Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa
File:                     36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          WxNNd7QMcusGmdEbU9NieuaAJVb5oH/t/lgKLRnffiU=
Subject key identifier:   40:9A:4E:A4:58:F7:45:FB:18:7F:4D:53:82:EB:91:A3:CD:75:F0:98
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       1D5FE653300A048DAB78528BC2DE3951F9C7EAAD
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa
Signing time:             Fri 10 Oct 2025 11:30:38 +0000
ROA not before:           Fri 10 Oct 2025 11:25:38 +0000
ROA not after:            Fri 09 Oct 2026 11:30:38 +0000
asID:                     395839
IP address blocks:        69.166.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:5f:e6:53:30:0a:04:8d:ab:78:52:8b:c2:de:39:51:f9:c7:ea:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Oct 10 11:25:38 2025 GMT
            Not After : Oct  9 11:30:38 2026 GMT
        Subject: CN=409A4EA458F745FB187F4D5382EB91A3CD75F098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:77:ed:58:89:0d:eb:55:66:46:2a:d0:b7:
                    9a:e6:d0:1e:1f:28:44:4f:87:ca:c7:7f:55:57:30:
                    ad:e0:9a:31:32:c4:9c:b9:4a:94:22:2b:33:b9:d0:
                    80:42:e5:8e:25:e4:b5:47:fc:22:a1:0e:9e:c7:f7:
                    a5:cb:52:0f:1e:ed:0f:8e:a3:4b:68:7b:5f:04:37:
                    d4:c7:15:db:c9:05:ac:fb:3d:33:d0:23:c9:d5:eb:
                    9a:d9:9e:fd:04:04:f3:ed:c9:b7:a1:6c:a9:ba:51:
                    0d:4a:8d:3e:b1:a6:ad:1d:2d:97:1b:e8:86:54:f4:
                    74:5f:6a:dc:2c:4a:85:eb:a8:6d:99:85:b1:e1:3b:
                    f5:b8:2c:3e:84:66:12:28:ba:1e:50:55:38:b9:1b:
                    7c:cc:e2:ff:53:44:ba:f9:c7:41:64:d1:62:bc:8f:
                    da:94:f1:56:91:08:b8:72:54:dd:9b:60:48:ae:f6:
                    30:ef:4b:37:ed:d3:22:c0:7e:c7:f5:11:07:64:5c:
                    94:0b:07:b7:75:a9:00:b5:9e:75:a6:d0:11:f4:9d:
                    06:5e:86:4d:35:6d:eb:e3:04:ed:da:bc:91:cf:f0:
                    62:fa:21:63:14:4f:fb:ec:10:e3:42:14:7d:17:8b:
                    42:76:e2:3e:51:e5:9f:38:16:98:09:3f:18:0a:9f:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:9A:4E:A4:58:F7:45:FB:18:7F:4D:53:82:EB:91:A3:CD:75:F0:98
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233372e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:5f:35:c1:e5:81:80:7e:4d:4b:51:bb:2a:0a:da:8b:08:8d:
         5e:56:2a:76:c8:0c:b0:44:0c:61:32:09:fd:70:ab:68:13:f2:
         17:48:45:41:fc:d1:b3:2f:07:4e:ec:15:1a:9d:8f:20:62:d2:
         98:ad:03:ed:00:fc:a3:40:ce:02:68:e7:c3:d4:b7:be:17:d9:
         47:57:04:35:db:d3:53:46:bc:46:40:d5:f4:ce:03:9c:15:ca:
         42:0f:b3:72:41:bc:9f:db:51:75:2b:86:57:5f:17:2a:06:56:
         cd:84:73:f9:5b:1c:c4:1f:2d:ea:8a:10:97:d9:85:bb:b0:6f:
         8d:7d:84:07:9a:97:e0:d4:3d:74:36:e9:04:18:2c:53:a5:a5:
         73:cf:15:43:9e:2c:1a:6c:aa:5a:51:6e:e3:2b:10:da:8b:44:
         4e:29:dd:e5:33:48:a0:37:da:95:85:99:2f:6f:19:50:b9:3f:
         62:e1:57:f9:68:6e:48:e9:80:32:42:2b:e9:ec:e4:ca:d4:2a:
         56:a5:78:ed:1f:a8:fb:97:b9:c4:dc:b8:29:35:9c:6b:d0:aa:
         15:a2:dc:a7:d3:ac:7f:d2:18:32:57:23:68:11:69:5e:f8:33:
         d3:39:f3:41:45:2e:fd:fd:b0:cb:bb:56:29:95:13:b3:25:da:
         1b:98:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:22:34 2025 by rpki-client