Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          l6gSGNVjCWWexF1jJNjzxZWIwVFDxkxwqKtKVg58En4=
Subject key identifier:   A3:54:70:6A:A2:FB:50:0E:2D:91:6C:38:15:CD:F0:71:C6:57:EB:09
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       71D9287D4B909F9F721D5BF3989B318669F2FCC1
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa
Signing time:             Sun 01 Dec 2024 09:06:28 +0000
ROA not before:           Sun 01 Dec 2024 09:01:28 +0000
ROA not after:            Sun 30 Nov 2025 09:06:28 +0000
asID:                     23470
IP address blocks:        128.254.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Mar 2025 23:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:28:7d:4b:90:9f:9f:72:1d:5b:f3:98:9b:31:86:69:f2:fc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  1 09:01:28 2024 GMT
            Not After : Nov 30 09:06:28 2025 GMT
        Subject: CN=A354706AA2FB500E2D916C3815CDF071C657EB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:d4:c0:78:9a:47:41:3b:97:8b:04:24:18:
                    7e:50:8b:1c:22:0c:13:0c:07:17:c7:bd:db:92:4f:
                    02:3f:24:20:bc:7a:a3:9c:85:35:ca:86:e9:b7:fc:
                    09:88:60:c7:c0:d3:d0:ee:74:3a:94:80:a4:3a:b0:
                    62:d9:01:b8:1b:c2:f4:da:71:f1:09:a2:1b:50:76:
                    56:b8:28:86:1e:30:2c:88:93:32:83:b0:0f:cb:6f:
                    ea:c9:99:a1:88:4e:45:c5:c5:2c:11:92:42:04:9b:
                    8f:97:43:64:1d:ff:23:92:f8:d4:f2:16:fe:3a:ad:
                    b8:c4:a4:c4:2b:57:ab:4b:ec:68:d2:99:95:24:f7:
                    b6:fe:1b:06:2c:b6:18:4c:3b:13:f6:4c:d8:2e:69:
                    02:10:48:8e:aa:5b:fb:9f:27:fa:2b:22:61:c6:d5:
                    f2:64:32:07:01:8c:6b:5d:26:f8:d8:f7:98:8e:bb:
                    15:f4:18:de:32:08:90:f8:fe:c0:a3:94:c7:4a:45:
                    df:14:fe:e1:9a:48:f2:f1:52:0a:34:dd:50:ed:3d:
                    2d:1c:d0:0a:8d:32:88:9c:94:0f:bd:35:4a:d8:26:
                    4b:8e:5b:ee:81:c0:46:e4:60:03:83:2a:b7:81:00:
                    39:30:f6:b1:7a:e1:65:91:2c:73:a8:19:f0:6a:af:
                    b8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:54:70:6A:A2:FB:50:0E:2D:91:6C:38:15:CD:F0:71:C6:57:EB:09
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:2d:cc:28:d5:a4:1e:2c:43:9d:4d:dc:b3:6c:67:c0:62:
         52:56:3c:a0:38:c5:f9:e3:82:31:d2:2c:a6:9b:32:29:68:0e:
         99:37:26:1b:8f:e5:03:d0:ce:91:92:12:58:48:7d:35:d3:02:
         ec:f5:1c:c0:7f:3f:97:3b:e2:2b:26:45:cb:e4:14:81:9c:1a:
         6c:47:b6:90:2b:d2:d1:90:41:27:6a:97:aa:7e:c5:07:db:f5:
         d1:d7:b3:8c:c9:50:e3:20:42:52:54:bf:43:9e:de:ed:a8:a5:
         cc:c5:7b:8b:68:c9:bb:91:a2:72:e9:46:b4:91:b4:26:96:98:
         47:79:e3:d7:f3:63:c5:a7:36:9f:aa:76:20:06:46:97:cb:19:
         52:da:28:61:b1:72:56:3a:ad:7e:a2:12:52:be:6e:42:8f:65:
         f6:59:ee:23:45:37:fe:9c:ae:d5:88:1b:14:b3:08:ff:96:64:
         29:fd:1a:28:21:28:f4:21:c6:3f:ee:7f:e6:a0:ac:82:c8:0e:
         dd:69:b3:84:db:f0:4e:84:ab:6a:61:db:96:b8:c3:e5:e3:8f:
         52:a3:ff:5a:f6:c9:b7:3c:7f:94:9b:2c:ba:87:db:21:57:30:
         b6:8e:3a:31:a1:18:01:4e:5f:21:55:2c:be:7f:86:3c:c1:6d:
         7d:e3:06:c0
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUcdkofUuQn59yHVvzmJsxhmny/MEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjQxMjAxMDkwMTI4WhcNMjUxMTMwMDkwNjI4
WjAzMTEwLwYDVQQDEyhBMzU0NzA2QUEyRkI1MDBFMkQ5MTZDMzgxNUNERjA3MUM2
NTdFQjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZvUwHiaR0E7
l4sEJBh+UIscIgwTDAcXx73bkk8CPyQgvHqjnIU1yobpt/wJiGDHwNPQ7nQ6lICk
OrBi2QG4G8L02nHxCaIbUHZWuCiGHjAsiJMyg7APy2/qyZmhiE5FxcUsEZJCBJuP
l0NkHf8jkvjU8hb+Oq24xKTEK1erS+xo0pmVJPe2/hsGLLYYTDsT9kzYLmkCEEiO
qlv7nyf6KyJhxtXyZDIHAYxrXSb42PeYjrsV9BjeMgiQ+P7Ao5THSkXfFP7hmkjy
8VIKNN1Q7T0tHNAKjTKInJQPvTVK2CZLjlvugcBG5GADgyq3gQA5MPaxeuFlkSxz
qBnwaq+4xQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKNUcGqi+1AOLZFsOBXN8HHG
V+sJMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7MMA0GCSqGSIb3DQEB
CwUAA4IBAQAnvC3MKNWkHixDnU3cs2xnwGJSVjygOMX544Ix0iymmzIpaA6ZNyYb
j+UD0M6RkhJYSH010wLs9RzAfz+XO+IrJkXL5BSBnBpsR7aQK9LRkEEnapeqfsUH
2/XR17OMyVDjIEJSVL9Dnt7tqKXMxXuLaMm7kaJy6Ua0kbQmlphHeePX82PFpzaf
qnYgBkaXyxlS2ihhsXJWOq1+ohJSvm5Cj2X2We4jRTf+nK7ViBsUswj/lmQp/Roo
ISj0IcY/7n/moKyCyA7dabOE2/BOhKtqYduWuMPl449So/9a9sm3PH+Umyy6h9sh
VzC2jjoxoRgBTl8hVSy+f4Y8wW194wbA
-----END CERTIFICATE-----
Generated at Thu Mar 13 17:03:22 2025 by rpki-client