Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          4815Ne9deRlQyNkFmi+0XEW54tL2wIeosonYjPCVR4Y=
Subject key identifier:   7D:A3:70:9B:BE:65:FE:7E:9B:47:C9:AA:09:9D:C9:46:E8:45:23:6F
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       799ADAC858510948606A165F5A8E51048AEDBBBA
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32342d3234203d3e203137313339.roa
Signing time:             Thu 24 Apr 2025 11:40:13 +0000
ROA not before:           Thu 24 Apr 2025 11:35:13 +0000
ROA not after:            Thu 23 Apr 2026 11:40:13 +0000
asID:                     17139
IP address blocks:        66.117.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 03:32:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:da:c8:58:51:09:48:60:6a:16:5f:5a:8e:51:04:8a:ed:bb:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Apr 24 11:35:13 2025 GMT
            Not After : Apr 23 11:40:13 2026 GMT
        Subject: CN=7DA3709BBE65FE7E9B47C9AA099DC946E845236F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:f2:be:1b:f2:e5:b3:4c:ca:95:e3:a1:a2:
                    c5:62:92:12:f1:8d:c8:c6:cc:b2:50:e6:0f:9a:90:
                    65:b3:ec:01:06:0d:f0:e0:51:5f:d6:c8:43:14:1f:
                    32:3f:db:3c:19:84:89:f1:f5:a5:9c:a9:a6:e5:6e:
                    b4:71:b7:dc:6f:0d:85:ce:e3:48:d9:06:77:15:21:
                    b2:89:fd:79:7c:3b:6d:68:94:ba:ea:8c:ce:18:76:
                    cd:78:46:21:1a:28:0a:55:b5:5f:e8:00:f7:e0:07:
                    ae:b1:d2:48:51:fd:a7:1d:cb:52:9f:ff:78:33:06:
                    b8:89:44:e7:14:62:09:ce:f6:5a:6d:0a:3e:98:be:
                    28:4d:ea:70:77:66:84:99:35:73:95:93:07:94:fa:
                    4e:60:2d:18:13:56:c5:10:8c:08:f8:33:80:7d:59:
                    91:70:21:0d:3f:cf:60:4d:31:7c:bf:c9:cc:49:68:
                    96:37:7f:e6:be:46:23:89:f2:7c:66:33:78:6e:19:
                    91:28:83:e8:d8:cf:f7:03:36:31:50:13:d8:96:54:
                    32:92:2f:bc:c1:04:69:46:5b:07:30:45:bc:60:4f:
                    95:0a:86:f1:02:4d:5e:08:a6:e5:1d:e0:8e:e5:54:
                    e5:3f:bc:7f:ce:12:ca:a4:62:d4:b9:56:55:b7:5c:
                    6c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A3:70:9B:BE:65:FE:7E:9B:47:C9:AA:09:9D:C9:46:E8:45:23:6F
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f3:ef:e5:d4:13:f4:97:9a:b7:c0:0f:43:29:eb:6c:c1:d4:
         22:08:b7:08:c9:a5:4c:25:ed:8c:85:81:33:10:1e:d5:ae:a9:
         cf:32:cb:27:a7:e3:b4:76:76:2a:bc:ad:99:85:3a:5c:a4:65:
         b7:cc:cf:23:96:35:86:37:dc:80:8c:9f:b8:6c:41:60:c3:e2:
         81:4e:47:be:08:be:04:06:1f:eb:14:6f:d1:1d:de:d7:56:f5:
         a8:54:0b:2a:22:54:c9:2a:2e:b3:34:9f:5e:89:a4:3b:38:eb:
         39:ab:31:1b:06:f6:01:34:81:b8:21:e6:eb:fc:01:4f:5c:02:
         b4:33:0e:00:c5:8a:0c:f0:74:2d:ec:dd:d2:8c:f6:b1:71:6c:
         7d:a8:07:6c:f7:4e:4c:f6:55:23:19:c3:74:7e:62:bf:8b:a7:
         00:f2:2a:63:ab:2c:3f:0a:41:2a:ec:f0:23:33:70:3f:20:c5:
         d0:00:21:dd:b1:a4:66:b7:a4:98:45:27:30:53:9d:a2:5a:7f:
         52:fd:57:e1:ea:08:4d:6c:e5:19:50:09:2e:bc:0a:46:60:ca:
         1c:de:c1:09:e7:6d:d0:04:70:58:48:a6:88:7b:4d:65:82:15:
         6b:2c:23:df:5b:2f:37:ca:bc:64:71:34:43:89:1f:ab:d6:b1:
         63:dc:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:08:22 2025 by rpki-client