Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20313336333539.roa
File:                     3130342e3235342e3230392e302f32342d3234203d3e20313336333539.roa (raw, json)
Hash identifier:          eikDwxfGFnbahikThzZpOnTK2nw0bFJmHqi+T2/n1ak=
Subject key identifier:   A0:BD:A2:FF:28:CB:EE:E9:F5:88:3F:16:35:C7:BD:9D:F4:8B:94:57
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       27EFEC75B7AE2D717EBCDAFB6DE4B6E6D68D061F
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20313336333539.roa
Signing time:             Thu 20 Feb 2025 17:09:40 +0000
ROA not before:           Thu 20 Feb 2025 17:04:40 +0000
ROA not after:            Thu 19 Feb 2026 17:09:40 +0000
asID:                     136359
IP address blocks:        104.254.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ef:ec:75:b7:ae:2d:71:7e:bc:da:fb:6d:e4:b6:e6:d6:8d:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Feb 20 17:04:40 2025 GMT
            Not After : Feb 19 17:09:40 2026 GMT
        Subject: CN=A0BDA2FF28CBEEE9F5883F1635C7BD9DF48B9457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:88:59:4a:2f:2a:0f:98:bd:c3:04:4e:e3:fb:
                    98:ed:5f:3a:f4:aa:a4:8b:96:26:d4:23:de:4c:06:
                    11:67:00:24:64:76:57:ae:b8:cc:4a:a6:38:90:09:
                    63:84:ff:ae:bf:db:79:96:d1:ff:4b:d5:c7:37:c7:
                    85:40:1e:80:2b:5b:2f:6d:e0:b4:90:3a:b3:20:be:
                    9d:4c:ae:7e:41:40:77:78:d6:c4:e0:9d:df:6c:16:
                    62:fb:4c:0a:cf:1d:0f:df:2e:65:87:82:3c:43:c9:
                    24:63:19:bd:b6:74:eb:b2:2a:bd:8b:c8:fb:f7:9c:
                    59:1c:a2:31:67:13:8b:ea:df:8f:07:2a:96:f6:21:
                    0f:dd:20:70:08:dd:61:4f:f7:5b:1d:88:97:01:ee:
                    45:3b:ce:d4:a9:14:bd:67:08:33:91:87:c4:1b:72:
                    14:64:d0:0b:d3:ae:45:c2:7b:47:ca:54:44:3a:01:
                    fc:f9:c3:89:89:59:0a:9e:f0:92:3c:87:4b:f3:c7:
                    1f:3a:87:cc:39:26:8d:c5:1a:92:a4:4c:40:28:77:
                    a8:97:df:1c:87:b4:a3:5c:09:da:2a:0e:d2:19:fa:
                    c3:1f:a1:df:9d:d9:85:2a:70:97:2c:c7:ae:c2:e6:
                    05:dd:d8:3f:f7:48:8d:99:b7:3d:0e:fa:85:55:f2:
                    1a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:BD:A2:FF:28:CB:EE:E9:F5:88:3F:16:35:C7:BD:9D:F4:8B:94:57
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20313336333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a1:f6:fa:2d:2f:f3:19:bf:11:37:b9:94:fb:dc:7b:69:dd:
         22:ea:65:fb:99:df:43:36:12:85:f3:9a:bc:a5:71:13:b0:32:
         24:5a:c5:f6:e0:7a:ba:15:d4:e8:4a:ec:2e:81:81:20:bb:23:
         26:f3:39:5f:e3:51:2b:45:e5:2b:f1:b2:d3:31:c7:9d:b7:a1:
         8b:bc:e5:fc:27:d0:12:21:3f:7d:42:e1:b9:7f:7e:c3:3c:43:
         18:a0:ea:ba:0c:ee:ee:ee:e0:f8:50:b6:c8:90:33:87:e1:7f:
         5b:17:5b:d2:e3:10:b5:91:b2:af:78:28:2d:c4:4c:c0:36:43:
         df:e2:d4:5f:30:38:a3:bc:77:6f:5f:ad:47:9d:5c:8a:71:fc:
         8e:72:ad:91:f6:ab:24:43:6b:06:a7:9f:43:b6:fe:b6:ad:17:
         46:1f:cc:42:37:fb:a7:8c:0a:af:10:21:be:fa:10:4d:11:33:
         9e:dc:82:eb:3b:c2:ff:7e:75:39:6a:0b:3a:37:1a:ce:7c:d3:
         b9:08:04:d6:37:74:e5:f1:e6:ac:fd:90:b4:ef:9f:39:2e:a7:
         a6:c6:07:69:6c:d0:83:11:a7:ae:76:c5:52:a0:64:36:52:74:
         c4:19:1c:d1:d3:28:03:86:24:2f:fd:e1:e7:ec:45:94:23:e3:
         a9:17:57:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:08 2025 by rpki-client