Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3233203d3e20323134363537.roa
File:                     36392e3136362e3233322e302f32332d3233203d3e20323134363537.roa (raw, json)
Hash identifier:          mUZFrvY4ZTiymTSOrgUAUPVmJhWorMVBKom5Zh9eEt8=
Subject key identifier:   14:16:77:B1:92:8A:52:5D:5D:E5:FA:23:60:90:52:1B:88:96:34:0A
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       595DCF0957B43DF2E0E71B6583B6A3F4BC3562EC
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3233203d3e20323134363537.roa
Signing time:             Sat 24 May 2025 22:56:25 +0000
ROA not before:           Sat 24 May 2025 22:51:25 +0000
ROA not after:            Sat 23 May 2026 22:56:25 +0000
asID:                     214657
IP address blocks:        69.166.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 08:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:5d:cf:09:57:b4:3d:f2:e0:e7:1b:65:83:b6:a3:f4:bc:35:62:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 24 22:51:25 2025 GMT
            Not After : May 23 22:56:25 2026 GMT
        Subject: CN=141677B1928A525D5DE5FA236090521B8896340A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:b9:c0:ee:29:e6:b5:6a:84:09:90:31:10:
                    13:3e:9b:da:f9:4f:da:93:84:c0:e5:c7:d4:8f:b9:
                    ee:b6:de:af:f1:70:d6:14:eb:79:84:d6:6d:d5:0e:
                    d7:c5:60:18:e0:ad:4f:cf:fd:13:75:a7:6b:14:4e:
                    52:dc:d5:06:ff:10:27:5e:0b:37:fd:88:26:36:2b:
                    11:45:18:de:e5:ac:0a:ca:c7:3e:f3:25:c3:20:33:
                    83:d7:ac:16:8d:86:29:c2:72:69:48:4c:a6:6b:2e:
                    8a:34:3f:77:ef:08:25:0a:a8:13:ef:d6:33:69:ac:
                    19:bf:67:5c:76:0c:c6:77:8e:a6:55:5c:dd:30:a4:
                    6f:a0:1c:fb:7e:34:5c:3d:71:1d:7c:4b:80:b9:7f:
                    8f:dc:84:49:04:bf:4e:8b:a4:b3:38:2d:93:22:37:
                    a9:d2:fd:64:cd:18:32:69:e0:bb:b1:2a:86:43:05:
                    cd:3f:57:fc:34:37:ae:44:f7:ed:e6:ee:40:dd:1c:
                    9e:fb:85:e3:5f:f4:58:d1:ef:c8:8c:0b:0b:72:68:
                    af:7d:54:e0:fe:08:c1:b5:5e:78:47:cb:f9:03:97:
                    e6:01:29:d4:6e:f6:5f:e5:c2:86:25:58:9d:37:1c:
                    71:81:90:ee:cd:4b:9e:a5:c8:ff:0f:0c:65:7e:f4:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:16:77:B1:92:8A:52:5D:5D:E5:FA:23:60:90:52:1B:88:96:34:0A
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3233203d3e20323134363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:4f:b2:28:6c:79:4b:58:a2:ca:b6:d6:fa:aa:df:02:bf:
         c6:12:aa:a7:4d:c0:f4:f9:5d:1e:93:f4:9e:dc:d2:60:d0:1f:
         a3:5a:b8:fa:61:66:91:77:e5:95:6e:88:53:12:21:ba:c8:93:
         20:2e:c4:44:f4:74:15:1d:4a:cb:8c:2e:2e:f4:d9:70:b4:65:
         12:2e:1c:98:4a:bf:aa:69:27:c9:e0:f7:23:6b:dd:1f:8d:12:
         db:39:0b:8c:a9:79:eb:3f:8a:d2:4f:c7:50:55:14:87:4b:b4:
         47:d6:82:ae:2f:be:77:b9:4c:c3:67:e9:5d:de:2c:a2:14:f8:
         d2:a3:6b:87:9f:13:9d:36:60:92:74:f1:8c:22:e6:33:c6:6a:
         86:c9:96:50:eb:3f:a8:bc:12:bf:71:a5:f6:e9:e0:cf:2d:46:
         cc:63:ec:3b:a9:e6:37:a2:9d:1f:fc:52:dc:e4:5c:b3:ea:c4:
         49:a7:ad:ab:05:03:eb:37:70:1e:e4:b0:4b:a7:10:76:ad:ab:
         8d:05:36:73:b4:2e:e6:20:96:83:70:52:5d:cb:1a:99:59:5b:
         2f:84:32:38:7e:00:5c:92:02:14:9c:53:ca:62:68:45:4e:5a:
         62:20:bb:71:08:02:b1:fc:c2:d1:da:5d:33:dc:91:b5:8b:7f:
         86:d2:59:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:35:10 2025 by rpki-client