Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
File:                     3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa (raw, json)
Hash identifier:          XX8XLw5a5qX16bGuOG01HK9QEZ+CClZcUWiF/lH+Whs=
Subject key identifier:   BD:1D:8D:58:00:48:28:3C:57:66:F6:54:6D:4B:42:D5:A1:F8:15:F8
Certificate issuer:       /CN=0EE737362A63227799B760296110BD044DB7821A
Certificate serial:       39BE8CE066BC2A6D50C1CA5C3B5833E42A8036C6
Authority key identifier: 0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A
Authority info access:    rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
Signing time:             Sun 14 Jun 2026 00:39:24 +0000
ROA not before:           Sun 14 Jun 2026 00:34:24 +0000
ROA not after:            Sun 13 Jun 2027 00:39:24 +0000
asID:                     47065
IP address blocks:        138.185.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.crl
                          rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.mft
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.crl
                          rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/F79647511753842C2E53F2B5A8CA789825A09B7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F79647511753842C2E53F2B5A8CA789825A09B7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 04:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:be:8c:e0:66:bc:2a:6d:50:c1:ca:5c:3b:58:33:e4:2a:80:36:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0EE737362A63227799B760296110BD044DB7821A
        Validity
            Not Before: Jun 14 00:34:24 2026 GMT
            Not After : Jun 13 00:39:24 2027 GMT
        Subject: CN=BD1D8D580048283C5766F6546D4B42D5A1F815F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4e:62:4a:02:7f:4f:65:46:11:ce:79:57:89:
                    4b:07:4b:aa:9f:92:27:dd:01:38:25:e9:ed:a1:86:
                    2c:37:de:56:de:68:54:52:23:e2:93:8e:33:ec:cb:
                    d9:a4:3a:0b:f5:66:26:09:f0:b9:ea:70:7e:db:de:
                    31:b1:bd:e5:63:d5:59:95:d9:db:f4:41:b0:72:78:
                    52:0a:87:f4:26:b7:9c:5c:8e:7b:43:ee:fd:18:5d:
                    9f:78:10:2f:58:a0:64:6e:21:3f:7d:13:4e:1c:8b:
                    dc:00:12:54:38:57:dd:33:28:a6:4a:50:26:12:a0:
                    df:9a:46:6d:a9:a5:0f:82:ec:04:25:ac:80:a9:cb:
                    28:e8:5e:5c:31:60:a0:2f:d5:0f:bb:97:c8:e1:6f:
                    0d:de:9c:85:88:53:98:fc:cb:cd:20:be:61:89:1b:
                    9a:94:74:5c:5d:22:98:8b:e0:04:ba:5d:28:03:2a:
                    cb:c9:57:a9:25:81:27:cd:a9:14:e7:62:2e:de:40:
                    50:10:98:e0:92:de:03:81:d8:19:e9:44:db:68:f9:
                    48:b5:55:05:47:6f:69:ff:1f:32:a9:0c:bc:b2:ba:
                    b0:45:07:06:3d:73:15:47:ea:9b:19:88:9f:b1:da:
                    35:50:f2:5c:7e:92:27:d7:94:5e:62:1b:95:6b:36:
                    fa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:1D:8D:58:00:48:28:3C:57:66:F6:54:6D:4B:42:D5:A1:F8:15:F8
            X509v3 Authority Key Identifier:
                keyid:0E:E7:37:36:2A:63:22:77:99:B7:60:29:61:10:BD:04:4D:B7:82:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/4/0EE737362A63227799B760296110BD044DB7821A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/1/0EE737362A63227799B760296110BD044DB7821A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/4/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:9f:a6:10:db:cb:aa:cc:81:b0:de:41:5e:7e:cc:10:7a:
         cc:cd:cd:2d:46:5e:5a:49:6a:c8:29:a6:71:df:56:f2:d7:12:
         81:91:b8:be:83:cd:8c:f5:fb:86:3c:7a:54:00:cd:be:4a:85:
         0c:30:47:d3:fd:73:5a:85:b9:cc:08:39:4b:e7:46:e0:03:b9:
         08:a5:ed:86:01:33:27:e2:e7:33:2e:ad:35:c1:18:f2:c6:37:
         2a:21:4c:52:e3:06:26:1b:d9:12:39:9e:c0:17:af:59:3b:75:
         eb:5b:69:40:5c:ef:d8:99:2e:08:28:9e:4e:08:28:fe:ec:98:
         b1:81:05:3e:7f:86:bb:68:84:03:32:28:bc:77:64:1b:9a:4a:
         ff:de:53:4e:f5:0b:b0:5b:cc:55:29:c0:e2:dc:60:8e:95:e6:
         90:72:95:b2:f7:44:c7:ca:e1:3e:c1:fc:5a:13:77:c9:ed:e0:
         9a:64:0c:3a:eb:db:bd:b4:90:0a:88:1e:89:ac:88:79:f5:40:
         ed:0b:6e:37:c6:e7:93:ff:d9:8a:2d:43:4e:15:25:19:c2:38:
         7f:72:96:89:8c:7f:ce:9d:b3:b5:de:5d:c9:ff:a7:c0:c8:d5:
         16:a6:1c:e8:fe:fe:dc:15:51:0b:df:49:37:1a:81:0f:3c:eb:
         30:f4:d5:eb
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUOb6M4Ga8Km1QwcpcO1gz5CqANsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEVFNzM3MzYyQTYzMjI3Nzk5Qjc2MDI5NjExMEJEMDQ0
REI3ODIxQTAeFw0yNjA2MTQwMDM0MjRaFw0yNzA2MTMwMDM5MjRaMDMxMTAvBgNV
BAMTKEJEMUQ4RDU4MDA0ODI4M0M1NzY2RjY1NDZENEI0MkQ1QTFGODE1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvTmJKAn9PZUYRznlXiUsHS6qf
kifdATgl6e2hhiw33lbeaFRSI+KTjjPsy9mkOgv1ZiYJ8LnqcH7b3jGxveVj1VmV
2dv0QbByeFIKh/Qmt5xcjntD7v0YXZ94EC9YoGRuIT99E04ci9wAElQ4V90zKKZK
UCYSoN+aRm2ppQ+C7AQlrICpyyjoXlwxYKAv1Q+7l8jhbw3enIWIU5j8y80gvmGJ
G5qUdFxdIpiL4AS6XSgDKsvJV6klgSfNqRTnYi7eQFAQmOCS3gOB2BnpRNto+Ui1
VQVHb2n/HzKpDLyyurBFBwY9cxVH6psZiJ+x2jVQ8lx+kifXlF5iG5VrNvoLAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUvR2NWABIKDxXZvZUbUtC1aH4FfgwHwYDVR0j
BBgwFoAUDuc3NipjIneZt2ApYRC9BE23ghowDgYDVR0PAQH/BAQDAgeAMF4GA1Ud
HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC80LzBF
RTczNzM2MkE2MzIyNzc5OUI3NjAyOTYxMTBCRDA0NERCNzgyMUEuY3JsMIGFBggr
BgEFBQcBAQR5MHcwdQYIKwYBBQUHMAKGaXJzeW5jOi8va3JpbGwucGVlcmluZy5l
ZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMS8wRUU3MzczNjJB
NjMyMjc3OTlCNzYwMjk2MTEwQkQwNDREQjc4MjFBLmNlcjB5BggrBgEFBQcBCwRt
MGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBraS1wcC5jb20vcmVwby9HT09GTC80
LzMxMzMzODJlMzEzODM1MmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAz
NDM3MzAzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAirnnMA0GCSqGSIb3DQEBCwUAA4IBAQBL85+m
ENvLqsyBsN5BXn7MEHrMzc0tRl5aSWrIKaZx31by1xKBkbi+g82M9fuGPHpUAM2+
SoUMMEfT/XNahbnMCDlL50bgA7kIpe2GATMn4uczLq01wRjyxjcqIUxS4wYmG9kS
OZ7AF69ZO3XrW2lAXO/YmS4IKJ5OCCj+7JixgQU+f4a7aIQDMii8d2Qbmkr/3lNO
9QuwW8xVKcDi3GCOleaQcpWy90THyuE+wfxaE3fJ7eCaZAw669u9tJAKiB6JrIh5
9UDtC243xueT/9mKLUNOFSUZwjh/cpaJjH/OnbO13l3J/6fAyNUWphzo/v7cFVEL
30k3GoEPPOsw9NXr
-----END CERTIFICATE-----
Generated at Sun Jun 14 15:05:07 2026 by rpki-client