Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
File:                     3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          yp3YcwXvUNLy3Uxm22s0TTixJq25vXr98K7Ih0cGUkk=
Subject key identifier:   47:13:AC:F9:60:F3:F0:99:83:9E:26:FC:7E:07:F9:3C:02:7A:6E:93
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       17B8AA90F8D826983B8E8D168E9A660F69070E9A
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     7018
IP address blocks:        128.254.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 05:33:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b8:aa:90:f8:d8:26:98:3b:8e:8d:16:8e:9a:66:0f:69:07:0e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=4713ACF960F3F099839E26FC7E07F93C027A6E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:56:27:e4:76:71:0b:5e:85:4c:3e:41:c0:
                    45:47:aa:39:aa:31:7c:19:e1:1c:3e:2b:d5:b5:45:
                    41:2a:a5:ab:0c:bc:6a:a9:ed:ba:bd:0b:0e:55:1d:
                    56:e9:57:86:a2:2c:05:9d:70:bb:1b:6d:8f:59:c4:
                    62:60:ba:cf:2c:fa:7a:16:88:78:a7:5b:fd:18:fa:
                    f1:4c:11:3a:8b:29:cc:a4:90:94:50:bc:0b:20:2f:
                    d9:f8:61:26:17:b3:5c:18:81:85:44:9f:4a:d8:9c:
                    4d:bd:2f:aa:44:15:67:fe:85:5e:95:d5:41:da:09:
                    31:d8:32:19:b9:fd:79:10:be:91:7b:59:df:e8:5b:
                    b2:02:bf:72:91:a8:dd:62:fa:52:96:4f:77:60:5b:
                    08:ee:72:80:dd:20:9b:f0:23:19:dd:0e:35:dc:47:
                    5c:59:b3:86:16:10:b7:c9:2d:93:43:c6:f3:f1:c3:
                    63:36:4e:d8:68:5e:10:a3:b5:0c:85:6c:26:ca:c0:
                    8e:3a:81:cc:eb:b2:c6:76:4b:c5:a2:a0:ea:19:5b:
                    22:e6:08:14:4d:72:e7:95:94:0a:5e:42:c1:4c:d5:
                    56:8a:f9:f8:dc:61:b6:55:4e:97:2b:a2:e5:a1:95:
                    3a:57:bb:3b:d1:f7:81:b7:ae:2c:14:d9:c7:9c:b7:
                    af:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:AC:F9:60:F3:F0:99:83:9E:26:FC:7E:07:F9:3C:02:7A:6E:93
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:43:e4:74:b8:5d:f9:01:40:b4:08:ec:d7:a8:58:81:d4:ac:
         95:47:42:ca:5b:48:d3:30:6d:b6:2f:6f:c5:1a:f6:83:9b:95:
         5a:88:80:b6:33:26:55:15:cc:4e:7e:3b:1e:e9:ea:47:19:97:
         62:d0:01:ed:ae:38:53:a1:fa:ed:f0:49:c7:bc:d9:4d:18:e9:
         45:0c:ea:ab:62:e1:03:ae:4a:b0:5f:e7:3b:a2:e6:a1:14:20:
         55:c5:38:a6:9d:79:a1:f0:67:76:43:0a:87:42:4f:f7:24:2e:
         8f:b3:ae:cf:2d:8d:02:81:c8:49:e7:f1:86:84:f0:62:76:ae:
         de:fe:94:e0:87:ac:6c:8f:4b:81:a8:68:b8:b5:76:db:03:64:
         24:55:f2:10:7c:85:39:0c:43:f7:cf:a7:a5:ac:87:4c:8c:f5:
         e8:d0:ff:53:35:d6:74:b3:67:b6:a7:25:9d:fb:b1:65:57:37:
         5d:79:ca:21:6f:89:26:d0:fd:fe:d0:27:c6:20:1a:e5:0a:a0:
         a8:f6:4a:b8:8b:ae:f4:fa:19:79:60:d9:d9:d0:ee:0b:e0:18:
         7d:d8:36:cc:da:fa:7b:8d:c1:a0:44:73:a0:6c:8e:5f:66:7d:
         41:2f:e4:72:91:62:7c:87:a8:59:31:67:4b:95:01:61:36:ce:
         ae:9f:d9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 06:16:35 2024 by rpki-client on console-ams.rpki-client.org