Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa
File:                     32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          ZORnJy3KMVpwSXl9IHndHe4ZhqzI4F8hiGHJFuEH9ek=
Subject key identifier:   29:32:DC:44:E8:96:FB:FA:02:F5:8B:CE:92:F0:91:7F:6E:F7:D2:C8
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       253470BE54C5D2BBFCE543D5275355F386390010
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa
Signing time:             Sun 08 Jun 2025 01:33:18 +0000
ROA not before:           Sun 08 Jun 2025 01:28:18 +0000
ROA not after:            Sun 07 Jun 2026 01:33:18 +0000
asID:                     138995
IP address blocks:        23.132.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:34:70:be:54:c5:d2:bb:fc:e5:43:d5:27:53:55:f3:86:39:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun  8 01:28:18 2025 GMT
            Not After : Jun  7 01:33:18 2026 GMT
        Subject: CN=2932DC44E896FBFA02F58BCE92F0917F6EF7D2C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:ca:a0:b9:e4:75:93:d6:0d:1a:59:9a:42:
                    56:4d:26:bf:a7:9e:9d:5a:c0:58:fb:a9:fc:41:ab:
                    af:d3:e0:4f:3f:fa:8d:c7:a9:81:12:fc:0f:89:5e:
                    ef:b2:e2:b6:8f:f3:3a:d8:17:03:fa:c1:ad:c8:6c:
                    7c:0b:4c:51:cf:f7:15:e0:24:a9:c0:65:e4:53:45:
                    bc:33:f4:26:bd:55:a5:62:71:d2:a1:9a:e9:86:bd:
                    d5:5e:b9:c4:35:c6:46:f9:a7:b2:c3:64:c3:29:84:
                    18:f4:b7:ed:c4:4e:2d:c8:27:05:ca:ec:fd:6f:80:
                    4f:50:5f:c2:59:4d:7b:43:d3:a5:a3:63:f8:f8:75:
                    01:2a:1c:49:56:19:cf:9f:f7:d1:08:69:fb:8c:6e:
                    88:c9:bb:e2:d3:54:cc:a4:6a:4d:61:ab:eb:b7:18:
                    1a:37:39:dd:e1:e0:07:48:3c:24:74:1d:9d:d6:3e:
                    63:37:9a:bc:78:63:18:87:41:65:c3:50:80:2d:3d:
                    d1:80:8b:bb:bc:80:54:02:9d:e8:4b:5c:76:da:e2:
                    44:36:ee:b4:78:f1:b9:85:cc:f6:94:0c:7f:d7:e8:
                    cd:f7:94:22:e8:52:5c:b8:d3:cc:90:80:a3:1a:d7:
                    07:5c:13:ad:85:d7:80:dd:7c:10:7b:95:32:4e:6f:
                    32:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:DC:44:E8:96:FB:FA:02:F5:8B:CE:92:F0:91:7F:6E:F7:D2:C8
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138342e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b2:10:52:9c:22:20:b3:8a:aa:78:9f:f8:91:dd:59:05:53:
         7a:30:10:1d:71:ab:5d:88:ea:92:6a:66:e5:96:6a:37:14:b5:
         15:3d:33:3a:08:2d:62:3d:52:fe:50:1b:da:f1:a6:a2:94:67:
         f5:d7:0d:0b:e2:62:c8:ff:d6:be:db:2d:1c:2f:b9:97:ba:88:
         d4:63:a8:86:09:9b:de:20:54:c5:07:08:dc:cc:8f:7e:77:bf:
         71:12:f1:4b:3a:df:b3:4c:e9:7b:e0:59:b0:81:df:f8:8d:ea:
         69:80:2c:da:35:6b:a9:52:14:13:b0:59:86:e5:7b:b1:72:22:
         9d:d0:fd:d1:2c:18:80:72:eb:74:4c:4e:af:f0:77:b6:f4:b0:
         3e:0c:8e:a3:0a:a7:6f:ce:68:84:b1:4f:27:44:84:a6:64:ee:
         61:be:78:fb:c4:e8:dd:7d:90:ae:8e:d7:48:0b:64:9d:8a:75:
         3b:cc:08:c5:ed:2b:d0:87:ba:9c:7d:8f:6f:7a:6b:58:df:15:
         a7:89:d8:32:ff:97:e0:db:8f:24:94:9a:e7:fd:44:8e:34:e3:
         27:9b:ee:59:dd:51:6b:d2:9a:fc:95:38:d7:f9:34:93:85:c2:
         42:a2:2f:c0:b5:c6:25:43:1a:7e:c2:7d:59:56:b6:d3:d8:b8:
         30:32:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:19 2025 by rpki-client