Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e203631313338.roa
File:                     32332e3133322e3138342e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          Heq1wmKhoLu2X9meQbaB58VVSBag9+4Pt8T0bs0OHXY=
Subject key identifier:   CF:9F:0B:C6:8C:7A:98:9E:D9:7F:81:A8:72:B2:C7:04:1B:92:93:BF
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       62D6C7C622AF8ED2F335C4AF8F9E9119890230AE
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 17 Jun 2025 20:53:37 +0000
ROA not before:           Tue 17 Jun 2025 20:48:37 +0000
ROA not after:            Tue 16 Jun 2026 20:53:37 +0000
asID:                     61138
IP address blocks:        23.132.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 08:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d6:c7:c6:22:af:8e:d2:f3:35:c4:af:8f:9e:91:19:89:02:30:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 17 20:48:37 2025 GMT
            Not After : Jun 16 20:53:37 2026 GMT
        Subject: CN=CF9F0BC68C7A989ED97F81A872B2C7041B9293BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:07:c4:c3:7b:ba:c0:de:75:0b:f2:0b:b3:0d:
                    cb:42:a9:0d:59:64:d4:9e:47:50:dd:8a:33:1b:6b:
                    b0:a0:e5:da:e5:6e:42:ff:f2:3f:8e:8a:dd:42:83:
                    13:e9:ba:27:d2:78:55:6c:37:0d:b8:51:e4:74:87:
                    13:79:cc:68:04:0b:55:c0:62:32:b8:fa:09:43:cb:
                    80:e0:e1:f9:8d:73:23:99:80:00:6f:a3:f5:5a:3d:
                    7a:52:97:58:ee:d2:72:b5:42:b1:29:df:3c:e5:82:
                    81:10:09:7a:54:b6:70:d5:68:50:90:7b:65:af:e3:
                    d9:3b:2f:29:15:f2:1f:21:6a:64:18:f2:dd:55:ec:
                    01:8a:ad:04:44:29:ef:66:64:41:59:7d:0c:3f:04:
                    d2:cf:7b:25:fb:89:39:76:6d:f3:ec:e4:2a:a7:4e:
                    b0:fd:9e:e1:38:45:f0:ba:39:3e:6a:55:2b:18:63:
                    ee:4a:62:cb:cb:a9:3f:9a:21:41:95:ee:7f:e2:b9:
                    25:a2:23:3c:cc:9b:0f:8f:f6:ba:3f:ff:1a:3c:49:
                    5d:dc:be:91:64:38:b1:25:54:1a:98:56:d2:6e:6e:
                    38:2a:38:46:6b:38:ac:9c:13:dc:77:c6:9a:35:97:
                    e3:06:a5:ba:1c:f9:bc:09:98:ae:9e:f7:63:91:db:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:0B:C6:8C:7A:98:9E:D9:7F:81:A8:72:B2:C7:04:1B:92:93:BF
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:4a:d7:f7:1a:59:86:4c:49:9d:2f:b5:7f:93:ba:4c:2e:e3:
         f4:aa:94:83:66:ee:24:fe:39:fd:ef:8a:87:f1:a8:66:d5:ac:
         e7:00:88:b7:02:07:e0:10:84:f6:fb:d5:fc:f3:56:0d:44:28:
         81:54:5e:89:d8:f7:b5:4b:ff:f1:29:b6:9e:d0:ae:48:b2:86:
         d0:21:5b:1d:71:cb:b1:5a:64:ef:ad:f5:7b:1c:05:de:ae:21:
         42:28:19:5d:ef:c1:8b:40:2b:21:bf:89:18:86:a1:29:3b:d5:
         05:37:71:c2:cc:fe:04:54:41:b4:e3:5e:e8:0f:35:af:fb:c6:
         e5:05:e4:67:56:c0:4a:ad:ae:1b:dc:40:82:9f:0c:7f:17:2c:
         bf:e2:26:f0:be:98:63:f4:de:3d:c6:19:6c:5a:b4:16:93:8d:
         32:b4:5e:28:34:d6:9d:19:f2:ec:36:37:83:09:9a:4b:3b:68:
         a9:42:ab:2e:be:b0:84:43:54:d5:a9:03:81:88:77:83:0a:e9:
         64:c5:c1:06:f3:2c:61:08:37:9e:3b:16:43:02:56:b9:6f:de:
         fd:c0:a4:85:f0:f2:6a:9e:ab:46:50:c6:3d:25:6a:e0:fa:3f:
         62:95:6d:f1:a0:94:d6:7c:f6:d2:72:c9:0f:aa:83:8f:e7:c4:
         3c:75:1f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:01:15 2025 by rpki-client