Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          l0uUHUHmbd4a3vXcutzBHXS3sMBqXFOMp9h/hdFd9vg=
Subject key identifier:   8F:16:09:56:50:3B:49:0A:91:A3:71:A5:0E:72:83:81:7B:2B:B3:E7
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       03AA0836896FC7E4CE0C5174E7BD80C69DEF6501
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Dec 2023 02:44:20 +0000
ROA not before:           Tue 05 Dec 2023 02:39:20 +0000
ROA not after:            Tue 03 Dec 2024 02:44:20 +0000
asID:                     23470
IP address blocks:        128.254.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 11:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:aa:08:36:89:6f:c7:e4:ce:0c:51:74:e7:bd:80:c6:9d:ef:65:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec  5 02:39:20 2023 GMT
            Not After : Dec  3 02:44:20 2024 GMT
        Subject: CN=8F160956503B490A91A371A50E7283817B2BB3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:ec:7c:6f:f0:8b:9b:19:e3:be:b6:49:ea:
                    96:2d:c8:e3:01:83:f7:2f:94:da:61:f2:3f:5c:0f:
                    80:b9:c8:a9:36:28:16:cf:3a:9f:e4:12:f2:ee:c4:
                    1d:ab:a5:32:ff:19:6f:fb:0b:79:29:67:d3:ee:e4:
                    92:28:74:af:a1:fb:17:46:a6:e0:2e:4e:ae:b9:8a:
                    87:72:4c:1f:99:3e:2b:97:2a:28:b7:86:74:ec:dd:
                    a8:41:d9:e3:83:75:ca:0c:e9:6a:48:93:a4:be:c7:
                    9a:a1:24:72:11:53:3f:03:fc:3e:61:52:43:2d:3e:
                    57:14:84:e9:d7:eb:e9:c7:2b:39:f7:e8:b3:91:b0:
                    c4:8c:f0:33:5e:72:1d:f4:f9:c1:93:f3:d6:6e:1c:
                    97:3b:99:75:cd:19:f4:8d:93:5a:21:54:11:51:b6:
                    61:ce:df:12:df:65:7e:aa:21:80:e8:e9:82:6d:f1:
                    11:f6:75:5f:0d:e9:23:e4:35:4e:1e:99:ca:37:c9:
                    2a:f7:68:8b:87:d5:60:cd:03:14:46:c1:32:6b:87:
                    29:55:18:a0:56:f4:29:c2:a9:6e:4a:9d:5f:d2:c5:
                    11:87:f7:bd:92:32:3f:33:5d:61:26:86:3d:e2:4d:
                    a3:07:49:25:69:4c:d0:98:db:84:86:3d:fa:34:c7:
                    eb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:16:09:56:50:3B:49:0A:91:A3:71:A5:0E:72:83:81:7B:2B:B3:E7
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:49:97:2b:ec:f9:44:1e:44:07:15:a6:e8:d7:e9:f1:6d:c7:
         e8:f5:45:49:fd:52:07:9e:7d:46:0c:c9:a7:b8:cc:7c:75:af:
         13:25:87:0a:94:ce:df:61:1e:9d:62:2c:01:03:4f:1e:b3:23:
         34:d9:f7:24:f7:57:e0:58:43:cd:73:17:f7:d2:be:2e:79:98:
         16:78:d3:d9:9f:36:bc:14:d4:06:92:69:30:e2:14:d8:5f:e2:
         b7:c3:5e:cc:e8:cb:94:9c:c8:d1:15:20:c6:0e:f0:f1:28:61:
         02:6c:4a:b6:60:69:20:17:a5:73:4c:77:4e:45:7b:d9:9a:bc:
         23:73:bd:dc:78:a9:aa:35:7f:9a:6c:9f:d8:13:ac:01:ac:f8:
         8f:fc:79:79:90:ee:36:5e:ff:75:2b:7e:0b:00:3d:92:52:78:
         23:60:24:ab:55:7f:5e:44:83:c4:bd:96:20:34:11:2b:e7:ab:
         b6:ac:7a:3e:44:ce:90:d4:2a:b0:33:2d:5f:67:36:96:86:30:
         4c:a4:ce:20:4e:d5:2b:38:22:44:e0:2e:aa:b3:04:e0:d1:d5:
         4d:b5:cd:98:50:be:99:be:07:ae:26:40:6d:45:87:d7:03:57:
         5a:53:fe:20:e5:ed:94:1c:7d:b3:39:02:6b:0f:22:02:d1:3e:
         46:b2:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 11:24:54 2024 by rpki-client on console-fra.rpki-client.org