Route Origin Authorization

$ rpki-client -vvf rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/32332e3135342e38312e302f32342d3234203d3e203534313333.roa
File:                     32332e3135342e38312e302f32342d3234203d3e203534313333.roa (raw, json)
Hash identifier:          6Rayt9heEKmYPXCk2NWfJHZkmzaC/PauuR2dNHdx/GA=
Subject key identifier:   3E:10:9B:93:B9:23:2A:2F:75:D2:2C:E4:D8:D2:88:2A:9F:07:17:E7
Certificate issuer:       /CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
Certificate serial:       7E6936A795CD788B85949D526C1A40273CC2514A
Authority key identifier: 86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer
Subject info access:      rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/32332e3135342e38312e302f32342d3234203d3e203534313333.roa
Signing time:             Wed 26 Mar 2025 02:32:08 +0000
ROA not before:           Wed 26 Mar 2025 02:27:08 +0000
ROA not after:            Wed 25 Mar 2026 02:32:08 +0000
asID:                     54133
IP address blocks:        23.154.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.crl
                          rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/1146938c-c605-4779-bf60-820a16fa701c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/1146938c-c605-4779-bf60-820a16fa701c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:69:36:a7:95:cd:78:8b:85:94:9d:52:6c:1a:40:27:3c:c2:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b
        Validity
            Not Before: Mar 26 02:27:08 2025 GMT
            Not After : Mar 25 02:32:08 2026 GMT
        Subject: CN=3E109B93B9232A2F75D22CE4D8D2882A9F0717E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:01:19:23:eb:98:ae:4f:a9:a6:a0:3a:dc:
                    d7:7e:82:b0:12:19:86:df:fe:ce:44:02:88:44:f9:
                    50:33:bc:cb:50:d4:86:eb:86:93:17:14:9c:e9:44:
                    cf:a2:42:14:14:b8:a7:ea:84:d3:3d:0b:10:82:a0:
                    85:08:c8:25:06:55:29:d9:8b:40:40:01:4d:76:73:
                    b9:c7:7f:20:40:96:61:06:4b:25:b7:ad:f5:d3:9f:
                    44:3c:e8:07:9b:a7:92:cc:ba:ec:cb:bb:91:03:a0:
                    57:cb:d3:a7:58:62:bf:bd:5b:31:a0:bf:61:57:6a:
                    04:32:ca:a2:82:53:0c:49:2e:3d:a9:fc:c1:b4:78:
                    96:5d:78:07:05:a6:ea:fa:e8:4d:9a:03:9e:fa:7b:
                    b6:85:d3:a8:79:47:4f:52:ec:c6:91:94:33:86:6a:
                    b2:82:4c:69:e1:a5:61:04:f0:d8:65:28:15:ba:a5:
                    dd:8a:ce:ba:be:cc:65:0c:51:d2:e4:39:1b:d0:0d:
                    f9:de:cf:28:a1:f8:0b:89:7a:c3:13:4b:9d:cd:8d:
                    8e:a4:e6:89:96:9d:69:9a:6b:69:8c:a8:5e:ab:3c:
                    b5:d0:3b:54:c5:4a:cd:04:1a:01:e8:09:d3:9d:2c:
                    fd:be:4e:37:27:37:bd:e8:1e:a6:26:51:47:6e:a8:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:10:9B:93:B9:23:2A:2F:75:D2:2C:E4:D8:D2:88:2A:9F:07:17:E7
            X509v3 Authority Key Identifier:
                keyid:86:A9:90:76:61:0E:7C:08:AE:DD:CE:87:67:AA:5D:C4:52:8C:49:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/86A99076610E7C08AEDDCE8767AA5DC4528C4908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1146938c-c605-4779-bf60-820a16fa701c/8f6916d463bfc5c35e4659c12889a337f3cc6f6b7fe978372b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.tools.westconnect.ca/repo/WestConnect-Pub/0/32332e3135342e38312e302f32342d3234203d3e203534313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:16:28:e6:7a:b5:08:23:47:a4:ef:ff:2f:20:91:ae:0f:02:
         b3:60:23:e0:c8:64:32:4c:b3:bb:d5:4d:65:6f:f8:b9:01:ba:
         9a:ef:7b:ac:78:af:44:72:cd:8b:e7:91:69:d8:55:c4:fb:35:
         2e:61:7f:f1:af:99:ab:8e:0b:19:a4:b3:b0:75:92:b5:4e:95:
         4d:5f:d5:25:6e:5e:e8:67:6a:42:e6:0c:05:32:72:24:04:8d:
         70:57:7b:57:af:e4:7a:35:c3:08:d4:68:fe:ad:4d:2e:62:39:
         97:c2:00:e9:4e:48:81:6c:3e:73:5c:2d:fe:f8:fb:32:81:1f:
         45:7c:7d:ef:83:6e:ed:7c:5e:74:cc:49:3c:c7:1f:20:9f:f0:
         0e:ca:be:25:b2:c4:f9:66:59:9f:8a:16:8e:e9:6f:e3:e4:46:
         af:d8:65:71:7f:6c:47:20:31:a3:1c:de:f4:40:83:8f:4f:18:
         81:7e:f2:f3:a9:1c:b2:28:ce:53:35:55:7a:03:4f:2a:07:b4:
         8b:92:42:f3:e7:b2:95:e7:0f:8d:d5:cc:4a:cb:e5:85:f5:b8:
         47:81:5e:5e:5e:8a:d7:42:9b:84:6f:61:c1:15:21:71:86:13:
         3d:06:02:85:05:be:e2:a2:22:66:9a:b1:4d:24:2c:a6:c4:cd:
         28:0b:68:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:16 2025 by rpki-client