Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31352e302f32342d3234203d3e203131333538.roa
File:                     36342e34392e31352e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier:          +quGMtF2YY6XN0aGxPHJ+76xY6Nyr4Up/e6j04s6tlE=
Subject key identifier:   30:07:6D:45:5F:73:7E:32:0A:17:7C:01:D8:9A:E8:29:8B:56:F6:71
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       6F1ED3586FAE37C69DDD95AE73FE4CD5EEA44301
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31352e302f32342d3234203d3e203131333538.roa
Signing time:             Mon 09 Jun 2025 22:33:22 +0000
ROA not before:           Mon 09 Jun 2025 22:28:22 +0000
ROA not after:            Mon 08 Jun 2026 22:33:22 +0000
asID:                     11358
IP address blocks:        64.49.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:1e:d3:58:6f:ae:37:c6:9d:dd:95:ae:73:fe:4c:d5:ee:a4:43:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun  9 22:28:22 2025 GMT
            Not After : Jun  8 22:33:22 2026 GMT
        Subject: CN=30076D455F737E320A177C01D89AE8298B56F671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:20:0e:0d:58:9d:4a:8f:73:fe:eb:5a:27:54:
                    b6:7b:b5:ca:88:44:ab:d2:ec:f7:9f:91:00:65:a6:
                    3f:3c:20:6c:7f:16:27:af:9a:29:29:9c:09:63:11:
                    13:08:09:4c:1f:01:32:fe:aa:08:03:a5:6b:f4:95:
                    82:94:e9:82:46:85:e9:3c:30:2e:ae:fe:7b:6e:de:
                    42:c5:cf:ea:df:e8:f5:f8:15:13:dd:a0:7b:c0:f5:
                    ea:1a:91:94:a0:b5:da:1c:ea:17:f1:e9:c0:18:7b:
                    ff:34:31:88:cc:b3:75:11:3f:a4:17:92:04:c5:d4:
                    f5:7c:5b:7d:c6:40:df:dd:68:5b:75:f5:f0:ed:0d:
                    1c:20:12:0d:c8:78:89:c9:96:05:0e:c4:91:5c:2a:
                    0e:67:5a:4c:db:16:5f:17:b7:ab:57:26:31:90:47:
                    78:a0:3a:d8:42:2b:6b:e5:50:3b:cb:83:15:1f:e4:
                    83:2d:9d:6c:df:8e:1a:30:9e:ba:99:5b:36:70:b1:
                    7e:94:d0:7a:91:0f:81:10:cc:ae:92:a8:ba:5f:af:
                    a1:a5:a9:d9:f6:2d:c4:d5:ea:28:c1:ff:a5:50:2d:
                    02:e9:18:34:7d:36:fb:d6:36:c9:16:e3:df:0e:dd:
                    df:88:1e:83:e5:ae:a9:5f:fe:46:f6:cd:17:6a:38:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:6D:45:5F:73:7E:32:0A:17:7C:01:D8:9A:E8:29:8B:56:F6:71
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31352e302f32342d3234203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:bd:12:ca:24:9d:1d:05:64:96:1f:36:12:93:e5:ba:84:0b:
         11:fc:0d:f4:8d:97:24:5c:b1:c4:4f:ba:07:c5:3b:ac:3f:e2:
         6f:6d:d7:b1:21:7d:14:f7:fa:1e:52:92:13:51:78:a3:c6:cf:
         77:8c:de:7e:58:5a:2d:61:51:6a:9a:46:2f:71:84:63:0b:94:
         0e:8a:56:12:43:09:36:66:a5:61:3d:e3:dc:ce:83:8c:fa:8b:
         cf:08:79:35:8c:08:4c:64:30:a1:4f:af:b3:c3:02:a6:36:70:
         9e:e5:ec:06:c4:82:5c:d5:81:e7:4b:73:80:72:f2:2c:a2:de:
         14:b2:1a:be:c0:02:e2:40:9c:b4:06:25:61:8b:ee:a4:99:c8:
         88:07:23:4c:7f:ed:ac:74:eb:a1:b5:79:4f:6b:29:a8:9c:ef:
         ad:78:cf:ed:5f:a6:85:ba:99:65:a8:02:f5:8f:65:66:33:35:
         37:61:8c:d4:b6:4f:7c:48:aa:b0:b8:b2:85:d7:53:b5:d1:09:
         5b:b1:35:f0:6b:bb:80:f1:e9:0a:69:0c:b1:72:94:9d:6b:8e:
         7f:9b:7b:a2:17:36:b7:5e:6c:5c:ea:84:1a:45:a4:e4:24:22:
         b5:29:91:48:b9:d5:39:86:f3:ec:91:7b:d1:44:3d:2a:9f:d5:
         38:ea:6d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:30:44 2025 by rpki-client