Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
File:                     3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          8v7ZkiEhKrHemNoomb44z4cQg2gM2FWiZOOjAjSlZ5w=
Subject key identifier:   DD:75:44:AF:31:C3:D7:9E:93:9F:DD:4A:9A:1B:7D:E7:8E:CB:9B:4A
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       4A84541187CBF871F3E584662861E75AE74433D3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     7018
IP address blocks:        128.254.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 21:34:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:84:54:11:87:cb:f8:71:f3:e5:84:66:28:61:e7:5a:e7:44:33:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=DD7544AF31C3D79E939FDD4A9A1B7DE78ECB9B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:1e:b6:b3:94:07:a9:91:3a:8c:2c:80:ee:
                    5c:93:c4:64:e4:57:6d:a4:eb:f9:55:a8:c1:b5:71:
                    45:0f:48:99:5b:24:bc:ea:f1:1f:28:a6:5a:b8:68:
                    1c:95:4d:a0:3c:e9:45:e4:5c:d5:d8:54:47:1e:f0:
                    7c:ad:b8:89:21:2e:d1:e6:78:cf:e6:56:78:7a:44:
                    57:d0:02:d9:e6:aa:01:1c:92:8a:4c:61:bd:03:4a:
                    36:6b:e2:6c:80:0f:80:0b:fa:67:3d:48:33:a8:ce:
                    de:a3:fd:87:0a:1d:1b:3b:e0:74:ae:a0:47:89:88:
                    d0:61:01:67:a5:ae:49:c9:15:7b:cb:7d:da:9f:ca:
                    d7:f4:95:d2:63:c2:75:1d:0e:b3:d5:e0:8d:00:ef:
                    fc:fc:3a:f9:2a:2c:8b:ab:0e:18:57:6d:f5:94:22:
                    d5:68:ad:fb:31:90:92:93:82:9a:72:42:39:69:aa:
                    a0:04:2b:96:d6:a2:a8:e7:07:79:da:03:26:2d:1a:
                    88:94:b7:20:06:fa:e0:28:2d:f8:ae:15:a0:69:f0:
                    e6:cb:2e:2f:c9:61:6e:46:50:8e:33:81:a6:9b:2e:
                    b6:9e:d9:80:7b:d8:35:1f:89:c7:b1:cc:73:9a:ce:
                    1e:f9:bc:3e:09:ea:20:9d:c8:08:cc:4a:85:5d:52:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:75:44:AF:31:C3:D7:9E:93:9F:DD:4A:9A:1B:7D:E7:8E:CB:9B:4A
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:22:e6:ae:7f:e2:eb:bf:52:5e:9c:cc:41:b6:4e:62:71:eb:
         3d:56:da:d3:c4:c8:08:9c:da:8c:68:6f:27:63:f5:72:6c:f9:
         97:1b:49:aa:a4:9f:33:94:49:9d:86:aa:f2:d8:6e:20:0e:8a:
         04:66:b2:4b:9c:ed:f2:08:97:d4:89:b5:cc:bf:b8:5d:a3:8e:
         58:d6:7d:59:5d:03:77:20:08:06:77:9e:d4:f8:bb:ea:37:86:
         73:aa:a2:b1:fa:9e:38:42:e5:a9:73:91:86:b5:ef:79:c0:c6:
         2c:4a:95:5b:8d:0d:20:6a:33:eb:c0:fe:93:7f:b6:f9:99:72:
         0f:f1:7e:9c:22:4c:80:7c:b5:cb:7c:d1:36:af:7d:71:34:ba:
         78:e6:fe:8f:e1:b6:d8:20:ad:b5:34:85:cd:38:d2:96:bf:14:
         79:48:23:7b:8e:d7:cc:5e:2c:d2:a8:25:82:5e:da:09:67:34:
         6d:ca:8e:91:a2:29:88:d3:de:ad:f5:a3:a2:f4:b0:88:b2:9d:
         75:d4:1a:ce:cf:2e:2c:25:fc:69:9f:7f:d7:ed:25:b7:d0:7c:
         3e:f9:da:48:a4:28:fd:31:4a:10:a5:ab:25:6e:f0:c9:46:5e:
         bb:7f:b5:f3:76:f1:0f:7a:e3:ba:04:0f:4e:3e:51:91:16:00:
         e4:b7:4d:a2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSoRUEYfL+HHz5YRmKGHnWudEM9MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjMxMjA1MDIzOTIwWhcNMjQxMjAzMDI0NDIw
WjAzMTEwLwYDVQQDEyhERDc1NDRBRjMxQzNENzlFOTM5RkRENEE5QTFCN0RFNzhF
Q0I5QjRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTIetrOUB6mR
OowsgO5ck8Rk5FdtpOv5VajBtXFFD0iZWyS86vEfKKZauGgclU2gPOlF5FzV2FRH
HvB8rbiJIS7R5njP5lZ4ekRX0ALZ5qoBHJKKTGG9A0o2a+JsgA+AC/pnPUgzqM7e
o/2HCh0bO+B0rqBHiYjQYQFnpa5JyRV7y33an8rX9JXSY8J1HQ6z1eCNAO/8/Dr5
KiyLqw4YV231lCLVaK37MZCSk4KackI5aaqgBCuW1qKo5wd52gMmLRqIlLcgBvrg
KC34rhWgafDmyy4vyWFuRlCOM4Gmmy62ntmAe9g1H4nHscxzms4e+bw+CeogncgI
zEqFXVIsGwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFN11RK8xw9eek5/dSpobfeeO
y5tKMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAID+zjANBgkqhkiG9w0BAQsF
AAOCAQEAiSLmrn/i679SXpzMQbZOYnHrPVba08TICJzajGhvJ2P1cmz5lxtJqqSf
M5RJnYaq8thuIA6KBGayS5zt8giX1Im1zL+4XaOOWNZ9WV0DdyAIBnee1Pi76jeG
c6qisfqeOELlqXORhrXvecDGLEqVW40NIGoz68D+k3+2+ZlyD/F+nCJMgHy1y3zR
Nq99cTS6eOb+j+G22CCttTSFzTjSlr8UeUgje47XzF4s0qglgl7aCWc0bcqOkaIp
iNPerfWjovSwiLKdddQazs8uLCX8aZ9/1+0lt9B8PvnaSKQo/TFKEKWrJW7wyUZe
u3+183bxD3rjugQPTj5RkRYA5LdNog==
-----END CERTIFICATE-----
Generated at Wed Apr 24 20:29:10 2024 by rpki-client on console-fra.rpki-client.org