Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          RtnrWDN8ciqhv3XWhTX/fIqIC+DvzGLNuNTYNxZqjSE=
Subject key identifier:   59:6E:2F:26:DB:98:30:DB:F9:EB:3D:E1:3B:3E:77:AA:17:88:D9:B9
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       29F1AEF9B0DC193DC0A5889C76EAA8E9B8C0DAB0
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa
Signing time:             Sun 02 Nov 2025 09:55:19 +0000
ROA not before:           Sun 02 Nov 2025 09:50:19 +0000
ROA not after:            Sun 01 Nov 2026 09:55:19 +0000
asID:                     23470
IP address blocks:        128.254.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f1:ae:f9:b0:dc:19:3d:c0:a5:88:9c:76:ea:a8:e9:b8:c0:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov  2 09:50:19 2025 GMT
            Not After : Nov  1 09:55:19 2026 GMT
        Subject: CN=596E2F26DB9830DBF9EB3DE13B3E77AA1788D9B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:44:0c:c8:fc:ce:30:c6:30:6e:80:c0:3c:e7:
                    4d:8d:d4:ae:fa:9c:89:d9:32:ef:ff:69:eb:d3:37:
                    c3:bb:f0:e4:30:c9:7c:15:0b:3e:f4:4e:db:09:62:
                    92:16:e8:18:c7:f8:8b:51:1e:30:56:d5:04:b0:65:
                    27:97:41:32:d8:49:36:58:42:6f:9a:63:43:30:85:
                    33:03:b8:75:9f:47:b6:c7:b9:41:d1:c3:b1:3d:9c:
                    1e:b9:3e:12:a2:0d:37:8f:ef:5f:78:44:1a:6b:4c:
                    f2:a5:c8:8d:fc:0b:f2:db:5b:db:a0:a2:dc:b0:26:
                    2f:3c:70:88:5c:3e:a8:92:70:99:07:ba:d7:35:0e:
                    67:6e:2f:9e:de:94:26:b0:c8:a4:96:aa:9a:22:ee:
                    6a:39:96:c3:d7:11:dd:45:80:68:a6:79:b0:4c:01:
                    62:c3:29:b6:e5:fb:a0:d0:73:4e:c6:33:dd:9d:aa:
                    d0:32:7d:83:81:4e:4d:0b:8c:61:61:ed:27:93:0b:
                    b7:1f:eb:e4:75:a6:f6:8e:99:bb:c9:17:c4:0c:19:
                    ac:0f:27:b9:41:1d:e6:98:2d:86:21:6f:9a:50:a3:
                    d3:c3:2a:a4:69:78:08:4a:ac:f1:31:22:26:d5:ae:
                    34:7e:36:ca:61:45:8e:6f:36:41:c4:7c:9a:ba:fa:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:2F:26:DB:98:30:DB:F9:EB:3D:E1:3B:3E:77:AA:17:88:D9:B9
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:09:df:fc:a0:ec:c2:9d:71:6d:70:3c:f9:24:33:32:49:
         c8:55:05:e5:60:02:c8:5f:0d:13:1c:91:0e:d4:ae:0f:8e:85:
         a1:3e:3d:2b:ad:75:2a:b7:e6:c1:73:af:91:d6:d0:00:74:78:
         e2:35:c4:f4:43:8e:03:69:0d:dc:0f:f1:96:55:6d:53:1e:a2:
         01:f9:79:69:f5:f5:f0:d0:33:9b:e6:e5:b3:45:41:59:20:77:
         ed:e3:c8:de:37:05:82:15:8e:84:da:81:2e:7b:83:26:d0:07:
         02:eb:6a:ef:51:51:44:5a:7b:71:4e:c6:73:26:be:55:8b:07:
         2b:f6:17:f7:1a:e1:c3:23:59:fa:af:47:9b:33:08:10:73:47:
         33:4b:57:44:8b:a4:0c:3c:1f:a1:f5:f5:f1:86:21:31:60:e7:
         aa:29:32:4b:2f:5c:34:53:b8:55:e5:6d:e4:07:53:1b:31:cd:
         45:9b:00:95:ef:82:45:46:ae:cc:86:23:16:49:f6:90:01:1f:
         a8:cc:84:7d:e8:44:8b:1e:a1:49:e0:26:d6:92:09:d1:8e:26:
         58:ed:fc:ed:0e:c7:04:54:a5:51:45:7e:4d:d3:cb:8c:76:f6:
         6e:a2:83:a8:30:30:ac:de:fe:9c:64:5a:58:4a:b0:24:24:9b:
         c7:2e:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:19 2025 by rpki-client