Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          ftJiqGPvTOU7YAAd3d0A/xOBJ1eNgZtm8YonouJGvmI=
Subject key identifier:   FA:62:8C:78:9A:0C:41:7A:E8:89:96:34:16:34:1F:C9:B4:20:75:3C
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       386D4BFCEEC34A89AFB5036140A0217DDAE8224D
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 07 Oct 2025 03:53:46 +0000
ROA not before:           Tue 07 Oct 2025 03:48:46 +0000
ROA not after:            Tue 06 Oct 2026 03:53:46 +0000
asID:                     23470
IP address blocks:        128.254.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6d:4b:fc:ee:c3:4a:89:af:b5:03:61:40:a0:21:7d:da:e8:22:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Oct  7 03:48:46 2025 GMT
            Not After : Oct  6 03:53:46 2026 GMT
        Subject: CN=FA628C789A0C417AE889963416341FC9B420753C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:af:83:a4:2e:d6:c1:f3:97:84:14:88:77:
                    30:5b:12:95:6a:af:38:29:e2:0e:76:3d:4c:97:d8:
                    10:00:3c:6c:54:03:bb:ef:fa:a4:f4:f8:8d:1a:be:
                    e2:34:4f:b4:e2:8e:bd:27:dc:12:ed:d7:dc:09:22:
                    b0:d3:8c:f5:41:86:5a:77:cf:d9:be:26:ca:e2:3f:
                    4b:3e:98:52:2c:25:5b:0c:a4:0d:e9:9c:28:7a:a0:
                    86:5e:86:b5:d2:25:0f:fb:8d:b5:70:b1:bb:25:42:
                    fc:5a:e2:f2:00:57:86:ef:7d:5d:13:f4:95:8f:1f:
                    15:ed:ac:78:bf:b5:d3:91:09:c7:44:fa:37:39:7c:
                    c4:27:1b:c6:0b:d4:37:cb:db:df:0f:ff:63:64:e1:
                    06:35:af:ba:b5:83:24:58:cc:9e:78:39:3c:a6:86:
                    7e:1d:8a:16:11:81:05:9b:54:a3:fc:7b:2e:1e:04:
                    3c:74:7d:30:82:60:7e:05:5b:6b:3c:66:4b:37:bf:
                    20:50:f8:2e:3f:4d:b8:35:66:9c:6a:cd:52:3e:36:
                    53:1d:f8:30:65:ff:0c:11:83:ef:fd:c1:45:1e:97:
                    04:e5:80:62:a4:fc:6d:b4:3f:e2:29:38:1e:72:87:
                    20:f9:cc:6a:50:59:aa:56:96:e6:07:9c:9f:ef:e5:
                    43:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:62:8C:78:9A:0C:41:7A:E8:89:96:34:16:34:1F:C9:B4:20:75:3C
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:05:d6:df:23:0c:9a:68:74:2a:4e:dd:c0:dd:9c:46:de:5e:
         22:81:e1:65:58:f5:57:6d:9b:7b:de:9b:5d:ec:f9:cc:4c:cb:
         c5:df:9e:c1:71:a3:f4:c6:11:01:19:b4:30:49:cd:78:65:1f:
         36:9e:f8:3e:80:bd:2b:40:b6:5e:81:b0:4d:e0:1b:07:64:cb:
         48:b0:60:dc:1f:d1:b1:a5:b6:15:c4:78:47:54:6f:4f:67:e9:
         60:14:2d:45:09:10:f3:69:61:ff:31:2a:be:93:7d:6a:92:53:
         6e:85:5c:3b:31:3d:1a:30:f3:46:23:73:d0:89:13:6a:2c:87:
         94:42:a7:52:12:4f:b5:d1:8a:0a:2a:00:e0:46:58:95:e4:23:
         78:93:e0:46:40:78:c6:c9:a4:08:26:e7:6d:d2:59:45:20:f0:
         17:92:cf:41:0e:e9:6e:ae:11:a0:f2:33:19:c3:88:43:eb:25:
         1a:6f:7b:76:c4:22:e0:73:81:2b:b0:3d:be:35:22:0d:74:00:
         9b:29:9b:6d:fd:2b:41:84:48:72:fd:ac:15:0c:78:2c:50:5b:
         26:3e:59:04:99:02:01:cf:54:12:15:04:cc:10:e9:57:dc:71:
         28:e2:76:df:c8:72:18:db:67:93:53:22:3b:c7:a2:ba:6a:c6:
         93:89:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:18 2025 by rpki-client