b:b0:
                    c8:7b:46:f5:84:89:7e:b0:13:bb:73:ea:c7:22:7a:
                    c3:6e:18:29:f3:9e:01:70:77:18:76:1f:41:78:b4:
                    05:6a:01:ad:12:32:64:41:4e:59:cc:6d:a0:fa:76:
                    56:75:96:6b:05:06:96:6f:07:e6:17:c0:85:3e:32:
                    d1:3b:0c:04:28:ae:70:0f:4e:0b:ea:c4:f5:b8:24:
                    de:7b:9d:53:bc:03:d1:71:95:c8:fe:7b:c4:32:df:
                    3b:74:69:21:a0:35:ab:9d:b2:0a:38:a8:63:02:fe:
                    5c:fa:cc:63:22:25:5f:cc:10:d7:2f:1b:23:bd:a7:
                    57:3d:f9:6d:60:28:87:24:06:e0:ed:2e:32:01:23:
                    df:b8:bf:65:0e:d2:05:84:bf:de:e4:27:33:2f:c2:
                    c2:63:69:72:47:5e:ae:61:9d:44:db:32:6d:ec:68:
                    d1:02:e1:8d:aa:ff:95:b2:37:f6:12:c8:48:70:1d:
                    ad:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BE:68:14:4B:76:40:42:94:CC:6B:4A:B3:C0:09:D6:D6:AE:FB:1A
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:52:71:fa:f4:7f:96:0d:b5:11:d6:da:80:fd:8e:f5:59:c6:
         e3:a8:f8:20:ee:ad:be:4e:e2:a1:2e:5c:91:0a:eb:2f:9a:d4:
         ce:21:6a:fe:af:2a:85:c3:b6:ac:88:0c:ec:b4:81:b0:67:3d:
         ad:6a:3c:62:23:a1:ad:cb:b0:cc:60:62:8e:c7:1e:0d:eb:83:
         fd:9b:0d:39:b5:46:53:4a:38:46:9d:45:53:da:9d:c5:04:e3:
         0f:11:d0:df:10:3d:29:2c:84:1f:7b:1b:61:5d:38:3a:8f:cd:
         58:a6:c8:ed:32:68:6c:d2:ff:0b:af:1d:4b:0f:99:e4:1d:7c:
         6f:87:de:e2:94:46:9c:82:7a:17:b7:44:dd:11:cf:7e:f0:7c:
         70:b3:dd:e0:3a:e0:9e:08:20:6b:d3:d8:b8:70:a0:08:4c:3a:
         52:19:82:18:f7:e3:c5:e9:cc:26:81:dd:03:ad:e7:31:01:2f:
         7f:ad:09:b4:e7:6f:ba:5e:18:09:0d:f4:12:ac:6d:d2:d3:c0:
         6b:e3:76:8b:cd:18:ea:09:cb:42:ba:80:3b:69:f6:94:e4:4b:
         a7:19:a9:2b:95:10:a0:10:fa:07:24:8b:2a:8f:52:51:ef:60:
         f1:f3:12:9d:e6:17:7e:01:08:d2:47:be:36:69:d1:13:2d:87:
         a8:97:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:46 2025 by rpki-client