Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          /UhinX9mbbSUxPJVGi8FM05lHC56G8Xuom0D/7pRIJo=
Subject key identifier:   A9:E5:2F:0A:13:19:FB:FC:AD:2B:7B:72:9E:A9:E4:A9:0F:8B:51:40
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       03270E87FC2F47104AC081F5D17EA77B4F564913
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 05 Nov 2024 03:40:11 +0000
ROA not before:           Tue 05 Nov 2024 03:35:11 +0000
ROA not after:            Tue 04 Nov 2025 03:40:11 +0000
asID:                     23470
IP address blocks:        128.254.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:27:0e:87:fc:2f:47:10:4a:c0:81:f5:d1:7e:a7:7b:4f:56:49:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov  5 03:35:11 2024 GMT
            Not After : Nov  4 03:40:11 2025 GMT
        Subject: CN=A9E52F0A1319FBFCAD2B7B729EA9E4A90F8B5140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e9:b0:9b:a7:e9:9f:e9:5f:98:be:0c:b9:e4:
                    ef:d6:b0:d5:0d:45:cc:11:75:dc:05:32:b1:ee:59:
                    2b:9f:e7:12:54:de:de:c4:60:21:57:65:06:55:06:
                    23:33:e3:e2:e1:16:1b:09:ac:55:d5:80:d7:23:d6:
                    67:f7:4e:c2:13:83:7a:e6:72:d6:3c:6b:78:82:af:
                    09:5e:c8:4b:ae:4c:22:dc:44:34:aa:71:28:41:3c:
                    2a:e1:3e:ea:45:92:78:ae:ec:aa:0c:c8:da:d8:78:
                    bf:9a:61:55:5a:2b:63:53:8c:b1:e0:8d:0f:9c:45:
                    79:7c:69:cb:73:1b:a9:61:35:4b:7b:db:ee:c3:58:
                    e8:85:41:3c:47:cb:54:bd:65:cd:26:53:a7:bc:e9:
                    c3:f0:36:83:d0:fb:c6:40:73:7c:b5:56:51:ec:81:
                    ae:f3:02:d7:1a:25:5e:a9:22:9c:af:93:f8:73:71:
                    c3:bf:3b:b5:5a:38:d0:a9:86:5a:91:49:cc:81:2d:
                    45:29:79:76:7b:c6:a9:eb:02:78:d0:71:28:f3:58:
                    fe:cd:cf:23:46:fc:fd:11:dd:1d:39:35:71:08:ea:
                    2b:e7:42:1e:a2:5f:e7:7d:98:2a:fd:28:4b:97:5e:
                    cf:57:a4:4c:93:0b:f8:f6:64:45:f1:c7:0e:b0:ff:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:2F:0A:13:19:FB:FC:AD:2B:7B:72:9E:A9:E4:A9:0F:8B:51:40
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:81:59:bd:e6:32:ad:dd:0d:60:d6:99:e0:a5:c8:c2:cd:
         98:cb:9e:c9:d2:00:e4:f0:a2:62:3b:af:c2:e1:10:f3:e2:d8:
         9f:18:49:74:34:b6:92:22:30:e7:70:79:ef:f8:ef:2d:a1:a0:
         6b:e6:74:14:59:3b:84:f6:44:15:06:7d:0c:18:5f:4a:40:b7:
         f5:84:54:1c:22:eb:46:7e:3d:40:ae:2c:63:b6:4a:7f:fa:24:
         92:24:a3:45:0f:fc:53:63:d1:f6:55:f3:40:82:91:2c:54:6e:
         4c:41:28:3d:ca:c4:f1:bb:c4:c2:54:40:22:d0:d6:57:f4:5c:
         ad:60:35:c3:7e:28:b0:1d:7c:a5:c9:d0:ed:ac:3c:57:c1:c0:
         a2:69:ca:74:5c:08:47:15:b6:30:a7:ea:16:8f:12:20:7d:b5:
         be:7c:a0:ef:23:ba:70:cb:b2:97:06:35:cf:a4:9d:1e:7c:b0:
         9a:45:45:80:f3:d8:58:ed:be:2f:c8:d2:3a:c8:42:01:3d:d2:
         8f:90:27:ba:93:10:5b:69:e7:d0:c5:bb:01:e9:4f:a7:3b:ea:
         ba:39:de:71:25:c0:4b:38:2e:18:b8:91:a2:6e:ac:12:bf:a2:
         78:54:00:4a:1b:3f:7c:7c:ea:c6:5a:e4:46:a4:13:21:ce:24:
         cf:a9:7a:86
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUAycOh/wvRxBKwIH10X6ne09WSRMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjQxMTA1MDMzNTExWhcNMjUxMTA0MDM0MDEx
WjAzMTEwLwYDVQQDEyhBOUU1MkYwQTEzMTlGQkZDQUQyQjdCNzI5RUE5RTRBOTBG
OEI1MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Omwm6fpn+lf
mL4MueTv1rDVDUXMEXXcBTKx7lkrn+cSVN7exGAhV2UGVQYjM+Pi4RYbCaxV1YDX
I9Zn907CE4N65nLWPGt4gq8JXshLrkwi3EQ0qnEoQTwq4T7qRZJ4ruyqDMja2Hi/
mmFVWitjU4yx4I0PnEV5fGnLcxupYTVLe9vuw1johUE8R8tUvWXNJlOnvOnD8DaD
0PvGQHN8tVZR7IGu8wLXGiVeqSKcr5P4c3HDvzu1WjjQqYZakUnMgS1FKXl2e8ap
6wJ40HEo81j+zc8jRvz9Ed0dOTVxCOor50Ieol/nfZgq/ShLl17PV6RMkwv49mRF
8ccOsP8W7wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKnlLwoTGfv8rSt7cp6p5KkP
i1FAMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7PMA0GCSqGSIb3DQEB
CwUAA4IBAQASHYFZveYyrd0NYNaZ4KXIws2Yy57J0gDk8KJiO6/C4RDz4tifGEl0
NLaSIjDncHnv+O8toaBr5nQUWTuE9kQVBn0MGF9KQLf1hFQcIutGfj1Arixjtkp/
+iSSJKNFD/xTY9H2VfNAgpEsVG5MQSg9ysTxu8TCVEAi0NZX9FytYDXDfiiwHXyl
ydDtrDxXwcCiacp0XAhHFbYwp+oWjxIgfbW+fKDvI7pwy7KXBjXPpJ0efLCaRUWA
89hY7b4vyNI6yEIBPdKPkCe6kxBbaefQxbsB6U+nO+q6Od5xJcBLOC4YuJGibqwS
v6J4VABKGz98fOrGWuRGpBMhziTPqXqG
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org