Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa
File:                     3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa (raw, json)
Hash identifier:          74mtVYH2oizlTlncja+XXe6CXRneRii8yBHCcrRkavU=
Subject key identifier:   18:63:73:2B:93:DE:DB:23:F0:7C:DB:BA:16:3E:02:E8:E5:3C:FB:FA
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       543235A068219B2BE7F3C0BA722645CD84C38526
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa
Signing time:             Sun 28 Sep 2025 20:05:16 +0000
ROA not before:           Sun 28 Sep 2025 20:00:16 +0000
ROA not after:            Sun 27 Sep 2026 20:05:16 +0000
asID:                     216382
IP address blocks:        128.254.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:32:35:a0:68:21:9b:2b:e7:f3:c0:ba:72:26:45:cd:84:c3:85:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Sep 28 20:00:16 2025 GMT
            Not After : Sep 27 20:05:16 2026 GMT
        Subject: CN=1863732B93DEDB23F07CDBBA163E02E8E53CFBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:dd:11:ce:3a:13:3c:a6:b1:bc:4d:5c:51:
                    3b:3f:2a:09:a2:f1:3d:dd:6b:30:12:ed:42:2b:ca:
                    b2:9b:6e:59:fe:2e:e9:28:13:05:f3:3b:73:77:aa:
                    b0:7e:dc:87:00:78:b7:12:ac:9c:28:8e:a9:10:e1:
                    5f:9c:24:3b:49:a5:35:6d:b8:13:62:18:10:51:b9:
                    18:94:57:61:52:44:a1:a2:a9:03:68:cc:c5:62:d0:
                    cb:86:8c:55:5b:38:5e:7c:ff:c9:13:e5:dd:0a:4f:
                    2e:05:aa:17:25:4e:b5:7d:48:f7:7a:33:79:e1:fa:
                    12:7a:fc:f0:54:68:d9:0c:72:f9:1d:75:b8:6a:b6:
                    1f:d5:37:71:6c:11:40:59:d6:92:97:6e:7b:bc:08:
                    7d:70:e9:91:23:04:67:52:07:54:72:99:d7:52:93:
                    cd:8a:07:cc:53:22:c6:0c:3c:1a:24:6c:7a:ce:bd:
                    88:33:dc:85:92:66:aa:90:1b:e3:dc:c7:c1:17:b6:
                    48:0f:b7:4d:59:71:e6:61:45:a0:55:41:ad:8a:c4:
                    fe:df:5e:22:90:44:e9:b8:2a:09:70:b1:4c:7a:f0:
                    99:4d:fe:df:78:f8:eb:2e:7c:77:b0:d7:0c:da:54:
                    cc:dd:4b:1b:e9:67:63:9d:26:2f:a5:4e:80:99:d7:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:73:2B:93:DE:DB:23:F0:7C:DB:BA:16:3E:02:E8:E5:3C:FB:FA
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:a8:43:17:c2:97:b9:f7:20:d3:de:a0:62:33:20:c1:72:27:
         18:82:16:3e:22:fb:54:f4:26:19:7e:46:bb:80:ef:7b:6e:85:
         4b:3c:d1:a1:ed:8f:79:61:d7:7b:a5:47:93:52:43:f4:55:bf:
         ac:66:74:ce:3e:aa:67:a9:5c:26:6e:96:e9:a7:63:2a:e5:f9:
         01:b7:0f:3d:ce:92:4a:80:fb:d4:2c:35:9d:29:ce:d8:73:cb:
         1e:3b:7d:be:1e:ff:ed:e3:85:25:c1:eb:cb:76:e7:4a:27:eb:
         27:7e:36:e4:e3:6c:39:54:a6:18:75:55:5c:35:18:34:84:4c:
         30:9f:05:19:b3:ab:a7:b1:c1:95:f1:6b:3b:c8:dc:2f:5e:eb:
         30:cc:3f:99:85:a3:59:35:70:ec:68:2a:f1:c3:f5:b3:1c:6b:
         e4:ff:1e:56:2b:28:07:61:2a:60:32:df:d7:3d:a0:4c:b6:91:
         b4:cc:b8:0e:6f:84:f6:89:03:f8:cc:b2:a3:53:e6:12:66:2c:
         f2:07:51:0a:be:0f:d1:42:c5:4a:bc:56:65:56:e7:93:f2:9a:
         78:3c:a1:fb:5b:19:20:c3:bb:ed:f2:9b:e5:31:44:cf:d8:06:
         32:c6:22:3a:5f:3d:08:df:63:7a:3c:1e:67:0e:f9:2a:11:01:
         d6:0e:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:00:04 2025 by rpki-client