Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          exJJkgwBiwU9/+sdn4OcN+Abal6mvxPXF9wvaBAWAAc=
Subject key identifier:   91:36:29:FA:95:DD:29:C2:B0:DA:08:A3:5B:0D:44:4A:2D:CA:2E:45
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7D18F422395E472C7653B63773E86F2DC674E3DD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa
Signing time:             Mon 21 Apr 2025 04:08:19 +0000
ROA not before:           Mon 21 Apr 2025 04:03:19 +0000
ROA not after:            Mon 20 Apr 2026 04:08:19 +0000
asID:                     36530
IP address blocks:        67.210.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:18:f4:22:39:5e:47:2c:76:53:b6:37:73:e8:6f:2d:c6:74:e3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr 21 04:03:19 2025 GMT
            Not After : Apr 20 04:08:19 2026 GMT
        Subject: CN=913629FA95DD29C2B0DA08A35B0D444A2DCA2E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:ec:1f:3c:10:c5:a8:af:b4:77:fb:0b:05:
                    fa:34:8b:d5:f0:8e:51:11:3d:7c:5a:25:8b:bb:8c:
                    c6:f2:6d:14:19:4c:4f:60:c4:03:c7:bc:ad:c0:95:
                    1c:09:d4:83:ec:be:ae:54:6c:46:d2:1c:29:d9:61:
                    b4:f6:b7:b7:b3:88:20:3f:98:a2:51:f9:15:19:c3:
                    ec:0f:1d:22:be:22:e2:d8:5b:5b:f5:bf:87:40:55:
                    54:63:f1:12:2a:4d:c7:f9:37:c9:ae:b5:6b:85:b8:
                    1b:60:0e:1a:55:51:8f:67:78:33:6e:c7:d4:48:ea:
                    4c:67:d4:03:d6:6b:0c:53:f3:c7:a6:14:78:57:4e:
                    cc:99:58:ca:2a:c1:91:cf:bb:ca:91:38:80:c8:f3:
                    4a:7a:6f:85:9e:78:96:4c:aa:67:da:57:9d:97:26:
                    45:f1:cf:41:ad:50:a9:ee:0a:10:7e:61:d7:ec:f5:
                    b7:be:eb:50:78:9f:69:5e:2e:a8:c4:71:a9:5c:51:
                    42:ec:e2:62:f2:3b:4a:cc:74:2e:7b:72:02:bd:12:
                    56:be:56:5a:ad:9f:1a:e9:74:4c:18:35:30:92:9a:
                    27:1c:d5:b7:68:8a:a7:20:09:50:2e:e6:dd:52:d2:
                    52:0d:ed:b8:67:c0:20:2c:ca:f5:50:40:59:cc:18:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:36:29:FA:95:DD:29:C2:B0:DA:08:A3:5B:0D:44:4A:2D:CA:2E:45
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:eb:f6:4b:20:08:45:de:a7:d9:eb:4e:e9:a9:d5:6e:5d:ac:
         f8:52:d4:bb:57:c2:d3:e1:fc:02:d4:06:63:de:4a:a1:d0:28:
         00:28:81:c3:a9:b7:b2:18:fc:e1:2c:e9:dc:2a:33:e1:a9:6e:
         ae:8b:a9:fc:0e:07:60:db:25:2a:a5:ec:da:93:5a:99:fd:cc:
         93:5c:16:16:4f:0d:8a:7f:d4:1f:40:2a:3f:21:d3:36:c8:2f:
         c3:94:cc:c6:8b:ea:86:26:f7:db:7d:ad:f4:f3:f0:f5:13:c2:
         96:43:f3:86:1d:4a:94:4f:af:ba:bb:cf:96:79:61:ad:ad:e8:
         75:24:4e:24:c7:90:39:60:d8:95:45:6d:79:5f:18:be:30:2a:
         15:02:c0:2f:b6:a5:ca:23:c4:0d:a7:3c:e3:3b:9a:ef:ae:07:
         df:9a:bb:63:33:42:dd:6d:d0:15:c7:ff:76:1f:a7:b6:44:da:
         45:c8:0d:bd:9e:cc:4f:df:0e:01:b5:c4:98:aa:f3:05:9d:11:
         e7:20:74:41:8a:fd:3e:2b:86:87:d8:26:da:88:bf:c7:10:4c:
         f9:65:a3:3c:38:50:9f:82:5b:62:2b:e5:98:0e:c0:25:34:b1:
         4b:6e:e5:ea:40:76:1f:ee:4d:eb:7b:10:1f:66:6f:ee:aa:85:
         83:ba:33:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:33:08 2025 by rpki-client