Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3134332e3230332e3134352e302f32342d3234203d3e203534313438.roa
File:                     3134332e3230332e3134352e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          bGpV1fXD0Mb+qLxKcm9SMULCk0a7tqU4UvzoI7En5wA=
Subject key identifier:   AE:CC:4D:DA:4A:22:30:FA:91:49:73:D8:D1:63:BA:9D:FC:02:20:F0
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       5FC6244B3655FCA7CA4416B0AF080F57EA82E678
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3134332e3230332e3134352e302f32342d3234203d3e203534313438.roa
Signing time:             Sat 03 Oct 2026 00:31:39 +0000
ROA not before:           Sat 03 Oct 2026 00:26:39 +0000
ROA not after:            Sat 02 Oct 2027 00:31:39 +0000
asID:                     54148
IP address blocks:        143.203.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 08:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c6:24:4b:36:55:fc:a7:ca:44:16:b0:af:08:0f:57:ea:82:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct  3 00:26:39 2026 GMT
            Not After : Oct  2 00:31:39 2027 GMT
        Subject: CN=AECC4DDA4A2230FA914973D8D163BA9DFC0220F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:85:b4:76:b5:a1:46:37:75:ed:01:03:52:
                    4b:7e:71:c4:dd:57:82:cf:d6:b6:c0:0b:df:a9:77:
                    f4:f0:bd:96:ab:4d:c1:c2:b3:38:d7:76:9f:b0:b4:
                    0c:bd:8e:fd:7b:d8:91:76:33:58:8f:c6:06:b3:1d:
                    0c:0a:e9:85:4d:7f:d5:3a:42:37:00:21:51:dd:cf:
                    c3:c8:a1:01:fe:25:8d:18:00:88:5d:5c:80:39:a5:
                    01:5f:02:99:04:bb:d2:f3:40:2c:42:66:a5:7d:18:
                    d1:de:c0:0e:86:8e:18:b4:bf:15:b9:9c:db:11:d4:
                    7a:07:28:63:e5:8f:8f:ca:c8:4c:7e:a6:91:02:70:
                    b5:21:8a:04:f2:37:04:2a:02:e8:79:9e:41:db:7c:
                    e2:b9:62:c3:a8:94:ae:b3:1e:c0:1b:b4:e4:94:35:
                    37:49:06:db:84:bd:9d:ca:03:12:56:8d:e9:9b:21:
                    d2:d7:0f:ac:4c:28:20:ab:69:11:79:77:f7:cf:43:
                    bb:65:e8:3b:3d:be:ec:38:a4:d5:28:31:04:7c:8d:
                    13:da:1f:f3:1e:7f:fb:cd:f3:bd:93:49:39:af:3c:
                    e7:c9:fe:d1:fa:50:b2:47:ca:80:5c:f1:49:1a:fb:
                    92:37:06:e7:d1:bb:1b:0f:3a:e3:cf:f9:04:6e:d5:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:4D:DA:4A:22:30:FA:91:49:73:D8:D1:63:BA:9D:FC:02:20:F0
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3134332e3230332e3134352e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.203.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:6b:9f:2d:6a:0f:3f:43:0a:0c:e4:af:4e:de:47:f9:5c:84:
         84:71:e3:c4:ee:88:e1:11:ad:8d:f1:97:4e:d9:6e:0a:1b:cb:
         39:65:4e:45:7a:f5:13:b6:32:d7:07:da:09:bb:ad:4e:0e:c9:
         20:3a:ae:c6:80:b9:19:39:e2:20:6a:3c:cf:10:54:0a:ef:8d:
         e5:6c:da:9e:d0:86:12:f5:b3:c1:b6:b6:97:ee:ad:65:76:6d:
         d1:7d:23:5b:4c:3e:13:b5:57:11:35:b9:af:a2:69:8c:34:9a:
         d1:ec:25:be:0a:81:75:22:5c:4b:0b:04:7d:d3:cc:db:1a:56:
         d5:19:c9:10:d0:35:f2:b4:02:3d:88:96:a4:66:e2:6b:ca:9e:
         34:ba:60:c8:1e:4c:9c:32:6c:5c:31:ed:5c:89:9c:15:d3:96:
         83:36:d4:87:ff:44:26:c9:8a:9f:9a:13:e7:bb:2d:64:90:02:
         c5:bb:8b:7c:07:78:06:56:d8:d8:94:47:d8:66:5a:cb:fe:e9:
         6d:65:31:e1:84:53:c8:9c:61:e2:4c:43:c1:58:f4:3e:6b:60:
         73:cb:94:c8:81:9b:de:df:b6:c7:7f:3a:18:81:18:be:1c:2b:
         c6:f4:3c:4e:a9:6d:1b:59:77:be:c9:d1:32:ae:ba:d8:40:f3:
         64:b6:87:63
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUX8YkSzZV/KfKRBawrwgPV+qC5ngwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjYxMDAzMDAyNjM5WhcNMjcxMDAyMDAzMTM5
WjAzMTEwLwYDVQQDEyhBRUNDNEREQTRBMjIzMEZBOTE0OTczRDhEMTYzQkE5REZD
MDIyMEYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnWFtHa1oUY3
de0BA1JLfnHE3VeCz9a2wAvfqXf08L2Wq03BwrM413afsLQMvY79e9iRdjNYj8YG
sx0MCumFTX/VOkI3ACFR3c/DyKEB/iWNGACIXVyAOaUBXwKZBLvS80AsQmalfRjR
3sAOho4YtL8VuZzbEdR6Byhj5Y+PyshMfqaRAnC1IYoE8jcEKgLoeZ5B23ziuWLD
qJSusx7AG7TklDU3SQbbhL2dygMSVo3pmyHS1w+sTCggq2kReXf3z0O7Zeg7Pb7s
OKTVKDEEfI0T2h/zHn/7zfO9k0k5rzznyf7R+lCyR8qAXPFJGvuSNwbn0bsbDzrj
z/kEbtXv6QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFK7MTdpKIjD6kUlz2NFjup38
AiDwMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMxMzQzMzJlMzIzMDMzMmUzMTM0MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM0MzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj8uRMA0GCSqGSIb3DQEB
CwUAA4IBAQBUa58tag8/QwoM5K9O3kf5XISEcePE7ojhEa2N8ZdO2W4KG8s5ZU5F
evUTtjLXB9oJu61ODskgOq7GgLkZOeIgajzPEFQK743lbNqe0IYS9bPBtraX7q1l
dm3RfSNbTD4TtVcRNbmvommMNJrR7CW+CoF1IlxLCwR908zbGlbVGckQ0DXytAI9
iJakZuJryp40umDIHkycMmxcMe1ciZwV05aDNtSH/0QmyYqfmhPnuy1kkALFu4t8
B3gGVtjYlEfYZlrL/ultZTHhhFPInGHiTEPBWPQ+a2Bzy5TIgZve37bHfzoYgRi+
HCvG9DxOqW0bWXe+ydEyrrrYQPNktodj
-----END CERTIFICATE-----
Generated at Mon Oct 26 00:49:30 2026 by rpki-client