Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa
File:                     32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          LI9KnFTnBFpViG79ZTDNb5kEvsgrS8yJnCxmRyXzmS8=
Subject key identifier:   60:38:9C:86:CD:6E:CF:AD:15:3E:94:12:34:02:34:05:FF:72:62:DE
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       2FC12A9F32CB6C9283E8A90841DDBAA1217BE60B
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 29 Apr 2025 23:31:13 +0000
ROA not before:           Tue 29 Apr 2025 23:26:13 +0000
ROA not after:            Tue 28 Apr 2026 23:31:13 +0000
asID:                     138995
IP address blocks:        23.132.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 03:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c1:2a:9f:32:cb:6c:92:83:e8:a9:08:41:dd:ba:a1:21:7b:e6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Apr 29 23:26:13 2025 GMT
            Not After : Apr 28 23:31:13 2026 GMT
        Subject: CN=60389C86CD6ECFAD153E941234023405FF7262DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9f:d5:6f:50:50:e1:c9:a5:4b:d4:3e:d3:57:
                    d6:ce:1b:f7:64:94:ce:d2:d2:ac:24:2d:dd:ca:0a:
                    3c:ed:a6:7e:1e:8a:34:c6:41:02:b5:1c:de:3c:d3:
                    10:3f:7f:10:9f:90:31:36:a2:40:7e:b9:29:80:b3:
                    d3:27:c2:f7:71:15:e3:cb:c7:07:bf:f1:6d:f5:8c:
                    38:72:02:00:c3:43:ef:87:71:f9:40:93:1f:18:d2:
                    18:73:22:bc:73:9c:d3:d6:67:6a:c7:5f:78:8b:90:
                    5e:46:79:2f:5e:ba:fa:70:97:8b:19:e0:5a:5c:97:
                    2a:09:25:0e:20:f1:04:9a:26:b7:5c:65:14:ce:99:
                    d0:fa:69:f0:4f:3a:df:ca:89:fc:db:06:7d:c8:d6:
                    cc:37:b3:0f:31:ce:05:d9:47:1d:06:b6:1a:a1:0b:
                    06:4f:bd:0e:7a:98:49:aa:27:b7:8e:1c:5a:03:5d:
                    3d:95:2c:c2:bd:dd:0a:1e:bd:e9:1e:5e:93:ab:c3:
                    95:f9:13:5c:74:35:90:3d:24:31:31:13:84:d4:c5:
                    ad:81:01:87:14:0e:b3:9c:40:36:c1:da:b5:dd:6a:
                    af:40:af:1a:20:85:c5:d5:7e:9d:c8:97:9d:e6:a6:
                    12:75:1a:ac:ca:d2:a3:67:d2:58:60:4f:a3:64:a3:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:9C:86:CD:6E:CF:AD:15:3E:94:12:34:02:34:05:FF:72:62:DE
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:19:29:ed:6f:22:c1:e0:10:4f:c1:81:dd:08:78:f9:ec:6d:
         69:20:47:10:66:90:6c:ce:eb:18:0f:5f:ca:97:88:ad:77:41:
         1b:cf:08:5c:a8:22:0a:c9:1e:2a:ba:8d:28:41:58:fa:1c:37:
         7b:28:a2:aa:6e:fd:bc:f5:8b:53:e0:a3:55:a0:e0:70:a0:7b:
         f0:d7:84:45:0c:a4:3f:a3:5b:78:32:ab:98:45:0d:7a:c5:5f:
         4b:39:dd:2f:33:d2:18:39:bc:28:64:69:7d:a1:25:d5:37:43:
         bd:7b:e9:04:63:e2:c0:84:c5:dc:28:24:7a:94:f2:ef:ee:f6:
         6b:16:be:b7:f8:00:19:61:00:7f:6f:d3:5a:da:43:ae:17:0f:
         6d:06:65:6c:cf:3a:2a:eb:97:d6:e7:92:f4:82:c9:27:6a:60:
         61:c8:b6:3a:d3:3e:85:01:52:ac:b2:50:27:7b:06:0b:cb:1c:
         30:84:5d:3b:42:47:1d:e7:0c:80:8a:a3:90:83:0c:a9:71:8b:
         26:d3:e2:e2:5e:68:82:6e:42:ad:fc:85:2c:b5:ae:4d:f4:18:
         4a:6e:74:79:89:8e:94:af:d9:f8:62:72:9d:8f:19:58:43:42:
         df:7b:bc:21:39:38:74:c3:64:7b:dc:87:02:12:90:f9:a1:23:
         e6:b2:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:52:53 2025 by rpki-client