Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e20323134363537.roa
File:                     36392e3136362e3233322e302f32332d3234203d3e20323134363537.roa (raw, json)
Hash identifier:          sq9Idi5mXeRhNUX0Wb4AONpcex9fDrtvTg/lbLHIhyg=
Subject key identifier:   B2:65:B3:42:C7:00:C4:91:A5:71:E5:50:74:08:CD:CB:4C:8B:6D:BD
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       501925D62778359FD4A3490A385BE08604D330F3
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e20323134363537.roa
Signing time:             Wed 25 Jun 2025 18:21:58 +0000
ROA not before:           Wed 25 Jun 2025 18:16:58 +0000
ROA not after:            Wed 24 Jun 2026 18:21:58 +0000
asID:                     214657
IP address blocks:        69.166.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:22:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:19:25:d6:27:78:35:9f:d4:a3:49:0a:38:5b:e0:86:04:d3:30:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 25 18:16:58 2025 GMT
            Not After : Jun 24 18:21:58 2026 GMT
        Subject: CN=B265B342C700C491A571E5507408CDCB4C8B6DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:26:93:48:7e:49:ae:90:34:7e:18:e3:3e:
                    7e:5e:08:59:b8:5f:84:34:0f:66:94:01:d3:47:af:
                    bd:ee:4f:2c:e7:b0:99:d3:9a:28:d8:59:11:eb:ef:
                    8a:38:07:23:f2:dd:67:77:f3:c8:48:ad:7f:d3:af:
                    16:c1:dd:4c:b8:36:14:ff:7e:e7:c7:3e:1a:84:1b:
                    14:1c:cd:3f:95:bd:12:62:09:2b:38:d0:80:1a:97:
                    6b:bd:ee:a2:c1:81:f6:c5:7d:96:41:6c:95:a9:22:
                    7f:7c:69:8e:8a:6f:04:96:47:a1:0f:4d:ac:26:27:
                    92:d3:5e:bd:0d:b4:00:6e:f5:56:8a:84:8f:a0:34:
                    cc:f8:bb:4f:67:f4:46:98:9a:b7:3e:80:89:e1:cd:
                    eb:7f:c5:28:68:48:d1:69:52:5b:a9:28:36:e2:fe:
                    f2:52:d0:83:d2:8d:f9:b3:ba:a4:44:a0:78:aa:e9:
                    0d:26:00:d0:aa:ea:49:32:83:15:f7:38:ff:d6:57:
                    fc:dd:5b:b0:21:ef:f8:c3:71:75:17:61:d6:aa:63:
                    a4:69:c5:33:2d:43:fe:3d:dd:bf:3e:8d:a1:ec:8f:
                    76:76:cf:68:55:5b:19:98:0a:68:8d:55:ab:d5:ae:
                    2b:6c:3e:dd:03:de:1d:db:26:63:02:35:a1:ad:e9:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:65:B3:42:C7:00:C4:91:A5:71:E5:50:74:08:CD:CB:4C:8B:6D:BD
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32332d3234203d3e20323134363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:39:b4:75:b1:1d:eb:12:50:4a:93:a3:9f:e0:47:8f:b8:17:
         38:03:22:b5:19:9d:a8:3c:dd:fc:a9:1d:d6:65:5f:25:c5:73:
         9a:bb:a2:7f:22:f5:31:8b:50:0a:7d:70:a5:67:ee:4d:49:a4:
         06:82:19:3a:9d:76:32:fc:c1:3e:87:64:e3:fa:d6:ec:12:91:
         3e:67:84:70:68:79:2b:85:17:2d:61:a4:2f:87:50:45:5b:5a:
         fb:b2:89:43:04:83:f2:7b:ef:77:7a:2f:b9:97:ba:33:61:d2:
         0c:8c:c7:da:91:d4:5f:f3:0a:80:55:56:5b:cf:1b:7f:f2:64:
         74:ec:61:0e:a8:ea:88:72:c2:15:01:34:5f:00:1d:71:05:98:
         08:f1:3d:d5:94:0e:b6:07:af:3b:a0:bb:b5:40:92:4e:4f:68:
         29:c3:42:fa:88:90:07:6f:5a:b0:36:19:60:0d:6e:98:bd:ce:
         8b:52:a5:9c:1d:af:85:17:bd:71:4d:4d:57:ac:2a:ea:e8:0c:
         20:9d:af:65:32:d8:0d:e2:5d:66:c2:fe:04:39:83:a3:0b:32:
         ee:68:7d:39:b7:f0:c2:30:34:56:68:37:8b:64:23:a0:56:65:
         f3:3a:f3:ae:c0:07:86:ec:dd:84:fc:a6:07:df:92:6a:f7:06:
         83:59:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:51:24 2025 by rpki-client