Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32342d3234203d3e20323039313039.roa
File:                     3134322e3234392e3131342e302f32342d3234203d3e20323039313039.roa (raw, json)
Hash identifier:          3AS879ep6s36fKRA9Y2ow7E50Nc/Q8w87w3KBpyDiMc=
Subject key identifier:   C2:C4:7B:2D:46:F8:CC:E7:16:E1:3C:34:91:47:40:EB:3A:C1:C2:F6
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       560AAE6613A42F363F95D6792B8BDFAA550831CA
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32342d3234203d3e20323039313039.roa
Signing time:             Wed 02 Sep 2026 12:14:34 +0000
ROA not before:           Wed 02 Sep 2026 12:09:34 +0000
ROA not after:            Wed 01 Sep 2027 12:14:34 +0000
asID:                     209109
IP address blocks:        142.249.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0a:ae:66:13:a4:2f:36:3f:95:d6:79:2b:8b:df:aa:55:08:31:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Sep  2 12:09:34 2026 GMT
            Not After : Sep  1 12:14:34 2027 GMT
        Subject: CN=C2C47B2D46F8CCE716E13C34914740EB3AC1C2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:12:c1:42:5c:a5:b6:e4:bf:43:5f:89:66:55:
                    00:5a:63:cd:0b:f7:cd:32:24:2e:8f:70:b1:5b:fb:
                    c0:47:a0:d5:4c:b4:ab:75:5a:8b:64:fa:db:4f:52:
                    63:d0:ce:9d:58:40:d1:ad:88:5a:de:3e:54:b4:99:
                    f7:b2:53:fb:8e:e8:0b:38:40:e8:ae:cd:18:e4:e6:
                    34:f3:09:9f:95:32:cf:e4:b8:b2:df:30:90:1a:7a:
                    f3:59:5b:6a:58:5e:d3:58:94:ba:58:ac:e9:ba:ab:
                    99:44:10:c3:eb:6a:bc:7a:cf:e7:df:52:9b:59:a0:
                    78:db:6b:11:fe:0d:65:40:b4:89:12:58:4f:13:e9:
                    ae:a7:6f:72:6b:8a:67:b1:30:b9:70:72:bb:28:83:
                    18:b6:a7:ef:e1:6d:00:a2:68:5f:a5:46:4b:af:ab:
                    a7:ae:66:e6:b1:3d:bc:42:23:1b:b4:81:49:73:95:
                    2f:23:3a:a5:66:10:d2:03:90:ad:b4:7f:45:a8:6c:
                    b2:ea:30:29:96:9b:bf:04:3f:90:fe:44:fe:cd:42:
                    e3:7d:30:c6:d8:3e:d3:be:f1:6b:c8:a0:a2:91:a3:
                    af:c0:0c:13:e2:2b:64:ba:ff:18:79:ba:21:65:5b:
                    69:ca:c6:0b:b7:bc:c6:8b:6d:0f:86:73:43:a8:a5:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C4:7B:2D:46:F8:CC:E7:16:E1:3C:34:91:47:40:EB:3A:C1:C2:F6
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32342d3234203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:8a:59:74:a0:e5:79:fa:e9:1f:9f:d3:07:18:97:15:0e:
         64:7a:27:c5:9b:50:c1:a7:ca:36:06:5a:19:3f:d3:e4:39:19:
         8c:2e:e0:b6:0a:c0:00:66:c4:97:e2:8c:a5:24:62:85:1a:d5:
         16:e4:d7:40:aa:5b:9b:13:00:48:03:51:6e:8a:86:f1:69:46:
         b3:d4:7e:cd:d7:76:31:94:e1:2b:45:b6:0b:ef:54:39:8f:92:
         b1:de:46:ed:49:e0:50:dc:c9:ed:0b:27:ba:48:e1:a4:4b:c6:
         d9:73:3c:f9:cd:00:f1:c2:e4:79:04:57:ec:77:6e:e9:04:90:
         cb:6e:53:08:c5:b6:10:88:4d:39:44:90:8a:42:7c:dc:7c:c3:
         a2:28:83:ff:c7:2e:a0:4a:76:01:ad:93:3d:99:b5:1b:eb:a2:
         6e:5f:26:4b:19:2e:16:67:7c:5a:49:6d:1c:3e:d1:a8:ea:82:
         e3:3b:70:3b:7c:4b:a5:0c:07:41:57:d6:87:69:11:99:c2:ab:
         63:e1:67:18:f1:b5:48:f8:5c:f2:a9:21:52:ca:c1:7d:98:a4:
         80:a7:31:59:2f:84:dc:0e:89:0a:e8:42:3c:28:14:e1:36:05:
         67:79:5e:fa:76:94:56:9e:ce:83:5f:a6:1e:0d:a5:e9:e3:7d:
         84:70:58:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:55 2026 by rpki-client