Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          2sy9XcVhOjlOt4OxGze/eUTlv/xEoxMQ8dlwLrpL3Z8=
Subject key identifier:   4D:F1:A9:F3:4E:45:0A:A7:EB:A8:27:FB:40:42:DE:39:99:6C:D0:8C
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       2FF42678C8A6FFA18929761243E5BE089AC46DDC
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        66.117.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f4:26:78:c8:a6:ff:a1:89:29:76:12:43:e5:be:08:9a:c4:6d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=4DF1A9F34E450AA7EBA827FB4042DE39996CD08C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fd:f7:67:27:73:b6:c6:b4:80:23:1c:d6:ea:
                    63:eb:d6:96:4f:12:ba:55:45:0f:3d:26:44:11:02:
                    f9:86:5d:b1:89:30:ca:21:82:48:eb:38:54:b3:fb:
                    e5:96:11:5d:3e:ad:a0:c7:71:43:68:0f:a0:78:b4:
                    e6:a5:e9:64:45:75:87:7a:d4:3f:9f:9b:87:d1:90:
                    d6:b7:f9:e0:71:51:93:d3:0a:a7:bb:c9:68:71:58:
                    a6:93:5e:a0:82:62:a9:42:64:4b:4f:5d:04:c0:72:
                    f3:82:ae:1c:5b:87:57:70:b4:d9:df:df:5f:c0:a5:
                    92:88:55:fe:a9:2c:62:de:4a:34:37:bb:26:23:10:
                    9d:27:f2:a8:22:51:d9:d0:f5:e6:cf:7a:57:5e:a3:
                    60:72:94:ca:64:82:97:7d:85:9a:b3:26:33:0c:d7:
                    cf:4f:69:2c:21:53:fb:1b:8e:31:fd:a2:7d:71:25:
                    65:71:34:cf:87:ab:ed:5e:e4:3a:e7:79:55:0f:9b:
                    ba:61:ed:a5:4a:ea:c0:98:db:64:99:fb:b7:f1:35:
                    a3:ab:45:d0:3f:37:1b:7e:ce:8c:80:79:06:78:1d:
                    42:f6:de:53:8e:4a:52:01:26:d7:dc:c6:ed:b2:52:
                    f4:4e:fd:34:1f:50:97:17:b5:83:0d:74:76:59:40:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F1:A9:F3:4E:45:0A:A7:EB:A8:27:FB:40:42:DE:39:99:6C:D0:8C
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:7e:46:e5:01:e9:41:bc:0b:b1:d4:70:a4:38:01:96:09:
         d2:8b:20:ab:f2:c9:96:c2:8a:f8:82:5d:d0:77:4c:82:e3:54:
         cd:b8:2d:ad:33:50:a1:f1:94:5d:49:fd:a0:a5:db:4e:e1:78:
         fb:05:d3:d9:8f:99:73:1b:58:d4:96:bc:65:2d:c8:51:b7:da:
         5b:34:96:75:9d:c3:9c:26:96:d8:2e:49:32:8b:cf:c1:ec:a3:
         33:d6:ee:51:24:2a:75:2b:7c:6b:32:22:56:c2:98:d9:3d:2a:
         73:dd:eb:7f:7c:e5:8d:13:a8:13:0a:c5:60:86:df:62:0c:17:
         ff:15:a6:81:b9:43:64:7e:b7:a2:79:c7:e6:c1:57:71:a5:7e:
         80:6b:4c:f8:ec:d0:95:89:46:40:6b:48:27:b6:62:c3:25:48:
         ab:7c:5b:4f:7a:f0:96:c0:58:06:d2:ac:36:4f:a6:14:d9:b4:
         f5:ed:25:0d:8f:84:1a:30:43:56:89:da:99:87:64:f4:73:81:
         74:27:7c:48:a8:03:7a:12:a0:0a:b5:ad:a5:31:ca:5c:ca:5b:
         4c:09:41:5a:12:b8:2f:53:f9:e2:4c:b1:0d:6d:0a:9d:e4:36:
         47:1a:d6:a1:13:b8:f6:03:89:88:4e:84:76:71:85:26:11:92:
         f1:a2:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:30:17 2025 by rpki-client