Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          jg4eex6S/EqRRFvmo4UNxeESnFevNCEFEJHU5LAiBEY=
Subject key identifier:   50:6C:CF:7F:9E:E5:82:05:D5:9A:35:34:5A:8C:66:F6:7E:70:C2:94
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       59D4E1D09A08D7164A0ECE2EFEFB181507D17D25
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 12 Jul 2025 06:34:14 +0000
ROA not before:           Sat 12 Jul 2025 06:29:14 +0000
ROA not after:            Sat 11 Jul 2026 06:34:14 +0000
asID:                     17139
IP address blocks:        66.117.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d4:e1:d0:9a:08:d7:16:4a:0e:ce:2e:fe:fb:18:15:07:d1:7d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul 12 06:29:14 2025 GMT
            Not After : Jul 11 06:34:14 2026 GMT
        Subject: CN=506CCF7F9EE58205D59A35345A8C66F67E70C294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:ce:7e:70:d0:f9:0d:cf:6f:b1:85:5f:f2:
                    0e:6d:d3:7e:e2:27:78:a2:28:1d:42:f8:ea:9b:71:
                    d4:a1:d0:c1:3c:1f:c8:14:5b:fd:f6:03:8d:0e:79:
                    30:03:c7:fa:fb:b2:c7:1b:8b:46:ce:c2:73:3c:ae:
                    07:4c:8a:99:2f:f1:8b:a4:97:cd:b7:0f:fc:c2:e4:
                    39:66:f4:23:1a:57:aa:2a:75:f2:97:e2:70:4c:6e:
                    a6:65:49:75:45:5a:d6:88:a5:4e:8d:2b:d3:8f:a0:
                    4d:84:e1:31:90:ee:9b:7d:3e:1d:6a:ba:a8:74:e4:
                    6e:59:f2:b5:93:d9:8b:90:4a:19:8d:ab:f5:fe:0e:
                    f1:bc:98:b7:1e:21:bd:7e:58:95:f1:52:a6:a8:da:
                    7d:c0:e6:d9:77:35:a3:10:96:b9:76:02:39:64:79:
                    bd:6c:0c:ea:75:a2:de:e2:4b:d9:cd:de:1a:a1:2f:
                    1c:d1:16:f5:4b:91:f6:0b:a8:8b:52:85:de:c6:0e:
                    f6:9a:9b:6a:9a:64:3a:d6:a4:ee:02:39:d8:f4:b0:
                    c8:71:1c:33:c9:d5:57:ec:5f:7e:71:f8:0a:46:c2:
                    bf:3f:72:a2:4e:98:17:9a:e6:1d:e6:7e:3e:f9:d3:
                    02:64:7c:52:ba:a0:25:ec:c3:8d:9d:7e:db:3f:f2:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6C:CF:7F:9E:E5:82:05:D5:9A:35:34:5A:8C:66:F6:7E:70:C2:94
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:76:37:c4:a7:8c:02:a9:48:f5:f8:1d:b0:73:70:7b:0a:
         fe:cd:a4:fc:3a:02:64:62:14:af:78:26:c2:d9:3a:3e:71:f2:
         03:24:df:a2:18:6d:e8:23:92:c3:27:ba:21:2f:8d:d0:05:dd:
         c8:bb:11:fe:01:b8:51:e4:c4:94:9b:27:b3:7c:95:bb:b1:8f:
         83:5e:78:01:46:f0:f4:0a:90:7a:16:10:c1:7a:09:75:c1:c9:
         1a:02:05:3f:d4:8e:52:49:17:b7:c4:04:ef:c5:eb:88:89:a4:
         89:6c:c0:35:67:9a:b5:9c:bc:79:7f:c1:84:58:7d:32:f0:80:
         ff:24:cf:13:61:f5:b2:d1:28:ad:12:dd:78:4f:d1:d3:9a:0f:
         f0:09:0d:37:44:fb:ed:4c:35:39:d0:e1:ee:3a:ce:d5:6d:d5:
         38:3c:b1:ae:bf:a8:36:3d:41:40:a1:1b:e7:7f:28:ac:71:d9:
         fa:ff:65:8b:90:96:9b:bc:ee:88:f4:cb:e5:36:fe:fe:6a:fa:
         b7:13:86:85:41:92:12:92:aa:c2:6c:09:c9:5c:31:69:2b:7f:
         61:6c:73:84:34:c7:38:9e:c5:15:db:fc:9b:ad:8f:33:c1:90:
         af:49:35:8e:5f:fe:21:20:e6:57:42:45:ae:2d:73:9e:fb:7b:
         b7:29:65:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:27:46 2025 by rpki-client