Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e31302e302f32332d3233203d3e20323030343534.roa
File:                     3230382e38352e31302e302f32332d3233203d3e20323030343534.roa (raw, json)
Hash identifier:          TUDptHO22dPDaCtkZJX8iUwciFZiQBU6gWDJ4tJUjRI=
Subject key identifier:   5B:24:13:BF:77:2E:E6:0C:07:3D:D6:2D:AE:F5:A3:7C:48:C1:9D:D9
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       1B93849B40524D5F54CFDB034A3CF25CF2121663
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e31302e302f32332d3233203d3e20323030343534.roa
Signing time:             Sat 15 Feb 2025 07:58:53 +0000
ROA not before:           Sat 15 Feb 2025 07:53:53 +0000
ROA not after:            Sat 14 Feb 2026 07:58:53 +0000
asID:                     200454
IP address blocks:        208.85.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 20:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:93:84:9b:40:52:4d:5f:54:cf:db:03:4a:3c:f2:5c:f2:12:16:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Feb 15 07:53:53 2025 GMT
            Not After : Feb 14 07:58:53 2026 GMT
        Subject: CN=5B2413BF772EE60C073DD62DAEF5A37C48C19DD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:99:24:7e:87:fc:24:85:d2:d8:7a:50:d7:2f:
                    f4:a2:17:00:ef:11:8d:c0:a5:9a:8e:55:df:50:4b:
                    e6:0d:8d:de:dc:ab:b7:1a:58:d7:c4:a6:21:37:88:
                    0e:3a:cd:91:18:09:2a:af:c8:a1:2b:cd:fa:ad:5b:
                    2e:b7:cf:5a:a3:31:ec:d5:9f:dc:55:68:2c:93:7a:
                    d9:a2:8d:18:19:b4:31:99:08:50:ad:8e:7e:f4:44:
                    f3:96:73:48:10:af:00:93:3e:bd:8f:27:04:85:85:
                    ea:8a:bc:0a:72:3d:45:36:3c:0c:1f:02:4b:34:83:
                    51:0e:e2:29:d3:f1:ca:17:72:ba:bf:3d:b7:17:9d:
                    0d:91:20:26:56:44:35:e5:5e:ac:15:13:1d:cb:16:
                    4f:e5:79:3f:bf:92:d0:a8:b8:cb:53:e0:24:d5:26:
                    79:e0:5f:2f:8f:98:93:4f:21:00:31:01:55:fb:ee:
                    b3:d9:89:25:38:30:ec:a0:40:46:e3:22:1e:86:1c:
                    1f:49:1c:3a:e0:31:07:72:87:46:b0:56:aa:68:c7:
                    3f:10:2b:87:be:94:f4:ca:c4:3a:e7:09:76:c0:53:
                    80:bc:0a:d8:00:84:c8:04:92:57:95:3e:c1:76:3d:
                    2f:38:28:b2:17:91:67:11:5d:f0:ad:4f:52:d8:19:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:24:13:BF:77:2E:E6:0C:07:3D:D6:2D:AE:F5:A3:7C:48:C1:9D:D9
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/3230382e38352e31302e302f32332d3233203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:e5:ed:ee:36:e2:c5:20:dc:88:f0:e7:c9:a9:b1:65:7e:
         94:4c:db:5b:72:31:cf:65:24:00:24:e7:7b:0a:e3:5b:41:e6:
         99:1b:85:4a:0e:90:ad:ab:89:e1:69:19:a6:d4:5b:4b:42:91:
         db:1b:20:3e:d2:2d:01:9f:2b:3d:a6:b5:e5:ea:14:63:51:e5:
         f0:b3:6e:78:29:22:ed:fb:dd:9c:62:4b:71:0a:5f:dd:c7:0e:
         85:01:3d:26:a8:6b:13:8c:65:06:0b:74:65:6f:57:3b:57:e7:
         dc:6d:d1:db:0c:16:d5:3e:35:0a:65:f1:b1:88:0d:68:2a:00:
         48:1d:8f:dc:b8:44:37:91:25:eb:f8:53:81:38:51:40:f6:3d:
         a1:99:75:97:31:d8:2f:28:2b:90:60:15:2a:26:29:33:2c:0e:
         26:57:40:d1:a9:ce:f5:08:d6:d4:91:49:35:cb:93:05:d7:a7:
         94:aa:55:3b:21:d6:ff:9c:b8:27:76:a2:27:a5:0d:ce:a7:3d:
         6f:5b:35:ab:82:0e:27:4c:4f:15:49:6d:45:f7:98:a2:d5:c4:
         48:fb:60:8b:a1:44:db:03:13:ea:fb:88:e4:26:dd:97:6e:fd:
         e1:13:91:20:55:be:02:7e:f3:1f:6b:23:fe:3b:89:65:b6:0f:
         3c:13:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:08:39 2025 by rpki-client