Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323135333034.roa
File:                     36392e3136362e3232352e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier:          TgQXAhaubA5jb4y8UmyMu9Vask8Zi0McLOZJH3hY0q4=
Subject key identifier:   32:74:EA:A9:EF:14:C9:B8:D6:27:B6:A7:0E:2F:05:32:5F:A7:E6:67
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       250144D0B635F14CF01EEC58114E9C7EF233C1B5
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323135333034.roa
Signing time:             Wed 18 Jun 2025 07:41:56 +0000
ROA not before:           Wed 18 Jun 2025 07:36:56 +0000
ROA not after:            Wed 17 Jun 2026 07:41:56 +0000
asID:                     215304
IP address blocks:        69.166.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:01:44:d0:b6:35:f1:4c:f0:1e:ec:58:11:4e:9c:7e:f2:33:c1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 18 07:36:56 2025 GMT
            Not After : Jun 17 07:41:56 2026 GMT
        Subject: CN=3274EAA9EF14C9B8D627B6A70E2F05325FA7E667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:68:33:30:e6:c6:78:ca:f1:ad:8e:64:11:
                    d7:bf:9d:19:56:e1:33:47:88:46:42:b6:da:82:23:
                    af:dc:e8:bb:71:c3:cb:03:3c:72:a1:ed:46:72:f1:
                    6e:58:d7:85:a8:a0:a4:e9:b0:7e:f8:e0:ba:76:b0:
                    0a:07:5e:29:75:06:ad:ed:23:14:0e:f3:71:29:4c:
                    b6:9f:fe:0f:0b:55:1b:2b:38:06:54:4f:2e:c7:a4:
                    e6:9a:37:c0:30:7b:f9:08:7a:6a:63:4e:11:7a:f7:
                    3c:92:7d:72:19:15:0f:d1:e0:b8:2a:e4:83:59:bf:
                    81:12:13:f2:86:ec:0c:b6:24:cb:37:5f:e4:1e:60:
                    70:1b:f5:09:92:5d:cc:e0:8d:e3:2e:7a:b6:cc:1e:
                    57:2d:87:98:89:64:a6:f6:be:38:c1:c6:38:4d:76:
                    60:0d:99:71:78:a9:80:cb:98:21:ff:56:d8:c5:6d:
                    58:06:2f:90:cc:0d:8c:85:5d:8f:ff:04:98:8c:54:
                    14:8a:09:b5:ff:84:07:27:bf:21:2b:96:16:45:14:
                    94:49:f1:56:0d:7e:8d:ed:f2:6c:f8:0f:b9:24:09:
                    25:a0:dd:98:d3:e4:ff:15:11:c1:bc:7e:b4:04:b1:
                    f1:5b:6b:95:5c:03:65:9e:7a:af:42:dd:87:08:cf:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:74:EA:A9:EF:14:C9:B8:D6:27:B6:A7:0E:2F:05:32:5F:A7:E6:67
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e20323135333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:9f:ed:f3:27:26:9e:91:4c:e5:67:9c:a1:84:8d:b6:1b:
         73:ef:7b:82:1a:50:1a:54:b3:97:3d:07:d6:1b:fc:e3:3a:88:
         88:07:b2:32:80:e7:7f:05:65:87:ad:6a:77:53:f0:89:c1:64:
         3a:d6:1f:4c:9a:ca:d8:ca:87:7d:fb:9e:9b:50:44:c6:86:39:
         a4:29:44:60:db:6e:73:43:f7:f3:b9:f3:32:94:e9:0f:9b:ed:
         93:03:0f:19:95:1b:d3:48:0f:03:fa:fd:ee:f6:42:53:8e:9e:
         6e:86:a5:a2:fd:e0:51:33:1c:69:ad:27:df:b8:8e:1c:47:0c:
         bc:60:16:aa:8e:f0:fd:d3:c8:f4:b8:e7:92:32:d1:1e:68:85:
         ee:dc:b5:54:fe:a8:6f:47:1b:8f:b5:0b:7e:55:0e:c3:81:e0:
         dc:f2:e0:d6:2f:8e:af:ef:f6:3a:f7:57:d4:a0:88:c2:c8:4c:
         a3:79:65:4b:ca:ec:1b:2f:f7:ad:44:d5:f7:e7:30:01:47:38:
         7a:cd:4c:7a:a7:35:80:e1:70:8f:a6:38:bb:91:6d:64:84:fd:
         54:c2:52:a4:26:77:17:b2:fe:9b:8b:27:37:73:5c:c5:5e:01:
         55:14:e4:7f:c3:fc:86:d3:8e:be:8e:cf:70:82:a8:07:47:8b:
         45:fa:bc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:36:44 2025 by rpki-client