Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343031393337.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e20343031393337.roa (raw, json)
Hash identifier:          TcjnJ4pUyXRemKzku1SvTOLixx+i4GLPfsRCP3jED7A=
Subject key identifier:   04:D3:FC:B6:B8:F3:B7:74:DC:0C:73:21:21:3E:F8:30:16:25:78:BB
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       390A4D1E5DBC2DE772205BA770DB2872AE55A4B8
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343031393337.roa
Signing time:             Sun 19 Oct 2025 10:22:48 +0000
ROA not before:           Sun 19 Oct 2025 10:17:48 +0000
ROA not after:            Sun 18 Oct 2026 10:22:48 +0000
asID:                     401937
IP address blocks:        69.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0a:4d:1e:5d:bc:2d:e7:72:20:5b:a7:70:db:28:72:ae:55:a4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 19 10:17:48 2025 GMT
            Not After : Oct 18 10:22:48 2026 GMT
        Subject: CN=04D3FCB6B8F3B774DC0C7321213EF830162578BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ba:69:a8:31:79:b1:12:e9:bb:82:fd:6d:88:
                    d1:4a:ff:ab:9f:93:57:ef:a2:d2:9b:72:04:31:c2:
                    ed:60:03:8c:7a:0d:4b:25:ce:27:32:65:27:16:76:
                    d1:1c:64:16:e0:af:d7:28:dd:41:25:09:ec:ae:54:
                    b2:32:2b:90:4d:17:cf:89:23:bd:af:90:c0:1c:16:
                    b7:47:cd:b3:a7:a9:03:04:a1:29:be:9b:de:f8:03:
                    ae:2b:b8:8d:27:c1:0d:df:54:d7:e8:0d:e6:fa:fb:
                    c9:2e:6d:b2:9e:5c:f4:c5:4b:94:17:7f:22:a2:b3:
                    70:aa:4c:a6:c1:c5:d8:fc:a8:b1:d9:77:e8:c5:35:
                    09:08:a5:b9:a9:6d:64:2b:e3:26:ac:7a:5b:25:ea:
                    6d:d3:31:9e:9d:90:d3:6d:46:c2:3a:dc:38:7f:f1:
                    47:72:7b:a4:a7:ac:42:f3:b4:d1:f6:72:1a:ba:e3:
                    96:81:61:e8:72:4c:b6:6c:26:db:94:ce:1b:7f:07:
                    6f:0c:c6:48:ce:f0:89:69:59:43:fc:0a:4c:1a:d7:
                    9c:e3:9b:c8:14:f0:db:e5:a9:3c:08:02:26:e7:4c:
                    32:93:b7:a4:05:fd:80:ce:d2:73:a9:8c:83:72:b8:
                    eb:30:d0:12:bb:39:34:b4:1c:33:b1:bc:77:a0:69:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:FC:B6:B8:F3:B7:74:DC:0C:73:21:21:3E:F8:30:16:25:78:BB
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343031393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:43:20:31:c2:07:4c:ff:f6:c3:8a:40:a1:11:4f:6d:eb:8a:
         a8:0f:53:a9:6c:8b:ae:d3:ca:49:ae:e1:f9:4d:4c:6b:cf:2b:
         1e:0a:e5:9f:31:12:22:c8:8a:09:51:52:fa:5f:06:06:d7:15:
         5b:af:15:c9:a4:c7:24:cf:ac:f5:9e:5c:2b:7c:2f:86:b4:5e:
         e8:df:d2:98:74:45:2d:bb:44:94:31:ee:99:4a:41:7c:ce:c7:
         a0:47:d3:be:ed:89:f6:42:97:07:bc:63:c5:71:1e:52:a7:d2:
         6c:7f:d1:27:77:67:47:b3:41:df:6c:ef:7a:08:bd:67:5c:13:
         91:87:67:c6:9f:6f:bd:ac:79:c6:cc:9c:11:97:ff:03:92:51:
         ed:77:63:95:42:5c:09:a7:79:da:2e:63:97:cf:04:42:19:d9:
         ac:43:04:f3:c5:c4:54:fe:f4:77:55:d1:76:b5:71:13:3b:bb:
         b7:66:fb:98:dc:38:9c:4b:81:fe:92:05:da:e0:98:f4:9b:7d:
         82:64:18:f1:90:5b:bc:01:67:e3:35:f6:7e:87:1c:bf:cc:28:
         4b:22:3c:f6:21:2e:12:ab:a4:ab:b2:8d:1d:2d:d2:66:db:60:
         6e:5e:5f:06:f8:7c:cf:e8:94:a9:21:9c:3f:12:80:bc:74:40:
         7f:24:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:40:55 2025 by rpki-client