Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3134332e3230332e3134342e302f32342d3234203d3e203534313438.roa
File:                     3134332e3230332e3134342e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          RCrlciDGKuOa+ZYQ9KMOyF901zMoCyWW0JUMUAKznLk=
Subject key identifier:   42:37:CD:EB:71:56:A6:34:94:6B:79:90:B2:45:39:DF:6D:E4:6C:24
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       1D9E244163D869CAD3791353332297194FC402BE
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3134332e3230332e3134342e302f32342d3234203d3e203534313438.roa
Signing time:             Sat 03 Oct 2026 00:31:19 +0000
ROA not before:           Sat 03 Oct 2026 00:26:19 +0000
ROA not after:            Sat 02 Oct 2027 00:31:19 +0000
asID:                     54148
IP address blocks:        143.203.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9e:24:41:63:d8:69:ca:d3:79:13:53:33:22:97:19:4f:c4:02:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct  3 00:26:19 2026 GMT
            Not After : Oct  2 00:31:19 2027 GMT
        Subject: CN=4237CDEB7156A634946B7990B24539DF6DE46C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:cc:09:1d:30:61:62:7f:98:32:72:31:d1:
                    c6:76:9a:ed:3d:14:53:d3:28:ad:21:ce:1c:ea:13:
                    1c:f6:c6:12:41:c0:43:09:99:95:75:b6:8e:06:63:
                    e5:45:95:1b:05:da:ba:14:dd:d3:89:06:9d:23:fb:
                    8e:7d:df:35:d0:99:a9:e6:df:fb:7e:a7:eb:b3:77:
                    ae:f2:7b:b6:da:0a:ea:58:bf:45:02:8a:be:39:2c:
                    2a:ae:63:82:28:fa:09:57:53:f6:f6:26:0d:4f:31:
                    58:71:d2:c9:f0:cb:b1:2d:52:08:36:0b:bd:6a:22:
                    95:eb:ca:21:ec:53:0e:6b:68:68:25:fb:bf:11:1c:
                    87:30:ba:04:03:77:ba:7e:b6:4c:df:c4:1e:d2:f0:
                    d9:9d:be:91:b4:01:00:65:dd:9d:7b:8e:3e:72:7a:
                    56:b5:fc:d8:c2:14:55:5a:83:02:0a:c2:0b:6d:f6:
                    f5:d1:bb:a7:5e:d2:0e:a1:c7:c1:b5:94:8c:76:13:
                    97:42:1b:e3:b3:6f:0b:0e:96:8b:02:2a:9e:ee:be:
                    ec:38:81:2a:8c:0c:c0:5d:ef:45:3f:c8:5a:7a:bf:
                    51:79:a6:d6:40:b3:8c:82:0a:63:f8:21:f1:47:5f:
                    07:17:90:5b:07:50:5e:17:2e:ef:6f:5b:e8:30:e5:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:37:CD:EB:71:56:A6:34:94:6B:79:90:B2:45:39:DF:6D:E4:6C:24
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3134332e3230332e3134342e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:78:f0:ce:01:60:98:f8:f3:ad:63:8b:86:cd:26:c3:6a:24:
         54:b4:1b:1b:44:34:4c:fb:56:8f:70:66:3b:26:57:67:de:ef:
         35:21:8d:33:58:47:1e:46:00:cf:65:99:48:e0:fc:82:e1:26:
         68:09:5b:d8:df:5d:d7:22:bc:ea:b3:87:7b:57:a2:4e:c5:c1:
         8c:f3:ce:27:84:c2:e7:1d:f1:0f:43:48:84:e9:3b:1f:b5:47:
         7c:79:09:11:ba:a1:ea:46:cd:ba:dd:6d:f6:5a:d0:b4:09:f1:
         1c:7a:b1:4e:1d:7e:9c:33:ad:a3:c0:9b:2b:9b:29:0f:2a:13:
         5b:1c:f2:29:28:42:67:e1:38:12:06:4f:c0:50:a4:9e:72:f4:
         bd:b6:a9:30:bd:ea:15:bf:ad:0c:b7:25:a8:06:6a:26:5c:8c:
         57:02:66:25:5b:64:3e:64:6f:dd:e7:1e:54:f2:30:e1:fc:ff:
         76:a8:db:5d:53:a0:d6:a1:f5:57:c7:b7:3e:8f:86:a1:ad:5f:
         78:d6:e9:ca:3a:e3:12:cc:28:ca:42:f5:6f:cf:e2:e7:96:b8:
         88:0f:8e:aa:40:09:01:f9:e4:80:6c:91:6c:33:1a:ba:d3:04:
         07:13:e6:2d:4b:ad:ca:0b:b5:82:04:5c:9a:36:c6:0d:40:2a:
         64:aa:e4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:37 2026 by rpki-client