Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
File:                     3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          usZziz9zZM6ObzL9qi6dmv8Vm2+IiapCrLnJinUBef4=
Subject key identifier:   3D:E1:DA:D5:81:D7:16:BE:53:AD:48:77:34:B8:0A:39:E7:B5:B2:8E
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       3CE01416AFA102B49FB2BC8D0AF76D6BBB1C70D7
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     61138
IP address blocks:        128.254.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 11:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e0:14:16:af:a1:02:b4:9f:b2:bc:8d:0a:f7:6d:6b:bb:1c:70:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=3DE1DAD581D716BE53AD487734B80A39E7B5B28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:97:e4:f5:61:b1:6c:f3:59:77:0d:6b:c7:5b:
                    bf:54:d6:32:40:78:7c:9b:23:b7:28:69:6c:66:5c:
                    bf:b6:3d:33:c9:b2:0f:40:d8:2f:79:99:91:69:0d:
                    ab:7d:67:ca:17:77:79:ec:45:64:b5:d3:e3:c2:f7:
                    8a:00:10:6f:1c:59:ed:a9:ff:95:6e:1e:d9:a2:8a:
                    05:ae:be:5d:f6:10:18:22:d1:0f:93:0d:56:83:c7:
                    af:f8:c1:66:c8:c3:d1:73:4d:e9:d8:3b:38:2d:52:
                    5a:76:96:26:be:f3:1f:3c:d8:e2:1f:64:0e:1d:bc:
                    96:b6:fd:4b:a9:f9:be:45:dd:93:5f:2c:b1:64:cd:
                    88:38:28:62:53:25:53:5b:eb:ff:0b:ea:91:2b:e6:
                    47:c3:cb:23:e2:24:07:67:ef:b8:47:9f:aa:4a:b3:
                    3b:3f:75:68:76:4b:57:75:c1:56:6e:71:b8:11:aa:
                    a2:a8:06:07:f5:58:4b:a4:8e:88:2f:25:e6:7f:f4:
                    db:6b:4b:7a:39:91:7c:08:62:88:c8:6b:03:42:e7:
                    08:89:8f:73:8a:88:b9:74:82:39:bd:0e:be:62:67:
                    29:6d:f6:ee:c7:fe:cf:c1:16:f5:eb:47:bb:33:dc:
                    2b:1b:e7:fc:3a:3d:6d:51:e7:4d:9b:43:6a:69:48:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:DA:D5:81:D7:16:BE:53:AD:48:77:34:B8:0A:39:E7:B5:B2:8E
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:fa:17:b3:36:c3:2a:7c:24:f1:62:02:66:55:1a:6b:cb:
         4c:12:bd:dc:d2:4e:72:68:2c:19:a4:d7:f5:c7:e4:fa:6c:b4:
         b3:38:15:33:61:8f:7d:00:bb:40:ef:eb:97:86:c2:2f:3a:e4:
         c9:8a:ea:43:3f:7f:ae:96:92:cc:bb:24:e7:27:49:31:76:66:
         78:9a:72:9b:06:38:85:d9:1c:ac:f8:7c:24:bc:8a:1f:36:1a:
         99:2b:a5:4f:61:cd:fb:9b:27:e7:e4:ec:78:eb:bc:ea:eb:ba:
         58:28:c1:2e:0b:86:7d:26:8e:7b:5e:9d:2b:d4:5b:b7:f2:68:
         45:53:af:78:03:e5:04:1f:e2:10:ec:b1:88:3b:4c:43:40:ed:
         1b:41:65:c5:7d:06:54:4d:a9:d7:bc:a1:06:64:18:dc:f8:81:
         21:58:3c:85:42:cc:d1:8f:99:ce:11:49:8c:77:6c:e8:58:eb:
         e0:83:79:2a:f3:a0:4f:df:13:27:55:fa:ac:e0:4c:7b:59:d6:
         f0:34:21:cd:71:c2:bf:04:a1:dd:4a:bb:e3:7e:8a:0d:cb:c9:
         85:4d:06:ff:c4:7f:28:52:ed:23:31:e4:a4:37:90:34:82:c1:
         80:82:90:7e:76:89:c4:4f:bb:83:5a:1b:ae:52:02:5b:b9:72:
         1b:48:12:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:16:03 2024 by rpki-client on console-ams.rpki-client.org