Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa
File:                     3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa (raw, json)
Hash identifier:          bKGoz2SHSKFW9i7/q96++UJsTHyBmrmAwgDpEfOZnn4=
Subject key identifier:   2B:34:C0:86:D4:B2:3D:13:AA:D2:FA:9A:19:18:62:BF:9B:D1:21:20
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       4889347A58479A3B7465DC8643A4EE2002A93356
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa
Signing time:             Mon 14 Jul 2025 09:49:46 +0000
ROA not before:           Mon 14 Jul 2025 09:44:46 +0000
ROA not after:            Mon 13 Jul 2026 09:49:46 +0000
asID:                     153195
IP address blocks:        128.254.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 01:06:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:89:34:7a:58:47:9a:3b:74:65:dc:86:43:a4:ee:20:02:a9:33:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul 14 09:44:46 2025 GMT
            Not After : Jul 13 09:49:46 2026 GMT
        Subject: CN=2B34C086D4B23D13AAD2FA9A191862BF9BD12120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:02:5f:98:60:79:ad:a5:74:b9:77:90:1f:
                    97:09:94:a0:cf:38:a7:40:12:68:87:96:50:d7:2b:
                    fb:a9:fa:90:3c:e8:f7:00:3b:31:85:63:34:1c:f5:
                    a6:86:80:d7:b7:60:78:7c:e5:0f:02:34:39:30:24:
                    9f:7c:11:9c:f8:9c:90:6c:5a:6a:07:08:e4:eb:29:
                    b8:41:2c:6b:4c:c7:8c:91:3b:39:7d:25:52:93:8e:
                    62:42:43:d5:c0:68:bc:b3:0b:a7:0f:d0:fb:88:c3:
                    5a:54:57:c4:e8:a7:cd:99:cc:85:de:05:0d:ab:1a:
                    d5:01:da:9f:e2:45:72:68:54:0f:0e:ec:69:90:6a:
                    cc:e8:ba:b4:7b:0c:b7:ed:1d:ed:75:ba:5e:c6:af:
                    56:8e:00:30:28:07:36:c4:f4:c5:01:59:e5:94:5f:
                    53:05:9e:05:3c:85:9e:05:a9:43:7d:3a:ac:a0:01:
                    87:d7:e4:c5:2d:6e:64:c5:1d:85:54:fc:0e:d4:88:
                    3e:95:ce:4d:85:7f:5b:95:c2:5c:e6:0d:c8:19:6b:
                    3a:5b:b2:e1:c4:6c:41:c8:1e:3f:9b:b9:64:40:1b:
                    0a:11:95:f5:e1:33:23:f0:33:c9:df:6d:f4:88:2c:
                    ee:7d:96:44:bc:7b:09:ac:86:b7:8b:d1:a5:fd:36:
                    84:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:34:C0:86:D4:B2:3D:13:AA:D2:FA:9A:19:18:62:BF:9B:D1:21:20
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d5:b1:13:85:69:c0:b4:11:4b:64:8e:f3:ae:70:c4:99:b7:
         03:15:e6:36:93:30:21:ab:51:c9:1c:0c:3e:a2:32:8b:4e:dd:
         36:44:f8:84:1c:01:7c:c0:2d:39:21:0a:a2:e9:65:47:03:09:
         0d:83:74:fc:57:94:f8:64:70:38:54:cc:de:3e:85:66:27:97:
         7e:99:e0:2d:bf:f5:3e:2b:83:ca:ee:2e:8f:74:bb:b1:06:ea:
         56:6f:0c:61:7e:33:e5:b2:52:be:71:fb:76:4b:21:26:d8:a7:
         8f:20:4a:0c:1b:c8:e4:81:97:86:72:96:81:71:de:c4:0b:88:
         1f:6a:a0:98:09:ce:f8:be:19:78:a8:af:7f:43:f6:b0:33:04:
         71:f3:ae:85:56:41:49:99:61:b5:f3:05:e1:c3:62:94:3f:c5:
         7a:86:2d:82:ea:9a:37:7d:90:9f:74:fe:d2:72:a3:7b:67:e8:
         64:74:75:d2:af:92:e4:8a:f2:96:2e:c9:13:89:fb:70:94:2e:
         bf:d1:a1:49:be:0f:03:88:f2:79:3a:ed:14:99:35:12:a0:00:
         b0:e6:51:80:79:34:83:b9:24:a9:70:e5:4c:59:03:56:61:d6:
         e1:fc:0e:6f:fc:e1:23:c9:83:ec:1e:87:17:74:ee:3d:17:48:
         a9:a4:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:20:06 2025 by rpki-client