Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa (raw, json)
Hash identifier:          5yqVoIikLfKWKL41iRbF0st2mkkP+Oa2pap7AEDJtt0=
Subject key identifier:   AD:E6:AB:1C:47:AD:DC:6A:EE:D5:7B:5C:0B:4F:48:50:D2:E7:AB:03
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       6CC9D0137C463E732947D0A5755A0CFC524137C7
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa
Signing time:             Tue 20 May 2025 20:33:02 +0000
ROA not before:           Tue 20 May 2025 20:28:02 +0000
ROA not after:            Tue 19 May 2026 20:33:02 +0000
asID:                     199751
IP address blocks:        128.254.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:d0:13:7c:46:3e:73:29:47:d0:a5:75:5a:0c:fc:52:41:37:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May 20 20:28:02 2025 GMT
            Not After : May 19 20:33:02 2026 GMT
        Subject: CN=ADE6AB1C47ADDC6AEED57B5C0B4F4850D2E7AB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:10:38:79:94:56:90:e9:81:68:c0:ce:6c:
                    67:07:9d:8a:f0:a5:bd:d2:3b:67:08:ea:0e:4d:9e:
                    ec:f5:3a:07:4a:81:77:69:74:ea:fc:e4:66:1b:d5:
                    bd:ed:09:cb:75:58:76:f1:2d:50:d4:75:6f:e1:31:
                    60:a0:9c:57:72:ce:7e:90:ae:8e:7b:f5:99:59:86:
                    73:99:cb:dd:86:d0:fa:ec:cf:aa:24:0b:33:ff:7b:
                    95:b5:8e:ac:d3:e8:e3:9f:d4:6e:78:74:56:17:5e:
                    3f:ab:74:31:8f:85:5c:69:cb:d9:53:ea:fa:3b:f0:
                    60:95:0a:a7:f7:5f:2a:7a:d3:03:0d:af:23:66:99:
                    75:f6:a0:96:d9:45:6b:42:94:3f:d2:59:b4:ca:22:
                    dc:38:53:f2:57:e0:c2:d7:6f:02:45:7a:54:36:a6:
                    51:7b:17:10:4e:49:b1:29:9b:33:a4:ae:16:3c:25:
                    95:a6:1e:cd:d1:28:be:7f:70:ed:b0:0e:fc:69:e6:
                    54:91:ce:91:41:cb:28:74:61:10:31:7d:28:8b:15:
                    e5:5c:27:b3:1e:67:fa:3e:6c:af:68:15:33:75:31:
                    c1:3b:16:e8:49:ce:47:55:7a:be:ad:d2:7d:6c:d8:
                    f6:fc:65:0f:2c:18:6e:40:56:f3:45:a9:5a:f1:e4:
                    d1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E6:AB:1C:47:AD:DC:6A:EE:D5:7B:5C:0B:4F:48:50:D2:E7:AB:03
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20313939373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:3d:a6:2c:40:3a:9e:da:50:61:38:df:f6:3e:65:fc:b1:
         db:00:c3:e7:d9:1f:4d:bd:35:08:d4:73:52:b2:ff:17:e5:a7:
         3e:6c:5c:a4:a8:60:a5:81:7b:58:f2:20:28:38:80:cc:00:d6:
         36:70:0e:0f:0c:54:6f:0d:42:e9:7f:52:d4:52:00:00:f9:35:
         9c:2e:64:a3:85:66:f9:24:14:6b:8a:b4:44:30:53:9d:fb:e3:
         be:e1:5d:02:c9:66:26:66:ec:d8:37:37:bf:31:74:6f:b1:63:
         d0:2b:4f:0b:5f:d9:58:47:54:bd:69:82:e1:11:1d:5c:60:c8:
         0f:7c:6e:da:82:38:3c:c9:92:95:f5:1e:94:0d:b2:a9:2c:72:
         6d:b7:5e:e2:42:31:5e:75:19:0a:f4:97:65:03:b0:cf:c4:05:
         c0:a7:f4:e4:e9:a8:29:d4:6b:c3:f2:b4:23:af:56:b3:84:d6:
         c5:a8:3b:ca:f1:a8:37:7d:58:fa:bd:17:83:b7:4b:60:40:b1:
         1f:73:29:1c:01:0a:08:90:a1:40:9a:a0:b8:83:3a:66:fe:e7:
         aa:c2:90:27:bb:96:f6:b4:3b:82:8c:1d:ae:4e:1c:e5:d6:cb:
         dc:86:54:88:10:6b:cd:a0:90:52:0a:67:2c:bf:ad:47:68:cc:
         3f:de:fc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:12:57 2025 by rpki-client