Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
File:                     AS48266.roa (raw, json)
Hash identifier:          ZGEhvxzsHitSucwm8+kUT5JNMwBbbGTjLglUDy4qiNo=
Subject key identifier:   14:E9:23:54:69:21:E0:4B:47:BD:BA:75:FC:02:E9:2F:79:39:B0:FA
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       29516C9AE92986D5D789D560F39414340D1E2030
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa
Signing time:             Thu 03 Jul 2025 15:52:32 +0000
ROA not before:           Thu 03 Jul 2025 15:47:32 +0000
ROA not after:            Thu 02 Jul 2026 15:52:32 +0000
asID:                     48266
IP address blocks:        144.48.80.0/24 maxlen: 24
                          2a06:a005:90::/44 maxlen: 48
                          2a06:a005:a0::/44 maxlen: 48
                          2a06:a005:350::/44 maxlen: 48
                          2a06:a005:870::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:51:6c:9a:e9:29:86:d5:d7:89:d5:60:f3:94:14:34:0d:1e:20:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:47:32 2025 GMT
            Not After : Jul  2 15:52:32 2026 GMT
        Subject: CN=14E923546921E04B47BDBA75FC02E92F7939B0FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ab:a7:ec:80:d0:c2:49:de:86:03:06:6a:1c:
                    43:e5:5d:a3:0b:ed:3c:34:76:c4:f3:f1:5d:24:5f:
                    95:12:81:5f:5a:90:ff:f1:d7:78:6d:53:fb:ce:bf:
                    f8:f3:f6:c4:78:1c:88:8c:3c:3e:5e:5a:21:4f:76:
                    8e:35:a4:2b:13:5e:81:5c:a7:d1:37:d2:cd:3b:1c:
                    c5:11:62:3b:77:77:9c:b5:b3:31:16:dd:1d:b0:97:
                    f3:f4:27:f4:26:b2:26:39:3e:82:e0:6c:fc:b9:5b:
                    41:0d:e0:5f:fa:3c:37:c0:c8:41:3d:1a:d2:d2:38:
                    7b:18:8a:f9:b5:87:e6:2e:d0:4e:f4:9b:df:06:7a:
                    81:32:e6:f2:30:28:7b:16:7d:89:d3:7e:f0:da:17:
                    78:ac:d5:47:ba:f9:b6:12:39:31:95:a6:24:0f:84:
                    49:61:1b:9e:14:51:d7:8f:b4:34:ce:c3:d1:a3:76:
                    36:1f:f6:c4:fe:ad:de:21:85:a3:c1:8f:10:40:fd:
                    7f:bf:ef:84:56:09:cb:c1:aa:0c:86:da:ed:ec:65:
                    a6:3f:c1:87:19:6a:7e:17:7a:f2:20:5d:9f:56:22:
                    7c:c6:c2:79:8d:2f:8e:a5:07:07:d7:d0:fb:5c:d5:
                    7d:49:46:61:fe:7d:2e:2b:86:45:cd:df:08:48:79:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E9:23:54:69:21:E0:4B:47:BD:BA:75:FC:02:E9:2F:79:39:B0:FA
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS48266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.80.0/24
                IPv6:
                  2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
                  2a06:a005:350::/44
                  2a06:a005:870::/44

    Signature Algorithm: sha256WithRSAEncryption
         a3:2d:96:34:23:ef:52:0d:81:85:0e:fb:89:72:5c:b6:47:b8:
         a9:10:9b:82:5e:89:a0:f4:2f:dc:2c:ef:cb:93:83:c3:b8:26:
         5f:c6:33:cb:1e:c4:44:2d:5f:71:48:34:69:7c:c7:5a:fe:1b:
         ab:60:51:2a:7d:b0:8c:7b:33:6f:1d:a3:b3:7a:87:dc:79:2f:
         61:e3:23:77:aa:70:d0:52:e0:c7:07:0f:6f:88:d2:db:9c:76:
         6a:64:de:f7:4d:b0:bc:cf:2f:cf:8c:66:6f:23:68:26:07:e2:
         2e:9d:4b:76:39:86:99:9d:96:a0:b2:c1:fc:b5:e6:2e:d5:de:
         a7:17:78:dc:8b:a3:73:e3:34:93:c4:76:94:6d:48:1c:1a:0d:
         2e:9c:a3:c2:35:7d:50:52:81:d4:f9:e5:91:a5:ba:5a:e7:ab:
         5a:a9:3c:c8:2a:6f:60:1d:b9:eb:6d:d2:31:d8:37:15:62:87:
         1a:ae:05:08:17:c6:c0:e7:32:d5:e5:d1:2d:07:44:2d:ea:cd:
         2d:68:44:e9:7d:42:f1:ab:b1:1c:b4:57:eb:b8:0b:b5:65:6a:
         52:5c:3a:c8:fa:43:27:98:d5:29:c0:32:bc:12:b0:9d:e5:a1:
         40:ae:cc:dd:13:78:dc:75:c0:4a:c4:39:53:e1:05:bd:f0:2f:
         3b:f3:01:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:55:10 2025 by rpki-client