Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa
File:                     3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa (raw, json)
Hash identifier:          CCilDz5Pd6JU3kLx8lzznv85nLbWjYgx6qOTmDXNfQc=
Subject key identifier:   82:62:E0:A2:30:6C:72:5D:2B:EE:67:63:CF:41:D9:DD:9F:52:5C:31
Certificate issuer:       /CN=0EE737362A63227799B760296110BD044DB7821A
Certificate serial:       18AF1DF2566872DB5E18EBBBB05E2320F99CE209
Authority key identifier: 0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa
Signing time:             Sun 14 Jun 2026 00:39:23 +0000
ROA not before:           Sun 14 Jun 2026 00:34:23 +0000
ROA not after:            Sun 13 Jun 2027 00:39:23 +0000
asID:                     47065
IP address blocks:        138.185.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.crl
                          rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:af:1d:f2:56:68:72:db:5e:18:eb:bb:b0:5e:23:20:f9:9c:e2:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE737362A63227799B760296110BD044DB7821A
        Validity
            Not Before: Jun 14 00:34:23 2026 GMT
            Not After : Jun 13 00:39:23 2027 GMT
        Subject: CN=8262E0A2306C725D2BEE6763CF41D9DD9F525C31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:3f:95:76:74:c0:a6:10:17:51:cc:17:8b:
                    60:5a:84:3d:4c:94:27:cc:39:1b:14:e4:7b:59:82:
                    a9:29:ac:74:e5:db:8c:10:e7:34:41:ea:94:45:8c:
                    d2:b1:0a:59:41:84:c7:1e:9f:cb:c2:76:e7:8c:99:
                    86:50:6d:62:73:ba:c9:e2:f3:25:43:42:8e:2d:6d:
                    a3:4a:e5:97:2c:20:ee:99:6c:8a:ae:da:9c:ac:11:
                    d6:4b:b6:92:2c:b5:80:68:a4:8a:37:de:36:c9:05:
                    2d:c2:35:77:49:6c:91:64:b2:cb:b4:e6:5b:c4:16:
                    e1:94:9e:e5:3e:f4:5e:bc:94:f2:0d:3a:46:14:a1:
                    6d:0b:2b:5d:2d:00:2d:e0:61:97:f4:41:33:ad:8c:
                    41:48:0b:dc:e0:1d:5b:58:04:58:2d:c9:0e:a0:3c:
                    65:f6:e5:0c:37:86:d3:7e:bb:4e:66:00:ab:ea:6c:
                    63:a8:5b:b5:5a:c3:3c:40:20:25:2c:13:cb:27:0f:
                    77:14:23:7b:0f:91:c0:a1:a4:e7:cb:8f:c7:1a:95:
                    f0:5f:c3:5a:74:99:20:71:6e:6a:47:35:8b:23:27:
                    b5:84:73:79:b5:50:8f:22:2a:c9:81:79:e5:84:a3:
                    80:34:7a:d3:49:4c:74:3f:45:b0:79:5c:e5:2d:0c:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:62:E0:A2:30:6C:72:5D:2B:EE:67:63:CF:41:D9:DD:9F:52:5C:31
            X509v3 Authority Key Identifier:
                keyid:0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:e6:33:57:d4:a1:61:d6:d1:5f:60:8f:3a:dd:22:99:87:f4:
         72:da:4c:e9:56:b1:74:8a:05:ef:d3:fb:bd:16:b1:be:34:90:
         fa:c8:cd:50:50:9c:16:17:59:0e:d2:7a:c3:99:55:06:08:68:
         c2:88:af:ec:b3:81:07:08:6f:8e:0b:bc:75:0f:17:35:1d:70:
         f1:f9:61:36:8c:bc:dc:c2:ca:9e:c1:46:ab:42:91:d6:17:10:
         13:f5:40:b7:33:8f:69:83:7b:1f:db:2a:fa:b3:c2:2f:70:66:
         8e:0d:fc:5a:c5:48:d0:23:ec:22:fc:0d:c7:0a:b4:d9:00:bc:
         89:5a:ea:6e:87:68:e5:e8:4a:57:4f:33:1a:7c:4d:3f:74:30:
         4e:ca:49:08:24:dc:e2:db:aa:dc:9c:5b:33:91:2f:52:ef:08:
         2e:b3:73:e3:16:66:c8:e2:d2:bc:75:87:bb:fe:47:cc:8c:64:
         5f:10:5e:16:62:cb:20:97:8b:f0:6a:9d:95:e2:ce:0e:61:59:
         c9:3d:89:53:fe:69:b3:42:ba:f4:d6:04:a5:17:28:08:9c:f2:
         c6:71:20:d2:1b:14:cc:3b:77:51:26:b7:d3:d0:5f:ab:50:71:
         aa:d9:d9:aa:ee:3a:3e:19:36:ed:63:af:21:16:c5:c6:c5:80:
         c2:25:39:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 15:05:15 2026 by rpki-client