Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa (raw, json)
Hash identifier:          g89X5idkDSqSew7/PpzvjRB7/3dNzfe5VXIn9YSrNps=
Subject key identifier:   10:03:A0:19:17:2D:2B:E9:FE:EE:82:F9:BB:B7:8E:69:B9:B1:2B:E1
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       217CBE4A05AF3D32AC9933B397C07C30816252B9
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
Signing time:             Tue 18 Jun 2024 19:39:57 +0000
ROA not before:           Tue 18 Jun 2024 19:34:57 +0000
ROA not after:            Tue 17 Jun 2025 19:39:57 +0000
asID:                     199751
IP address blocks:        128.254.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7c:be:4a:05:af:3d:32:ac:99:33:b3:97:c0:7c:30:81:62:52:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 18 19:34:57 2024 GMT
            Not After : Jun 17 19:39:57 2025 GMT
        Subject: CN=1003A019172D2BE9FEEE82F9BBB78E69B9B12BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:54:03:1e:72:4b:3a:d7:a4:53:d5:24:52:
                    e0:28:98:62:8c:d4:f8:e4:0f:fd:01:f8:db:63:0a:
                    61:e8:4b:20:2f:bc:46:4a:88:40:4a:18:9b:7b:a1:
                    2a:b1:4f:ff:81:d6:c0:c2:2e:9a:00:83:89:43:0c:
                    b8:56:65:f6:0f:31:0f:7a:13:94:3c:1b:c7:09:a8:
                    09:88:53:58:56:6b:60:22:e6:1b:48:fb:56:da:6e:
                    95:73:e0:47:b1:0e:db:78:16:30:a2:a9:35:65:dd:
                    75:7f:66:d2:c0:9b:54:bc:95:13:59:8b:7e:5f:f6:
                    4d:f1:53:b2:70:9a:10:25:5e:b0:18:3c:21:44:ca:
                    33:2d:19:26:bc:25:cd:27:29:44:dd:d1:2d:cf:b2:
                    b7:36:7f:eb:83:38:e9:fc:c3:03:a3:02:55:7c:04:
                    01:e0:58:6f:c1:5a:63:a3:18:1b:cf:ac:67:ab:2c:
                    6a:4b:03:f5:84:2b:33:c1:6a:a8:13:15:0a:b3:1c:
                    32:99:3b:66:f9:c2:25:36:e1:2c:0b:51:e3:3f:be:
                    1f:cd:a0:fc:e3:e1:4d:ce:db:2c:66:15:30:fb:52:
                    d6:5e:14:da:f6:7a:9c:84:66:1d:37:94:e1:60:c2:
                    98:e7:da:59:5d:ae:dd:89:a8:6b:92:f0:ec:91:28:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:03:A0:19:17:2D:2B:E9:FE:EE:82:F9:BB:B7:8E:69:B9:B1:2B:E1
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:e5:0e:2e:6b:40:e7:27:5c:ca:20:88:e3:8c:3b:cb:66:d4:
         a1:44:a0:87:1e:bd:ae:26:bd:0b:9f:d1:43:82:4b:19:37:8c:
         7d:7e:89:0f:3f:36:88:ff:57:30:1d:05:11:a5:10:25:3f:6d:
         f6:72:4a:03:26:75:b8:15:1f:fc:7c:5e:aa:48:47:d5:8b:f4:
         d0:9f:5d:e2:17:4e:89:4e:51:e9:25:72:1f:76:e5:2f:48:ca:
         66:b0:54:6c:ef:92:82:0e:63:46:70:8d:49:65:2f:ff:00:47:
         9b:e8:7f:71:fc:52:4e:9d:f6:4a:72:c9:70:9b:72:43:25:46:
         f4:b7:2a:3e:22:6a:8d:80:2f:ef:7a:c5:40:1c:ec:66:87:28:
         e6:0d:4e:53:8c:cc:59:a7:c6:66:6d:6d:a4:3c:1f:0f:ed:cc:
         90:22:d2:a1:ad:e5:1e:fb:64:f2:56:ed:10:f5:cd:94:f3:53:
         3e:cb:79:16:ba:62:ad:ca:7e:29:1a:ef:21:5c:a1:9e:4a:67:
         b3:2f:b2:60:80:79:53:77:d0:77:f5:a1:8f:11:49:5d:52:23:
         fa:cd:36:7a:9d:21:d4:54:80:80:86:2a:d8:9d:9a:64:95:bf:
         ad:bf:ae:f4:31:34:19:af:b5:7d:a2:30:5a:60:f9:7e:d9:57:
         2a:ce:d7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org