Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32322e302f32342d3234203d3e20333936393933.roa
File:                     3134322e3234382e32322e302f32342d3234203d3e20333936393933.roa (raw, json)
Hash identifier:          eeYwedJixTWRoISQlN9JhjksPxmdMQ8o18+EHKS7Ljk=
Subject key identifier:   02:11:F5:C3:40:5A:C2:49:88:CA:41:8A:62:F2:A8:97:E5:B9:C9:26
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       0DEF46CD66F4DBA1E56FBF9035DD39AFA41F6FDA
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32322e302f32342d3234203d3e20333936393933.roa
Signing time:             Tue 08 Sep 2026 09:34:32 +0000
ROA not before:           Tue 08 Sep 2026 09:29:32 +0000
ROA not after:            Tue 07 Sep 2027 09:34:32 +0000
asID:                     396993
IP address blocks:        142.248.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 04:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:ef:46:cd:66:f4:db:a1:e5:6f:bf:90:35:dd:39:af:a4:1f:6f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Sep  8 09:29:32 2026 GMT
            Not After : Sep  7 09:34:32 2027 GMT
        Subject: CN=0211F5C3405AC24988CA418A62F2A897E5B9C926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:61:09:5a:29:80:f5:18:d4:93:80:63:7d:
                    32:b7:e7:e2:4c:f5:e2:fc:cf:1a:15:70:37:98:31:
                    cc:e3:21:0f:e7:f7:ed:b6:84:32:20:0d:c8:85:62:
                    75:48:69:f3:ea:22:be:9a:3b:4e:59:94:9a:0d:82:
                    ef:c5:e4:03:90:9b:49:a0:37:a5:0b:97:11:67:54:
                    f5:74:1b:6a:5b:af:a8:75:14:8b:05:6d:e4:01:f6:
                    93:4f:56:4e:5f:c2:1d:95:29:9d:cc:53:87:96:4f:
                    76:da:55:4b:e3:f4:8c:5d:69:aa:60:73:ed:45:58:
                    de:63:7f:e1:5a:8a:25:a2:4e:38:58:11:67:dd:3d:
                    91:1e:72:55:48:00:3b:04:de:c7:d0:31:3e:1a:a6:
                    5f:85:18:72:86:78:38:d8:e6:e0:1f:a7:29:ea:98:
                    e2:a1:6c:04:9b:50:9a:1d:4b:a5:87:46:31:85:b9:
                    71:87:29:f9:83:b2:e7:ea:dc:8b:69:fa:65:11:4b:
                    dd:75:dd:06:be:75:61:f0:25:2a:f9:1d:51:fb:d0:
                    2d:b8:d1:b5:7b:a7:06:60:3a:9b:74:ee:57:b6:80:
                    f5:d6:17:b0:2e:ca:3c:60:04:2d:41:b9:1c:86:4d:
                    0d:1e:ec:e3:28:e4:52:27:05:cd:86:dc:04:cc:5f:
                    b8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:11:F5:C3:40:5A:C2:49:88:CA:41:8A:62:F2:A8:97:E5:B9:C9:26
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32322e302f32342d3234203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d1:80:97:1c:ba:ac:fd:9a:a1:3e:ae:4a:22:61:a2:20:4d:
         79:a3:4f:91:c6:ff:9e:49:e5:b5:12:e2:13:82:cc:02:8d:46:
         7d:aa:5b:b9:08:37:d7:0a:ec:e6:db:23:ab:ea:56:aa:3f:7e:
         38:3f:a7:e1:73:64:26:b0:0f:80:e9:2c:a0:a3:d4:7f:67:7b:
         5d:fc:a4:e4:90:f9:98:99:19:8e:76:1d:db:df:67:26:ff:3e:
         47:a9:e2:4b:55:bb:7f:f5:0b:12:30:c0:61:8a:7c:12:5f:47:
         5a:5e:40:61:4c:88:8f:14:34:c4:e8:87:58:bb:38:c9:0c:a4:
         cc:65:38:2c:30:97:7a:c8:b0:da:e5:59:2b:ac:51:df:80:33:
         10:0a:6e:b3:32:27:b5:a3:ed:bf:99:49:c1:58:78:77:40:37:
         68:20:ac:bd:e6:7b:f2:c3:5b:fe:b2:87:8c:b6:1c:3d:0f:02:
         e8:1c:00:2f:57:a4:41:87:f4:32:b4:d6:ac:d8:ae:58:6a:f6:
         4b:5f:4f:4d:62:a5:53:f2:5a:2e:22:78:a2:d0:48:c4:73:97:
         e6:bb:38:95:8a:89:26:56:39:6f:ee:e2:0f:af:85:58:f5:a0:
         75:13:36:66:22:25:8d:cf:0f:c7:7f:39:e4:4b:52:60:d9:5d:
         19:75:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:36:15 2026 by rpki-client