Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230372e302f32342d3234203d3e203139343337.roa
File:                     36392e3136362e3230372e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          ONFX2E+J/nVBCIEU3ld7bSL4nVkuhs3qQ7HCNGp4L1Q=
Subject key identifier:   C6:79:52:FB:81:80:C7:B8:A9:45:30:CA:8D:01:91:0E:F4:DB:3F:61
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       74576A10864F7084BA866AD6E9BD48923D839197
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230372e302f32342d3234203d3e203139343337.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     19437
IP address blocks:        69.166.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 12:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:57:6a:10:86:4f:70:84:ba:86:6a:d6:e9:bd:48:92:3d:83:91:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=C67952FB8180C7B8A94530CA8D01910EF4DB3F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:bd:e1:08:28:57:62:18:a8:84:61:50:a2:
                    55:01:60:e2:6f:b0:e6:ea:35:ac:56:dc:12:2c:b7:
                    cf:ba:86:42:f8:45:17:a7:74:a8:e0:c8:ca:42:3b:
                    59:f5:1d:ba:17:9a:43:12:ee:2a:46:e4:2d:ca:7c:
                    dd:c9:40:01:13:03:4c:0d:15:cd:88:42:a7:a1:59:
                    be:32:4c:63:6b:2c:21:00:73:b5:9b:72:cf:3d:24:
                    4f:59:a3:b9:1f:c4:2e:37:e7:d3:ec:4c:be:36:8c:
                    77:ca:06:28:25:af:f2:3f:12:96:7d:ee:4c:39:7f:
                    82:dd:77:ca:84:18:dc:bc:5f:dd:19:98:55:5f:35:
                    3c:df:98:c8:73:7f:4c:d8:b4:de:d6:56:bd:a5:6e:
                    ae:4d:eb:7f:90:91:28:0e:0c:f4:d1:12:78:62:8b:
                    14:75:43:53:bb:1c:12:4a:7f:fd:7e:a5:71:cf:61:
                    dc:73:2a:c0:c0:26:a5:6a:db:aa:1c:77:6a:6f:32:
                    8d:73:dd:ed:43:63:02:5b:26:b9:c9:8c:1d:27:4f:
                    f9:b9:a8:1e:1f:f7:02:a4:1d:ac:c5:a8:a2:a8:fd:
                    e0:65:7b:e6:e0:16:d4:13:13:6e:b4:28:07:39:51:
                    ff:a3:54:5a:49:5e:23:80:05:82:78:53:ed:f0:f1:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:79:52:FB:81:80:C7:B8:A9:45:30:CA:8D:01:91:0E:F4:DB:3F:61
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230372e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:d6:6c:c5:22:bd:81:de:0f:07:f1:5f:7c:83:61:4c:f7:
         ca:10:d2:0c:9f:26:51:d2:3d:b0:36:42:fb:4d:32:37:52:08:
         fc:3e:84:67:44:6e:73:61:3d:cf:32:c7:80:3e:2f:b2:4e:5f:
         d6:aa:b9:2f:6e:82:00:d2:4d:2b:da:d2:51:b3:4a:13:54:03:
         99:d1:92:60:43:c6:ed:40:37:0f:d9:dc:27:be:d0:ec:ba:2a:
         80:99:9a:0f:4e:f0:58:c3:7d:0e:16:30:7f:6a:69:ea:cc:2f:
         dc:d2:ce:d6:43:da:f1:9a:b4:01:e1:51:35:0d:b2:24:ab:6e:
         55:58:78:f1:c6:54:4e:74:1a:73:0b:e9:44:29:70:5b:d6:34:
         0b:ef:4c:05:f7:74:94:fd:8b:9b:3d:57:28:ff:6f:79:e6:70:
         87:1e:9a:ec:5f:a5:2d:94:e1:5d:3e:47:42:f1:dd:51:1e:57:
         ae:6c:f6:1c:6d:d0:83:15:d5:2c:a9:cd:d5:fc:4f:01:46:30:
         65:89:f1:0b:fd:bd:04:e2:e2:8b:6c:91:f3:f5:18:bb:bd:82:
         24:12:eb:bd:5c:8a:b8:b6:04:88:be:30:f0:73:2f:f0:57:a9:
         b5:62:e9:af:a8:0f:ad:b7:6e:ad:51:b0:12:81:d2:2d:0b:d3:
         7d:51:97:a7
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUdFdqEIZPcIS6hmrW6b1Ikj2DkZcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjUwNTA1MTUyMzMyWhcNMjYwNTA0MTUyODMy
WjAzMTEwLwYDVQQDEyhDNjc5NTJGQjgxODBDN0I4QTk0NTMwQ0E4RDAxOTEwRUY0
REIzRjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt294QgoV2IY
qIRhUKJVAWDib7Dm6jWsVtwSLLfPuoZC+EUXp3So4MjKQjtZ9R26F5pDEu4qRuQt
ynzdyUABEwNMDRXNiEKnoVm+MkxjaywhAHO1m3LPPSRPWaO5H8QuN+fT7Ey+Nox3
ygYoJa/yPxKWfe5MOX+C3XfKhBjcvF/dGZhVXzU835jIc39M2LTe1la9pW6uTet/
kJEoDgz00RJ4YosUdUNTuxwSSn/9fqVxz2HccyrAwCalatuqHHdqbzKNc93tQ2MC
Wya5yYwdJ0/5uageH/cCpB2sxaiiqP3gZXvm4BbUExNutCgHOVH/o1RaSV4jgAWC
eFPt8PFNJQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMZ5UvuBgMe4qUUwyo0BkQ70
2z9hMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMDM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTM0MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEWmzzANBgkqhkiG9w0BAQsF
AAOCAQEAStzWbMUivYHeDwfxX3yDYUz3yhDSDJ8mUdI9sDZC+00yN1II/D6EZ0Ru
c2E9zzLHgD4vsk5f1qq5L26CANJNK9rSUbNKE1QDmdGSYEPG7UA3D9ncJ77Q7Loq
gJmaD07wWMN9DhYwf2pp6swv3NLO1kPa8Zq0AeFRNQ2yJKtuVVh48cZUTnQacwvp
RClwW9Y0C+9MBfd0lP2Lmz1XKP9veeZwhx6a7F+lLZThXT5HQvHdUR5Xrmz2HG3Q
gxXVLKnN1fxPAUYwZYnxC/29BOLii2yR8/UYu72CJBLrvVyKuLYEiL4w8HMv8Fep
tWLpr6gPrbdurVGwEoHSLQvTfVGXpw==
-----END CERTIFICATE-----
Generated at Sat May 10 04:43:08 2025 by rpki-client