Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232372e302f32342d3234203d3e20383334.roa
File:                     36392e3136362e3232372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          LjXA2Sz3gApjfkAkJs+NAaN1wsuSEvVLoHeMFNIX+cg=
Subject key identifier:   EA:E1:08:0F:72:F0:19:65:84:FD:75:EF:79:EC:7E:DF:A4:05:87:84
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       79E4BAF2C5DE6306F0B44F6D1CC2CE2D93C17512
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 13 Oct 2025 11:30:38 +0000
ROA not before:           Mon 13 Oct 2025 11:25:38 +0000
ROA not after:            Mon 12 Oct 2026 11:30:38 +0000
asID:                     834
IP address blocks:        69.166.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:e4:ba:f2:c5:de:63:06:f0:b4:4f:6d:1c:c2:ce:2d:93:c1:75:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 13 11:25:38 2025 GMT
            Not After : Oct 12 11:30:38 2026 GMT
        Subject: CN=EAE1080F72F0196584FD75EF79EC7EDFA4058784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:77:40:62:55:e3:b7:c1:b7:2f:74:43:a0:
                    00:ea:81:d0:41:31:f0:6b:c5:6b:ac:d8:e7:a9:dc:
                    e2:d2:a0:0f:f3:2c:fd:cd:df:ea:95:eb:dd:2a:61:
                    d0:2b:ad:9e:42:50:11:3e:6b:82:25:24:56:66:66:
                    81:f6:d0:a1:1e:b4:14:f5:20:7b:9e:75:4c:84:b2:
                    b9:a0:67:4c:5d:97:b6:41:a5:73:78:ba:ec:dc:96:
                    73:52:6a:93:f7:83:03:05:d4:21:28:e2:45:28:cb:
                    77:ef:3a:f0:dd:4a:67:f0:13:76:48:86:1d:45:22:
                    8d:aa:b6:bb:32:f2:62:c8:84:a3:5f:37:3e:08:ee:
                    7d:3f:3e:99:6a:37:d8:c2:d4:e6:43:af:02:b5:6b:
                    44:be:f6:48:31:06:ed:59:09:6e:b1:f7:1f:ec:fb:
                    3f:b9:ed:77:30:34:48:96:16:e2:91:df:55:5a:3f:
                    f3:23:63:1d:3d:03:49:48:4d:81:4f:11:75:0a:a4:
                    2d:d1:d3:8e:27:a1:9a:76:a7:90:f5:19:1e:f8:0a:
                    08:50:f8:a2:1d:2c:80:ce:1a:36:1d:ce:1d:6b:03:
                    f9:60:47:da:dd:f7:d9:9c:af:d1:0e:96:2a:be:5b:
                    af:7b:96:89:e0:9e:80:eb:f3:50:f3:07:a3:1f:9c:
                    64:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:08:0F:72:F0:19:65:84:FD:75:EF:79:EC:7E:DF:A4:05:87:84
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:30:11:11:8f:27:ad:66:da:a6:b4:6e:25:73:06:47:b1:63:
         cf:f5:66:ef:25:c0:30:f7:be:81:c8:ca:79:08:7c:dc:ee:5b:
         4b:ff:b5:f3:55:91:6a:45:41:da:47:fa:a9:d1:fd:1e:78:80:
         ed:d4:df:7b:82:41:ac:df:46:1a:05:95:35:ae:61:65:0e:ca:
         16:39:51:93:b3:52:a5:af:92:d7:a8:91:0c:62:0e:15:d8:16:
         e3:ab:04:a5:8c:7c:dd:d1:57:b6:b0:d6:56:fe:75:83:69:ff:
         38:93:6f:97:cc:a5:36:85:a7:54:ab:b0:f3:c2:f9:24:14:5b:
         3e:5e:86:30:34:43:65:27:53:a1:99:90:0e:cd:21:41:42:1a:
         b9:9a:44:8f:c8:31:6d:6f:91:94:40:08:a6:3a:79:47:68:65:
         38:fe:f9:32:6d:b7:2e:98:ff:1e:18:01:9d:e7:74:da:1d:94:
         d4:7e:5a:fd:5f:de:21:b5:ba:1e:d7:b7:26:10:2f:d2:cc:b6:
         6d:32:65:67:10:ed:59:14:19:1c:15:4d:01:26:1a:30:b3:a4:
         04:34:0c:11:c2:73:9b:f3:88:38:3e:10:59:9c:71:b9:67:4c:
         cd:4a:cc:fe:da:c4:27:d2:03:27:dc:d9:d3:db:90:1a:11:6c:
         d5:fe:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:26 2025 by rpki-client