Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131352e302f32342d3234203d3e20323039313039.roa
File:                     3134322e3234392e3131352e302f32342d3234203d3e20323039313039.roa (raw, json)
Hash identifier:          wckwllknaijHXzXfJkUqmQvXGIda2i5xVVPYr4oupy4=
Subject key identifier:   7F:CA:55:3E:1D:37:57:30:71:93:3D:48:74:BC:53:A4:A5:BD:88:EA
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       797083A275F37B1049D14D54A6BC998E5B57D3FA
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131352e302f32342d3234203d3e20323039313039.roa
Signing time:             Wed 02 Sep 2026 12:15:08 +0000
ROA not before:           Wed 02 Sep 2026 12:10:08 +0000
ROA not after:            Wed 01 Sep 2027 12:15:08 +0000
asID:                     209109
IP address blocks:        142.249.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 02:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:70:83:a2:75:f3:7b:10:49:d1:4d:54:a6:bc:99:8e:5b:57:d3:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Sep  2 12:10:08 2026 GMT
            Not After : Sep  1 12:15:08 2027 GMT
        Subject: CN=7FCA553E1D37573071933D4874BC53A4A5BD88EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:b5:c7:31:d1:09:03:ca:17:e4:fc:99:98:
                    33:e5:74:fd:55:9f:01:5d:91:42:74:3a:ff:38:eb:
                    51:51:08:d8:b7:1e:e9:4c:52:ef:82:64:a0:6c:66:
                    1d:aa:dd:59:85:92:50:68:61:af:da:18:35:6f:07:
                    f2:83:1f:a5:2b:6a:41:6d:d6:37:76:77:2d:f6:82:
                    4f:be:00:a4:5f:77:14:a2:02:5d:dc:55:71:48:d9:
                    e0:6d:4c:f1:e9:e0:21:49:47:bb:14:ec:6b:4e:e0:
                    34:3d:40:bf:6a:0a:df:1d:ba:1c:c2:bb:ec:65:41:
                    6d:44:db:15:9b:1a:3f:18:98:56:5c:fc:51:91:c4:
                    02:8e:ab:d1:39:bd:a1:df:68:63:97:d9:32:1d:4a:
                    e4:96:15:0f:40:59:18:21:eb:a3:50:4b:48:1e:08:
                    81:51:3c:bf:c7:85:0e:d7:8a:e2:21:9c:b0:8b:f5:
                    e3:bd:06:d1:22:16:1c:f1:0c:6c:91:e5:f1:ad:ac:
                    3a:c8:39:39:d8:c3:7e:82:2c:63:a2:70:6d:09:14:
                    55:1f:c6:9f:28:ec:6a:2b:78:de:4b:84:25:ba:ab:
                    5c:6c:d4:43:d6:88:43:23:77:4c:ab:00:09:b5:1b:
                    ca:26:3e:ff:da:31:54:23:63:02:ca:ae:04:4f:fd:
                    db:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CA:55:3E:1D:37:57:30:71:93:3D:48:74:BC:53:A4:A5:BD:88:EA
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131352e302f32342d3234203d3e20323039313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:09:6b:b1:ae:cf:51:20:dc:1f:ad:35:6b:4a:e2:d4:02:9e:
         2a:51:a5:9a:64:e1:21:13:e0:ee:11:6d:05:41:2c:2a:ef:5f:
         41:e5:31:ef:43:13:64:2a:23:47:9a:c1:18:98:5d:79:de:6f:
         e8:e8:bb:91:62:22:4e:f8:8f:c3:3e:28:2b:f0:f9:de:9f:3d:
         25:06:85:9e:64:c5:91:a8:06:65:2c:9b:35:93:a4:3b:7d:dc:
         6f:0c:42:48:be:ad:95:ef:74:0f:3d:53:7c:f1:6a:61:79:21:
         06:54:96:0d:27:e5:47:3e:fb:de:cf:97:a8:18:3a:05:67:cf:
         0d:f6:da:b8:4d:ef:2f:e7:49:86:a5:69:1b:2e:2c:24:48:40:
         0b:c5:bb:b8:5d:ab:a3:c6:77:3b:7e:1a:ed:3b:28:64:b1:d3:
         af:eb:99:19:77:45:bf:60:8e:b2:69:a0:1f:fc:63:3e:9c:56:
         59:f5:11:59:e2:61:1a:1d:fd:97:07:c7:a1:51:cc:07:a0:c6:
         10:0f:8a:cc:2f:57:93:f4:d0:18:f6:4d:b0:03:2f:a8:c9:4f:
         78:d3:de:92:c0:ac:92:6a:07:94:18:be:38:e1:68:c2:cd:a6:
         8a:ee:00:9a:f3:13:51:a3:59:9d:57:28:c2:a2:25:44:61:f8:
         a9:ec:a2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:59 2026 by rpki-client