Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343031383338.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          jc4L55vcFHdBEKSM5Qi/TMaFf9vriDgzPdz0QR5JBzg=
Subject key identifier:   D4:42:85:97:0E:DA:0C:74:2B:CD:A3:CE:FF:76:D1:86:6C:21:3C:46
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       7A9EA309EC863ABB3A931C5A735B4AD53CF590BC
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:14:25 +0000
ROA not before:           Wed 13 Aug 2025 05:09:25 +0000
ROA not after:            Wed 12 Aug 2026 05:14:25 +0000
asID:                     401838
IP address blocks:        69.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:9e:a3:09:ec:86:3a:bb:3a:93:1c:5a:73:5b:4a:d5:3c:f5:90:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Aug 13 05:09:25 2025 GMT
            Not After : Aug 12 05:14:25 2026 GMT
        Subject: CN=D44285970EDA0C742BCDA3CEFF76D1866C213C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6f:b4:96:93:47:1e:60:47:63:1f:a6:05:2a:
                    24:e6:aa:4e:67:60:75:f4:cb:51:36:57:e6:3a:fc:
                    ce:9d:de:ea:cb:d6:44:d7:79:4f:8e:ec:e5:0f:09:
                    70:ef:91:67:cf:ba:9c:23:5e:d1:2c:3f:94:45:4c:
                    8a:18:78:fa:21:37:ea:6a:15:a5:c2:94:49:5e:f8:
                    a8:2f:8e:5d:f5:81:8b:6a:70:f4:71:dd:ee:7d:bc:
                    3f:76:c6:45:b0:5d:cb:fe:db:5f:9a:70:25:ac:91:
                    56:60:16:04:83:0b:11:c8:6a:7b:8b:82:17:d2:f3:
                    de:85:d6:0a:a3:5f:c7:69:17:2c:96:4b:a7:e0:67:
                    28:28:e4:80:10:22:40:f0:d0:19:3b:71:a9:fc:eb:
                    3a:fc:36:6f:f7:ac:ec:7d:f8:d6:b6:70:a9:9d:4f:
                    c4:42:e1:1e:d9:b6:f2:67:d4:a5:98:4d:17:cc:55:
                    3f:33:ae:02:50:36:ea:43:1e:9b:cd:15:34:de:87:
                    3d:b9:1a:48:d3:fa:c0:3f:73:df:72:0a:fb:d1:0b:
                    10:32:b9:f3:da:73:cc:f1:9b:93:5b:f3:4d:43:bd:
                    be:52:62:db:2b:0b:b0:cf:9d:31:4a:7e:d6:19:ac:
                    83:9f:1c:b5:a3:d0:e1:da:64:38:d4:4b:fc:9b:98:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:42:85:97:0E:DA:0C:74:2B:CD:A3:CE:FF:76:D1:86:6C:21:3C:46
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:47:10:08:44:ce:29:cf:ea:98:01:0d:1e:85:52:bf:69:35:
         80:fd:05:bf:8d:69:05:b2:42:fc:41:1d:b4:cc:a6:84:5a:71:
         ea:23:86:76:59:ac:2e:e0:9b:aa:0d:46:f2:56:a7:9f:80:61:
         32:e7:54:1f:11:4a:d9:1a:b7:e2:be:0f:8b:50:97:31:72:2d:
         11:93:4b:33:75:60:92:24:c0:f3:a4:43:23:03:4c:12:ef:7f:
         24:2d:b0:a5:09:ca:2a:60:b6:ee:bd:a0:a9:4a:eb:14:88:3a:
         9f:86:f7:fb:5c:31:a4:82:e7:6a:b5:48:29:da:b2:55:16:30:
         83:a9:fb:6e:b3:80:25:37:f2:4f:9d:00:fb:63:22:4e:b5:09:
         98:52:9f:e9:dc:9d:ae:2a:e3:29:16:40:9f:93:6c:41:bf:e4:
         57:6c:b1:d1:01:7e:da:8a:2c:68:de:f3:a7:02:87:1d:89:0f:
         7b:92:0b:14:73:7a:1a:c9:58:85:05:4e:6b:90:cc:67:93:b1:
         11:54:3c:5e:d9:59:e1:7e:da:4a:87:35:7b:02:1d:30:a2:3e:
         37:be:16:e3:1a:54:6e:c3:26:ca:9d:f7:e2:91:bc:7f:15:71:
         5e:08:94:18:d0:5b:a1:db:a4:34:79:60:73:31:5f:4a:0d:cb:
         55:f3:37:fe
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUep6jCeyGOrs6kxxac1tK1Tz1kLwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjUwODEzMDUwOTI1WhcNMjYwODEyMDUxNDI1
WjAzMTEwLwYDVQQDEyhENDQyODU5NzBFREEwQzc0MkJDREEzQ0VGRjc2RDE4NjZD
MjEzQzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG+0lpNHHmBH
Yx+mBSok5qpOZ2B19MtRNlfmOvzOnd7qy9ZE13lPjuzlDwlw75Fnz7qcI17RLD+U
RUyKGHj6ITfqahWlwpRJXvioL45d9YGLanD0cd3ufbw/dsZFsF3L/ttfmnAlrJFW
YBYEgwsRyGp7i4IX0vPehdYKo1/HaRcslkun4GcoKOSAECJA8NAZO3Gp/Os6/DZv
96zsffjWtnCpnU/EQuEe2bbyZ9SlmE0XzFU/M64CUDbqQx6bzRU03oc9uRpI0/rA
P3Pfcgr70QsQMrnz2nPM8ZuTW/NNQ72+UmLbKwuwz50xSn7WGayDnxy1o9Dh2mQ4
1Ev8m5g+BwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNRChZcO2gx0K82jzv920YZs
ITxGMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMDM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzgzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARabNMA0GCSqGSIb3DQEB
CwUAA4IBAQAZRxAIRM4pz+qYAQ0ehVK/aTWA/QW/jWkFskL8QR20zKaEWnHqI4Z2
Wawu4JuqDUbyVqefgGEy51QfEUrZGrfivg+LUJcxci0Rk0szdWCSJMDzpEMjA0wS
738kLbClCcoqYLbuvaCpSusUiDqfhvf7XDGkgudqtUgp2rJVFjCDqftus4AlN/JP
nQD7YyJOtQmYUp/p3J2uKuMpFkCfk2xBv+RXbLHRAX7aiixo3vOnAocdiQ97kgsU
c3oayViFBU5rkMxnk7ERVDxe2VnhftpKhzV7Ah0woj43vhbjGlRuwybKnffikbx/
FXFeCJQY0Fuh26Q0eWBzMV9KDctV8zf+
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:15 2025 by rpki-client