Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e2038303735.roa
File:                     36392e3136362e3232382e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          WOSq5sTN08Nbh1oJA8w3RJIcfwG3q/7vBIcOIt/57Bk=
Subject key identifier:   11:48:AB:7B:7C:C4:01:82:D3:D6:61:F0:5A:EC:8C:48:25:D3:01:13
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       36DA5281CDDEFD5129CEE8473A032514F5E056EB
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e2038303735.roa
Signing time:             Sun 20 Apr 2025 16:03:37 +0000
ROA not before:           Sun 20 Apr 2025 15:58:37 +0000
ROA not after:            Sun 19 Apr 2026 16:03:37 +0000
asID:                     8075
IP address blocks:        69.166.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:da:52:81:cd:de:fd:51:29:ce:e8:47:3a:03:25:14:f5:e0:56:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Apr 20 15:58:37 2025 GMT
            Not After : Apr 19 16:03:37 2026 GMT
        Subject: CN=1148AB7B7CC40182D3D661F05AEC8C4825D30113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:c0:88:17:4c:4c:81:aa:86:69:a0:9c:02:b6:
                    f6:b7:42:34:b0:bc:0f:5f:18:e2:68:21:5f:dd:e2:
                    4a:d3:66:89:05:cd:79:60:7e:f5:33:5b:f3:b2:34:
                    41:8a:7a:32:90:67:90:02:b0:ad:91:ac:8d:f4:85:
                    33:b0:70:45:08:81:1c:f3:02:15:c9:36:8a:45:ad:
                    fc:dd:57:91:cd:18:73:81:09:01:51:0d:69:e1:45:
                    6c:0c:b3:3e:97:60:f1:5e:e4:1b:f4:33:11:36:df:
                    00:38:d2:29:46:8b:39:e7:16:1c:dd:0c:f4:11:6d:
                    0f:5d:a0:ef:c3:de:69:85:bc:1b:cb:45:bb:d4:d6:
                    04:7a:92:af:3d:54:6d:1e:99:f4:f8:54:d0:f3:05:
                    63:ce:b1:23:ef:9f:e3:44:e8:7a:5d:9c:99:f5:27:
                    ab:07:b0:e9:c6:9d:f1:83:e3:0c:60:a4:7d:9b:01:
                    20:a2:90:20:03:e9:21:35:c4:ff:a2:1d:29:5f:2f:
                    13:13:25:2f:40:05:0e:a8:a3:4f:b1:ec:e1:7d:8f:
                    f3:35:4e:5b:e9:b5:be:b7:0b:a6:ed:94:c5:e3:a4:
                    d9:03:e6:51:4d:bf:2a:f0:61:fc:a4:d8:a5:4c:fd:
                    e1:36:87:61:cf:db:da:02:c6:fd:0f:b8:e7:b4:5e:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:48:AB:7B:7C:C4:01:82:D3:D6:61:F0:5A:EC:8C:48:25:D3:01:13
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232382e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:05:42:27:a9:07:04:d5:54:31:85:87:9e:e6:2a:02:b3:e6:
         c3:a2:e5:26:49:70:4a:83:fb:07:e1:66:e0:40:07:6f:a8:a6:
         00:cd:e3:a8:0c:20:f6:35:38:d5:5c:b8:81:ec:8f:a7:c6:26:
         55:a8:0f:88:55:39:1e:b1:9f:9e:3a:a6:0d:1c:ec:23:1f:7d:
         66:0e:d3:29:99:98:aa:3e:83:03:ad:70:f1:76:50:6d:f7:6d:
         eb:c3:5e:51:33:00:a0:0a:97:a5:3d:72:db:d2:c5:fa:8a:a9:
         4a:c9:2d:95:a9:fb:6d:a3:b8:ff:2c:9c:69:39:1a:c7:f8:f4:
         eb:0a:d5:8c:28:34:08:36:f6:25:cb:11:23:0b:88:ef:38:6c:
         3d:b3:4d:5a:b2:4c:67:8b:87:f3:31:64:13:5f:1d:06:7e:f5:
         02:eb:89:4d:27:aa:0f:67:a9:cb:a4:95:fe:f2:82:20:a8:e1:
         66:e6:9a:5f:0d:51:48:12:e2:90:0d:fa:b0:0e:9a:35:f1:5d:
         33:ff:3a:f8:d2:30:cd:a7:34:78:42:97:d9:84:f3:d0:ab:48:
         fa:2f:11:95:c5:fc:11:cf:7d:85:14:0c:21:20:a3:fe:82:62:
         4e:ab:e0:7c:66:41:c8:55:f3:19:0f:04:9c:3f:08:c7:8f:e3:
         7b:9f:7d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:04:57 2025 by rpki-client