Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20313531313036.roa
File:                     3130342e3235342e3230392e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier:          BYSAHdiiHk8xoGPtBGQ1cjCdw/FANrKhJA7tzHhN5wc=
Subject key identifier:   85:BC:EF:26:8E:4D:4E:C5:28:AD:14:BF:E3:B1:98:7E:94:CF:F7:53
Certificate issuer:       /CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
Certificate serial:       2B3D6F1671DE04FBB19E862A4F62F1F004089563
Authority key identifier: A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20313531313036.roa
Signing time:             Sat 26 Oct 2024 19:08:43 +0000
ROA not before:           Sat 26 Oct 2024 19:03:43 +0000
ROA not after:            Sat 25 Oct 2025 19:08:43 +0000
asID:                     151106
IP address blocks:        104.254.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/9a69b8ce-24da-41b3-a08e-48d64c967360.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 10:41:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3d:6f:16:71:de:04:fb:b1:9e:86:2a:4f:62:f1:f0:04:08:95:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62
        Validity
            Not Before: Oct 26 19:03:43 2024 GMT
            Not After : Oct 25 19:08:43 2025 GMT
        Subject: CN=85BCEF268E4D4EC528AD14BFE3B1987E94CFF753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5e:19:32:a6:b5:93:37:1e:cb:e6:0f:ab:34:
                    6b:99:a8:f4:95:dd:b2:28:82:25:da:03:0c:79:4e:
                    68:cb:02:14:a4:c5:e9:6c:b1:fb:9a:15:40:32:71:
                    04:da:e1:5f:e3:12:0f:00:54:14:ed:70:a8:31:e7:
                    89:d1:1f:8f:47:29:cf:da:b9:04:aa:c7:02:0e:1c:
                    7c:d3:f1:28:91:46:99:a8:a4:fc:22:e9:53:f7:6b:
                    b9:95:2d:c2:15:07:c5:49:ae:82:85:c5:08:8a:39:
                    4c:7c:50:a2:ad:6d:98:14:7e:4d:71:02:07:96:8e:
                    11:e9:ec:7b:51:40:b8:68:07:1a:1d:82:c2:13:23:
                    46:7d:a1:94:30:12:81:59:7e:d5:21:f6:1d:6a:70:
                    c6:f3:98:32:c0:4b:26:1b:6e:5b:d6:a8:45:64:8b:
                    09:f8:5a:c7:8c:f7:22:1c:f1:6b:36:9b:c6:82:ed:
                    5d:bb:e2:79:9a:f1:7b:81:61:7b:9b:08:75:38:18:
                    95:56:be:56:2c:4e:08:28:60:82:0f:a4:60:77:6c:
                    7b:c1:cb:94:f6:14:70:3b:d7:70:a0:ff:62:cb:d9:
                    ba:56:d7:94:e7:a3:9c:85:e4:72:cf:42:76:a8:a5:
                    b0:7d:30:67:0b:dc:0a:97:e9:94:64:fe:69:8f:2f:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:EF:26:8E:4D:4E:C5:28:AD:14:BF:E3:B1:98:7E:94:CF:F7:53
            X509v3 Authority Key Identifier:
                keyid:A5:5F:FA:03:5C:73:0C:87:9A:1E:F2:63:74:E3:60:02:4D:6D:1F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/A55FFA035C730C879A1EF26374E360024D6D1F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a69b8ce-24da-41b3-a08e-48d64c967360/eace280cefac9f5faf74f0e1147a4af5299062f74ce0521b62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018968972e216de7/0/3130342e3235342e3230392e302f32342d3234203d3e20313531313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:32:6f:1c:0a:a9:b4:6d:7e:82:4d:8d:73:f5:ef:96:00:19:
         6f:fa:f5:57:cb:88:60:9b:50:25:04:ed:99:46:f9:3d:fc:99:
         0b:0f:ea:17:4e:6f:fc:1f:82:0b:4c:9a:41:6c:34:95:a5:34:
         a2:03:c7:85:24:c4:ff:c5:73:ff:77:01:87:92:35:2b:f4:38:
         17:b6:c5:5e:7f:e6:15:d4:0a:5b:72:6c:0b:71:c0:85:f5:6f:
         f4:23:4d:8c:d1:34:bc:59:91:49:8b:62:8d:21:18:88:da:6f:
         c6:ac:4f:df:85:bb:9a:f7:ff:e7:bb:80:ee:69:d5:85:06:05:
         dd:ca:3d:97:e6:af:97:e8:f9:6b:77:2b:00:0a:fa:72:d5:38:
         23:34:00:83:f7:47:70:dd:15:82:20:66:30:62:12:5f:46:ad:
         0e:38:c4:50:99:f0:84:d6:2d:cd:00:93:36:e5:03:4d:02:92:
         26:c6:76:11:9e:c7:be:39:2c:16:93:80:84:fe:77:c8:01:90:
         ee:51:42:ef:f4:d0:bd:15:f3:8f:04:26:f9:3f:9f:17:3f:21:
         15:02:39:50:95:7c:7a:5b:16:04:20:a4:ab:41:99:b7:52:63:
         4b:3b:01:73:64:ff:61:40:b0:f8:18:58:fd:90:49:d6:ae:91:
         b2:2b:07:ac
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUKz1vFnHeBPuxnoYqT2Lx8AQIlWMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWFjZTI4MGNlZmFjOWY1ZmFmNzRmMGUxMTQ3YTRhZjUy
OTkwNjJmNzRjZTA1MjFiNjIwHhcNMjQxMDI2MTkwMzQzWhcNMjUxMDI1MTkwODQz
WjAzMTEwLwYDVQQDEyg4NUJDRUYyNjhFNEQ0RUM1MjhBRDE0QkZFM0IxOTg3RTk0
Q0ZGNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V4ZMqa1kzce
y+YPqzRrmaj0ld2yKIIl2gMMeU5oywIUpMXpbLH7mhVAMnEE2uFf4xIPAFQU7XCo
MeeJ0R+PRynP2rkEqscCDhx80/EokUaZqKT8IulT92u5lS3CFQfFSa6ChcUIijlM
fFCirW2YFH5NcQIHlo4R6ex7UUC4aAcaHYLCEyNGfaGUMBKBWX7VIfYdanDG85gy
wEsmG25b1qhFZIsJ+FrHjPciHPFrNpvGgu1du+J5mvF7gWF7mwh1OBiVVr5WLE4I
KGCCD6Rgd2x7wcuU9hRwO9dwoP9iy9m6VteU56OcheRyz0J2qKWwfTBnC9wKl+mU
ZP5pjy/H2wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIW87yaOTU7FKK0Uv+OxmH6U
z/dTMB8GA1UdIwQYMBaAFKVf+gNccwyHmh7yY3TjYAJNbR8YMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5Njg5NzJlMjE2ZGU3LzAv
QTU1RkZBMDM1QzczMEM4NzlBMUVGMjYzNzRFMzYwMDI0RDZEMUYxOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzlhNjliOGNlLTI0ZGEtNDFiMy1hMDhlLTQ4ZDY0Yzk2NzM2MC9lYWNl
MjgwY2VmYWM5ZjVmYWY3NGYwZTExNDdhNGFmNTI5OTA2MmY3NGNlMDUyMWI2Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTY4
OTcyZTIxNmRlNy8wLzMxMzAzNDJlMzIzNTM0MmUzMjMwMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM1MzEzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo/tEwDQYJKoZIhvcN
AQELBQADggEBAIYybxwKqbRtfoJNjXP175YAGW/69VfLiGCbUCUE7ZlG+T38mQsP
6hdOb/wfggtMmkFsNJWlNKIDx4UkxP/Fc/93AYeSNSv0OBe2xV5/5hXUCltybAtx
wIX1b/QjTYzRNLxZkUmLYo0hGIjab8asT9+Fu5r3/+e7gO5p1YUGBd3KPZfmr5fo
+Wt3KwAK+nLVOCM0AIP3R3DdFYIgZjBiEl9GrQ44xFCZ8ITWLc0AkzblA00CkibG
dhGex745LBaTgIT+d8gBkO5RQu/00L0V848EJvk/nxc/IRUCOVCVfHpbFgQgpKtB
mbdSY0s7AXNk/2FAsPgYWP2QSdaukbIrB6w=
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:56:17 2024 by rpki-client on console-ams.rpki-client.org