Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
File:                     3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          CE7MBl4bLtNauWg/iAYQC5rr+yKumdH0ROyuzOv9xX0=
Subject key identifier:   29:AE:CC:87:ED:DE:A9:79:ED:3F:BF:90:74:AC:E0:1F:8D:6A:73:D3
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       7BB149864F19D34599DCD768B2C4F0B901A86A07
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
Signing time:             Mon 20 Jan 2025 01:45:57 +0000
ROA not before:           Mon 20 Jan 2025 01:40:57 +0000
ROA not after:            Mon 19 Jan 2026 01:45:57 +0000
asID:                     61138
IP address blocks:        128.254.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 12:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b1:49:86:4f:19:d3:45:99:dc:d7:68:b2:c4:f0:b9:01:a8:6a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jan 20 01:40:57 2025 GMT
            Not After : Jan 19 01:45:57 2026 GMT
        Subject: CN=29AECC87EDDEA979ED3FBF9074ACE01F8D6A73D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:c2:12:44:45:e6:e7:be:ea:ec:51:a3:38:
                    8f:08:51:7d:71:4a:01:61:f3:0c:db:1f:b2:8c:c9:
                    12:2e:f6:c1:7b:7b:96:e8:d2:5e:df:14:19:73:65:
                    15:4c:f6:d9:2a:41:ba:2c:e7:0c:a3:64:cf:6d:e2:
                    cc:63:55:25:63:e6:88:ab:0e:02:0e:14:ee:fa:02:
                    6b:f9:07:03:66:23:ae:61:f9:ff:1a:8d:23:31:d3:
                    26:ca:d7:2a:4d:df:dc:a0:b7:0f:49:63:2f:06:5f:
                    64:c7:35:94:29:95:04:ce:c2:1b:4d:98:8d:52:09:
                    5c:93:b1:21:eb:1d:c2:64:87:d1:e6:13:96:5c:40:
                    fc:77:eb:25:e7:a8:e3:97:f5:2c:25:28:ae:c6:11:
                    c2:8c:f3:1f:11:c1:04:f1:b9:ac:cb:b8:0e:dd:2b:
                    82:c7:30:45:3f:f7:90:11:c0:65:28:d6:ac:9e:35:
                    25:50:a5:89:b8:1f:2e:11:eb:ff:77:66:c0:0d:18:
                    c8:0e:43:97:e0:cd:a6:cf:bc:9e:20:6c:b7:14:9e:
                    55:84:06:ae:f7:8b:6d:8a:b0:d9:7c:06:ba:aa:0c:
                    15:39:4a:5d:b0:2e:7e:3f:98:7e:08:32:f4:88:46:
                    92:f6:16:83:67:33:e9:07:60:09:f2:b0:3a:6b:fe:
                    bd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AE:CC:87:ED:DE:A9:79:ED:3F:BF:90:74:AC:E0:1F:8D:6A:73:D3
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:e0:ba:ef:0d:0a:fe:24:59:3d:19:25:59:dd:40:ae:2c:e2:
         d8:4d:0b:8b:dd:a3:f2:d4:b1:b9:de:64:bb:f9:aa:de:b0:96:
         fa:62:33:ae:7a:63:17:d0:4f:29:42:7e:bb:f1:a3:c4:ea:7c:
         90:dd:ca:ad:87:bd:38:fe:7e:27:a2:d4:b4:50:41:42:c6:3c:
         4f:32:aa:03:7c:70:70:03:3e:74:da:18:3a:f5:67:51:dc:7f:
         91:b2:ba:78:8c:54:96:b6:a7:9c:d3:a7:df:93:41:b6:6a:ec:
         31:d9:dc:d8:21:74:9c:8a:07:bf:29:29:10:57:ca:c6:63:2c:
         22:25:54:82:10:0d:e1:b5:0b:f6:15:d4:d3:be:83:46:82:c0:
         ec:d1:45:dd:0f:b7:26:b3:ac:8b:4c:ed:93:25:33:0c:b4:f3:
         b8:2c:0b:ca:b0:d0:40:de:bf:9c:a4:03:19:68:8f:6f:a9:66:
         84:e9:d8:ab:e2:72:24:9f:70:05:a3:26:43:fe:ab:4f:af:38:
         d2:c3:4c:a2:b4:0e:c8:43:22:cc:44:bf:c6:c8:b0:b3:83:88:
         f0:6c:b5:73:25:1f:18:f3:9f:ec:36:aa:77:81:7d:89:7a:9a:
         52:58:31:03:89:57:6d:d7:06:a6:ea:29:31:fd:08:52:02:b9:
         b7:92:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:48 2025 by rpki-client