Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa
File:                     3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa (raw, json)
Hash identifier:          7FhRi3oiz02WhlMajJbej2kGdBuu5YXiHa5d9yaNrVI=
Subject key identifier:   CE:2F:F5:9F:B1:9A:62:85:C6:B3:1B:E5:9F:51:27:E8:7C:94:7B:87
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       1519F16D53C16F806A4B4BDA2C87A6DF6C11B431
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa
Signing time:             Mon 12 Aug 2024 09:28:14 +0000
ROA not before:           Mon 12 Aug 2024 09:23:14 +0000
ROA not after:            Mon 11 Aug 2025 09:28:14 +0000
asID:                     153195
IP address blocks:        128.254.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:19:f1:6d:53:c1:6f:80:6a:4b:4b:da:2c:87:a6:df:6c:11:b4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Aug 12 09:23:14 2024 GMT
            Not After : Aug 11 09:28:14 2025 GMT
        Subject: CN=CE2FF59FB19A6285C6B31BE59F5127E87C947B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:85:47:13:88:56:35:6e:84:b5:79:5f:f2:
                    42:a5:b2:4a:db:c2:a3:d8:ae:65:87:7a:42:4f:bf:
                    a5:d4:94:d1:ae:c0:be:e5:e9:b2:56:53:3f:f4:f3:
                    40:40:b5:79:26:89:65:2a:e4:f5:90:0a:91:dd:1c:
                    7e:cc:6b:45:47:22:84:5e:8d:aa:c8:7f:40:d0:97:
                    5c:fe:0b:99:86:05:c9:38:fb:35:4f:1e:cc:d9:a2:
                    88:65:40:e7:4b:fa:70:78:3d:7a:3e:29:d8:98:50:
                    54:81:ae:37:6e:70:a3:f0:92:c3:c0:7d:d9:27:75:
                    b8:86:c9:56:a8:1f:a9:66:b3:5d:c9:01:6c:3d:3b:
                    e8:3c:9a:d4:de:2d:23:cc:77:f7:88:17:e4:1c:a5:
                    a6:57:87:a7:b4:1d:2b:86:7a:f7:b1:9a:bb:ca:9f:
                    5f:a1:36:fe:93:1c:c1:db:88:e0:09:9c:9f:69:cb:
                    88:9e:f2:9e:84:ec:1b:13:b7:33:b6:f8:02:12:dc:
                    51:4f:4b:d1:83:7c:6e:c9:67:18:99:f9:7c:f9:eb:
                    ff:e5:8b:dd:d1:39:e6:a3:67:12:bf:0f:ae:2e:1a:
                    d3:9b:f6:f5:bc:fd:d6:1e:61:82:19:fa:a5:6f:71:
                    b3:21:74:8d:18:8b:bf:4b:a9:ae:65:aa:04:fb:60:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2F:F5:9F:B1:9A:62:85:C6:B3:1B:E5:9F:51:27:E8:7C:94:7B:87
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20313533313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:c0:c0:5a:d1:01:df:2a:c3:92:c0:c5:f4:e8:7d:1b:5f:
         e9:55:d2:40:25:f6:aa:dc:c3:ed:90:53:5a:98:15:53:31:0d:
         05:19:ff:b4:9d:64:11:92:d9:70:36:43:30:64:60:83:a4:9e:
         a5:3a:70:e7:8c:6f:76:8e:75:9a:29:07:02:29:70:8d:b9:88:
         27:3d:91:02:e2:d5:f1:7e:96:12:81:42:be:63:00:08:2b:4d:
         a7:a6:b8:b7:b3:cb:d4:a5:fe:04:d4:53:24:79:ca:c1:48:8d:
         e9:0c:08:7b:9e:ca:30:fe:81:ee:ac:b6:f7:7f:7f:52:2f:50:
         60:71:57:7e:bc:62:00:ad:c5:20:de:d7:3f:39:a4:c5:68:d4:
         33:02:44:b8:1d:2f:29:32:77:56:1f:55:e9:80:7c:65:4b:6c:
         d5:9d:fe:e5:33:b2:f8:0e:82:9b:ad:af:a6:e0:e1:4c:a0:9f:
         c7:84:f8:56:09:19:3e:b6:91:b2:d1:a6:0e:e9:f0:70:0e:f2:
         a2:80:cb:40:d4:6c:10:57:e3:91:e5:e3:a6:eb:fe:5c:c2:f5:
         1e:b5:ca:a1:eb:0b:2a:65:05:9b:a7:80:51:7b:85:1e:bf:c6:
         b3:1c:f2:b3:d3:ce:d6:9b:a2:21:06:6c:1f:61:dc:2a:3b:85:
         42:c6:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org