Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32332d3233203d3e203137313339.roa
File:                     36362e3131372e362e302f32332d3233203d3e203137313339.roa (raw, json)
Hash identifier:          yPr65PmJFLCYsZkwD/K6o4n2TiZ8jysIhpSdDnvEfJU=
Subject key identifier:   54:C0:C0:74:1A:E3:77:DC:06:0F:D7:6F:CB:DF:89:4D:A3:74:3D:E1
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       6B08C90250F00E82BE3839396F4E53F8D9F8DFF1
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32332d3233203d3e203137313339.roa
Signing time:             Fri 13 Jun 2025 23:40:13 +0000
ROA not before:           Fri 13 Jun 2025 23:35:13 +0000
ROA not after:            Fri 12 Jun 2026 23:40:13 +0000
asID:                     17139
IP address blocks:        66.117.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:08:c9:02:50:f0:0e:82:be:38:39:39:6f:4e:53:f8:d9:f8:df:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jun 13 23:35:13 2025 GMT
            Not After : Jun 12 23:40:13 2026 GMT
        Subject: CN=54C0C0741AE377DC060FD76FCBDF894DA3743DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:89:96:f2:3e:f0:69:34:2c:04:06:2c:85:39:
                    f1:17:a7:1e:fa:22:6b:6a:9a:19:c3:69:e0:65:c1:
                    b3:59:15:3b:18:eb:95:ac:3a:c4:b0:02:06:d1:c4:
                    9d:72:0e:ca:2a:41:9f:cb:3d:ef:82:96:8a:db:e6:
                    8e:d0:f6:2a:ec:82:e5:7c:09:9b:71:98:bf:f7:18:
                    82:54:65:c9:6c:60:db:b7:2e:d1:f2:be:c2:94:2d:
                    b8:54:69:fc:a7:a1:bf:71:08:82:07:25:5a:28:68:
                    dc:33:02:0c:e0:dc:85:19:f5:d0:83:41:d8:ea:7b:
                    9c:93:17:8c:18:b2:05:b4:6c:5d:38:99:4f:9a:c6:
                    a7:9b:fe:bc:8b:6c:62:4b:a2:9d:eb:a1:4a:d6:28:
                    29:0a:f5:91:f1:59:d3:fd:e6:18:16:b9:47:75:6d:
                    b4:4e:62:63:52:eb:c6:ac:2b:49:04:76:e0:e3:be:
                    e7:e0:70:e8:78:b0:41:c6:0b:93:84:3c:7e:b4:2c:
                    4c:44:fe:92:85:29:7b:09:b0:74:8b:0f:c5:c7:c8:
                    4b:91:6e:6c:2f:4b:3b:34:3c:a8:44:97:62:b4:a7:
                    48:76:d2:c6:eb:af:29:7c:e3:e0:1c:db:62:00:f6:
                    20:b8:80:c2:81:a5:90:06:fd:aa:f1:13:b5:7d:b2:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C0:C0:74:1A:E3:77:DC:06:0F:D7:6F:CB:DF:89:4D:A3:74:3D:E1
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32332d3233203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:94:01:7a:ef:1f:63:af:7c:c9:78:6d:63:4b:2e:4f:7a:
         13:2d:f7:6b:81:93:1d:1b:3f:1a:3b:23:17:6d:6d:db:df:1b:
         87:a2:d9:da:65:2f:ff:1b:be:0d:be:9f:29:de:48:3e:b8:a1:
         37:16:0a:c6:e9:7f:83:d0:60:d0:f6:e8:e3:fe:25:51:83:97:
         9f:16:d2:9f:9c:ca:ed:5c:13:f0:d0:0d:80:e9:8d:e3:bf:1d:
         d7:a7:43:ed:7a:b6:b4:4b:72:63:d3:56:62:b0:f1:53:e3:dd:
         d5:50:81:98:ab:16:9e:03:ff:b4:52:96:69:b6:37:26:04:ef:
         21:4c:d0:8f:96:55:43:7c:ea:7b:54:30:0a:f4:72:54:59:0b:
         f1:72:b1:df:9c:04:4a:a5:bc:73:f8:39:4c:6e:8d:d3:5e:fb:
         cd:5e:57:89:cb:c6:2c:4c:24:b9:14:61:f1:04:9f:6b:5a:53:
         c5:d5:c1:e7:a4:b7:4e:ef:57:05:20:40:4c:18:9d:85:c4:21:
         04:62:74:d8:da:ae:ab:73:84:39:4e:b9:18:94:59:14:33:5f:
         ef:d2:2e:f9:8b:9a:c1:f2:e2:49:88:10:3d:89:e9:8d:7f:2f:
         74:e1:68:ef:16:12:70:6c:10:6a:71:c2:b3:1f:6f:7e:98:76:
         d1:37:6c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:37 2025 by rpki-client