Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa
File:                     36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa (raw, json)
Hash identifier:          Sa4y154QagsAcSt0L7UiW9G+08YL+Oqm8CdF0PKeTzI=
Subject key identifier:   C0:C4:7E:7A:30:38:90:78:36:26:39:CB:F7:9A:BA:4F:D9:E8:7E:FF
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       5CD66028D553D0F08A4EB46CA478700AC087A488
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa
Signing time:             Fri 20 Jun 2025 13:12:25 +0000
ROA not before:           Fri 20 Jun 2025 13:07:25 +0000
ROA not after:            Fri 19 Jun 2026 13:12:25 +0000
asID:                     215672
IP address blocks:        69.166.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d6:60:28:d5:53:d0:f0:8a:4e:b4:6c:a4:78:70:0a:c0:87:a4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 20 13:07:25 2025 GMT
            Not After : Jun 19 13:12:25 2026 GMT
        Subject: CN=C0C47E7A30389078362639CBF79ABA4FD9E87EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:4f:36:22:0f:cb:ac:c7:c0:c3:9a:bd:c2:
                    e5:00:ec:7f:be:69:5c:8c:1d:38:bc:25:d2:31:66:
                    e3:36:f5:f5:90:bc:11:1d:7d:e5:76:13:a4:2c:a3:
                    c6:eb:a9:0e:db:39:17:01:5d:5c:28:7e:7e:17:a6:
                    f3:33:b3:b2:52:ff:77:a5:47:22:8e:e0:77:d3:d8:
                    66:8f:6e:8c:c7:2d:e8:a6:cc:e8:03:be:53:81:b2:
                    2e:a4:f5:b4:ca:e2:78:99:e0:84:fe:68:28:00:95:
                    88:59:91:14:bf:9e:84:4e:7e:81:60:c4:77:ce:1b:
                    be:5a:29:47:54:60:ad:85:a1:76:92:53:20:51:d5:
                    36:18:42:43:d5:1b:28:6c:de:f0:c0:c2:01:3f:93:
                    67:92:81:c2:26:74:66:21:00:5c:8a:4d:1f:db:0a:
                    37:9c:6f:f7:af:73:9c:a3:b5:28:d7:18:8a:f5:34:
                    14:78:04:08:11:75:f4:50:9b:ea:a0:2f:8f:5c:d7:
                    f6:85:ca:c9:dc:4f:18:b3:e4:b8:a9:bb:c8:6b:22:
                    4e:af:3e:13:64:12:2c:ea:53:4f:93:dd:91:ab:c9:
                    31:1e:0e:f8:71:c4:3c:05:13:69:ae:ea:d5:43:e4:
                    59:7b:76:ee:1c:af:15:0e:1d:2a:16:6d:de:b7:57:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C4:7E:7A:30:38:90:78:36:26:39:CB:F7:9A:BA:4F:D9:E8:7E:FF
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3234302e302f32342d3234203d3e20323135363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:2d:63:8c:4b:24:29:97:85:ab:e2:c0:db:55:22:47:e6:
         10:52:eb:bc:43:b6:41:8c:43:b0:ac:3e:7f:48:66:45:b3:d7:
         0c:53:86:07:d3:f9:28:b4:37:a7:fc:f5:dc:8a:f8:c8:aa:e2:
         e7:ea:b5:b6:5f:83:ab:bd:79:78:95:23:a7:f8:6f:3c:b0:87:
         34:33:b7:51:2b:e5:b0:ec:fa:b3:01:74:3e:a8:e8:24:c8:fc:
         80:dd:56:29:cd:35:d3:cb:3e:a1:97:c7:4a:7b:e9:b4:4a:b0:
         7a:ac:86:91:37:67:71:44:e0:70:34:0e:1c:64:c0:70:05:77:
         df:db:83:bf:8e:53:8a:7a:3d:2e:37:ad:7f:36:50:7c:ff:47:
         36:b6:5a:6d:c3:fe:c5:1c:e6:31:3f:97:f0:73:41:62:c9:9f:
         a8:d7:74:f7:72:6a:30:67:09:63:68:23:17:d9:5d:74:38:34:
         96:87:8d:b9:11:ce:d4:81:5a:a5:5b:4f:ae:74:f8:3c:b4:f2:
         f0:ef:3d:14:19:3b:d0:90:be:ed:e4:89:4e:70:ad:41:85:51:
         9f:eb:37:10:5f:a6:03:c8:5e:d7:3f:12:d8:6b:d0:3f:a0:39:
         62:bd:61:b7:95:e3:de:c4:c6:34:8b:cf:3c:fe:53:9f:ac:f1:
         58:70:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:16:02 2025 by rpki-client