Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa
File:                     3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa (raw, json)
Hash identifier:          Q+alHffHg60JCaIiAO3fXLPd+UnQTm9FS4UlMbEHUQg=
Subject key identifier:   4A:C5:9C:B7:A8:21:C1:6D:A7:0A:24:21:A6:38:25:80:67:EB:DB:56
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       6076458F60B3A6979688A784DF41BB87F5D70DDD
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa
Signing time:             Thu 03 Apr 2025 22:15:48 +0000
ROA not before:           Thu 03 Apr 2025 22:10:48 +0000
ROA not after:            Thu 02 Apr 2026 22:15:48 +0000
asID:                     399765
IP address blocks:        128.254.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 17:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:76:45:8f:60:b3:a6:97:96:88:a7:84:df:41:bb:87:f5:d7:0d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Apr  3 22:10:48 2025 GMT
            Not After : Apr  2 22:15:48 2026 GMT
        Subject: CN=4AC59CB7A821C16DA70A2421A638258067EBDB56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3d:24:1b:a6:45:21:fd:19:a3:7c:09:45:a5:
                    c7:cb:4c:ea:03:33:17:01:88:4c:8d:ee:b4:cf:0e:
                    28:4d:40:f7:82:02:11:a6:0c:6b:eb:3b:10:07:cf:
                    4a:e1:9b:df:d1:d4:cc:9a:4b:ed:64:58:54:dc:13:
                    28:9e:24:13:24:c4:d7:4a:58:05:0b:22:f4:b6:ee:
                    4c:ab:ff:08:6e:1c:ff:25:70:07:d8:5d:35:64:ad:
                    ef:9b:8b:ec:b0:27:4d:ae:5d:7b:88:b7:74:0b:dc:
                    d4:81:37:41:57:23:00:36:fb:c7:ea:59:1c:cb:d3:
                    83:72:b3:23:08:58:a0:1c:b3:98:de:c2:96:7f:1e:
                    b6:d8:04:71:04:f9:6a:a6:31:4b:e5:22:66:ce:04:
                    94:0e:07:07:37:05:d6:53:1b:f7:51:f6:57:3d:09:
                    18:c1:43:8e:52:60:21:12:d9:b0:f3:2e:f8:bf:06:
                    63:72:fd:f8:d5:38:81:cc:70:e9:36:e3:0e:72:ac:
                    cf:0c:36:c1:79:82:e3:df:e1:ec:db:86:9e:a4:33:
                    8a:87:77:ec:4d:ce:6f:39:06:ec:0d:89:b1:09:19:
                    ca:0e:3e:7a:e9:b2:71:9e:19:ba:3e:37:43:bd:3c:
                    13:ab:d1:36:c1:6a:46:55:d8:a4:e3:fc:87:5f:05:
                    a5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C5:9C:B7:A8:21:C1:6D:A7:0A:24:21:A6:38:25:80:67:EB:DB:56
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:20:63:aa:ab:25:0f:9d:c2:6b:2a:c7:2f:b0:e3:04:f1:50:
         90:cd:48:e7:d3:7c:e2:50:72:0c:8d:cf:b7:bd:a2:28:df:18:
         da:79:08:0a:bb:d1:fd:d6:7b:ac:f5:8f:97:f7:ce:03:2f:51:
         04:ee:9f:59:1b:30:3e:b4:25:d6:b2:2e:69:8c:78:43:1d:0b:
         52:35:e6:69:69:42:75:4a:9d:c2:d3:98:72:5a:5d:a1:4f:ad:
         0c:c5:94:83:58:d3:a1:cf:2c:eb:65:37:d5:84:57:09:77:cd:
         d8:9a:94:36:2b:56:f0:96:ae:cd:29:59:a5:fe:76:f1:98:24:
         fe:d5:1f:6d:a9:8c:10:5d:e7:0d:87:75:b9:f2:23:79:07:66:
         fd:07:f5:04:46:de:6b:bd:63:1a:e6:7d:d3:b2:7a:52:1c:ef:
         15:a3:f9:1e:9c:d2:59:dd:1c:5a:51:59:0c:bc:4c:c3:1e:e2:
         ae:39:62:c9:8c:4c:5b:d6:d9:2b:b6:23:dd:82:49:3d:8a:91:
         71:b4:79:de:b3:8f:75:d4:26:2e:f1:f5:81:dd:2e:d4:61:bd:
         96:be:15:15:3f:11:bb:61:ac:53:59:d1:f6:de:73:91:e2:a7:
         10:c4:02:55:a4:a9:a4:1b:6e:98:68:d7:3f:a6:73:51:ed:1c:
         6d:57:3b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:17 2025 by rpki-client