Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203139333138.roa
File:                     36392e3136362e3233302e302f32342d3234203d3e203139333138.roa (raw, json)
Hash identifier:          paGO27+99T3svlSEbL8DOrI0toqhkot9bilv2Ui9oiM=
Subject key identifier:   02:E6:D4:C5:0F:AE:54:9D:F2:95:9A:3F:E0:46:55:FE:BF:54:4A:FF
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       51C5AD6CACFA09B38A3EE3B74EFC1D097FDE61F4
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203139333138.roa
Signing time:             Fri 10 Oct 2025 17:15:59 +0000
ROA not before:           Fri 10 Oct 2025 17:10:59 +0000
ROA not after:            Fri 09 Oct 2026 17:15:59 +0000
asID:                     19318
IP address blocks:        69.166.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c5:ad:6c:ac:fa:09:b3:8a:3e:e3:b7:4e:fc:1d:09:7f:de:61:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 10 17:10:59 2025 GMT
            Not After : Oct  9 17:15:59 2026 GMT
        Subject: CN=02E6D4C50FAE549DF2959A3FE04655FEBF544AFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:24:db:d7:17:89:13:c0:21:dd:b5:f0:b1:e1:
                    bc:8f:98:3b:2e:bf:8a:4d:54:9e:2c:1f:21:ff:de:
                    b1:01:d5:51:c0:cd:e3:61:47:27:66:23:e2:3f:14:
                    44:36:f5:f4:da:dd:da:57:95:2e:c2:73:2f:e7:b5:
                    84:83:37:b0:b5:d7:08:6b:ff:53:e6:12:b1:16:8d:
                    64:db:3e:c6:03:ed:55:e0:cb:1f:e0:d4:c5:56:75:
                    38:0b:dd:60:99:5f:40:78:0c:86:d6:7c:54:ea:ea:
                    45:d6:db:d4:a7:a9:9f:a6:b1:97:ea:7f:71:36:5e:
                    ce:f9:f8:16:d4:33:c1:fe:2d:ce:02:6e:b0:3b:f0:
                    67:80:c7:23:48:cb:90:7b:2d:04:7c:e5:2c:8d:33:
                    b9:9a:23:19:97:fb:7a:61:53:51:c4:00:33:d3:4e:
                    29:fd:0e:ba:65:55:b3:78:eb:db:b3:c8:37:10:38:
                    0f:54:c5:b1:ec:2d:f9:3d:c6:20:5f:c0:9b:7a:e2:
                    2b:ee:04:e8:59:4e:07:5f:30:5e:5c:69:7b:d2:01:
                    7d:50:35:a2:17:e7:fb:5e:16:ea:60:ad:ef:45:de:
                    33:5e:b1:c4:fc:31:41:cc:35:0e:70:08:d3:d1:06:
                    5b:d9:99:8d:dd:2e:cf:47:99:3c:8e:9b:bc:d4:ff:
                    d1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:D4:C5:0F:AE:54:9D:F2:95:9A:3F:E0:46:55:FE:BF:54:4A:FF
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233302e302f32342d3234203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:01:2a:72:25:78:ff:54:bc:56:84:e4:7f:20:71:28:8e:
         44:a7:0a:b1:d2:dd:85:5c:f0:c2:c5:f7:f0:bf:8a:bd:9a:90:
         d4:bb:b2:07:15:58:65:2a:de:fd:34:7e:7a:9e:34:a2:c0:b0:
         47:a6:db:05:21:b3:c7:74:72:7c:49:61:37:ce:73:db:40:14:
         c3:de:7f:0a:64:08:f3:b3:11:29:92:12:bd:ae:dc:3e:86:66:
         3c:2a:40:f6:0a:c3:f2:60:90:a1:9f:a2:bc:e6:bc:c0:37:c7:
         67:c8:63:f8:f5:09:0b:c8:04:d9:c9:50:ab:2d:7f:99:0c:f4:
         80:38:4e:eb:9a:9d:66:1e:42:44:d1:35:0c:c4:b5:9d:22:13:
         f6:99:05:b5:f5:d1:c3:75:9b:9d:ed:a5:56:2c:a4:44:d0:42:
         2e:a5:7b:54:2d:9a:fb:e0:a5:cd:71:25:05:a8:28:e8:bc:29:
         cb:a7:03:3e:b0:ce:85:24:72:03:3b:41:ac:82:ed:49:22:1b:
         6a:79:5c:9a:55:c0:fc:63:fc:82:a3:c8:3b:e9:5f:2d:8a:aa:
         8b:e6:b6:ca:6f:c8:cf:a1:cf:66:65:32:d6:50:9f:c0:0d:a8:
         b1:a4:0e:87:e3:e7:30:80:10:b0:9e:c5:e4:7a:68:d9:02:8c:
         1e:cb:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:53 2025 by rpki-client