Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e203336353330.roa
File:                     36392e3136362e3232352e302f32342d3234203d3e203336353330.roa (raw, json)
Hash identifier:          tpEDO1LsvrwgF7mcLnW8tdLJa4zoir4nTqetT0nbWxE=
Subject key identifier:   6A:D0:C1:03:D1:A3:DC:08:00:F0:D5:EC:FB:5A:7C:A6:B4:B1:28:5B
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       3F439991C30B65747397BF8978AC63EDB5E7BA08
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e203336353330.roa
Signing time:             Wed 18 Jun 2025 07:41:56 +0000
ROA not before:           Wed 18 Jun 2025 07:36:56 +0000
ROA not after:            Wed 17 Jun 2026 07:41:56 +0000
asID:                     36530
IP address blocks:        69.166.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:44:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:43:99:91:c3:0b:65:74:73:97:bf:89:78:ac:63:ed:b5:e7:ba:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 18 07:36:56 2025 GMT
            Not After : Jun 17 07:41:56 2026 GMT
        Subject: CN=6AD0C103D1A3DC0800F0D5ECFB5A7CA6B4B1285B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:55:89:fc:24:f6:65:3d:63:04:a7:ff:cd:
                    44:88:5d:99:0d:80:72:22:36:6c:6d:3f:5e:6b:53:
                    b3:50:43:72:a8:4a:a7:50:f3:44:2d:75:b3:c3:bb:
                    e5:a8:65:c0:7b:62:a0:64:0a:75:04:fd:4d:c1:91:
                    86:27:a0:97:d9:bd:df:9a:db:c9:57:35:fa:bf:5b:
                    9a:31:ae:35:bf:56:a0:74:de:3d:43:f4:d4:fd:87:
                    b7:64:3c:dc:ed:28:5b:31:a6:7d:0c:e3:9b:5c:ef:
                    01:b2:d6:1a:85:e8:bf:72:39:a4:fd:44:ae:9a:fd:
                    31:d5:32:e4:c9:13:99:4e:e6:35:62:8e:f5:32:65:
                    b8:ce:53:d3:bb:d9:8b:72:46:85:48:ef:d3:f1:80:
                    56:c8:44:47:97:61:72:74:68:07:5c:28:c9:8e:cc:
                    36:6e:ea:79:c5:2a:85:be:38:82:83:6d:90:f6:59:
                    7c:7a:c0:af:fd:fc:f1:2a:26:0f:a1:17:7e:9f:c7:
                    49:ea:13:3c:46:d9:ee:a7:e5:1c:40:8a:4b:e4:19:
                    7b:f5:7a:af:3e:7a:19:dc:3e:b4:e9:9e:09:d5:2c:
                    f3:55:67:39:c0:0c:37:84:0e:d8:52:64:0b:5c:2a:
                    aa:db:9b:10:e3:c2:15:2c:06:cc:52:23:ae:89:0d:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D0:C1:03:D1:A3:DC:08:00:F0:D5:EC:FB:5A:7C:A6:B4:B1:28:5B
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232352e302f32342d3234203d3e203336353330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:28:e6:dc:39:8a:3d:a7:82:70:1b:62:9e:ab:86:75:9d:06:
         01:68:98:9b:d3:3c:8e:8b:72:83:b4:7c:1a:94:0f:9f:cc:de:
         5e:11:9a:31:ec:2d:d2:90:24:8c:da:8d:01:81:c5:49:2b:b5:
         53:da:9f:37:92:fc:3f:95:fb:7b:5a:a6:d6:96:87:ba:67:94:
         bb:f1:2b:6b:13:93:dc:8d:c8:e6:fe:61:07:c9:4c:55:3c:4e:
         6b:26:83:60:e2:29:10:95:be:fa:76:3b:0e:da:af:9a:dc:3f:
         cd:5f:b1:8e:ca:ee:a5:83:a0:e7:3f:5a:26:85:21:3d:5b:48:
         9f:02:0c:82:8c:93:23:59:3d:c1:42:5a:57:a4:54:d9:61:c6:
         0a:b5:c4:bd:e4:96:07:1b:59:2e:f1:82:e3:14:41:e5:05:42:
         bf:4f:5c:43:64:c9:a3:c4:e6:ed:ca:d0:f0:54:2e:b2:9c:0f:
         f2:e4:c8:37:69:e8:29:77:e1:72:03:5d:dd:1b:92:33:dc:c9:
         2b:b8:3f:74:64:12:ef:06:d8:ca:23:09:87:61:b3:c8:28:d7:
         72:44:b9:55:95:90:cf:98:4d:e5:93:b1:f0:6a:39:c3:e8:eb:
         d3:55:4b:0f:d5:04:2e:ef:73:d2:cc:c3:05:49:15:32:b7:8f:
         04:a9:0e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:06:19 2025 by rpki-client