Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa
File:                     3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa (raw, json)
Hash identifier:          28uiw3QFrxcDc8kPzwrBnutszTq7twBkFhXgGRNmknQ=
Subject key identifier:   02:46:E5:CC:15:E7:AD:FE:A6:0E:E6:2E:4E:F0:EF:AC:6A:0F:F8:BF
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       5BF2C05D1AF1EF5D6384DDC47474C35F7DE321DB
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa
Signing time:             Fri 11 Sep 2026 20:54:21 +0000
ROA not before:           Fri 11 Sep 2026 20:49:21 +0000
ROA not after:            Fri 10 Sep 2027 20:54:21 +0000
asID:                     397730
IP address blocks:        142.248.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f2:c0:5d:1a:f1:ef:5d:63:84:dd:c4:74:74:c3:5f:7d:e3:21:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Sep 11 20:49:21 2026 GMT
            Not After : Sep 10 20:54:21 2027 GMT
        Subject: CN=0246E5CC15E7ADFEA60EE62E4EF0EFAC6A0FF8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:10:f5:56:ec:84:e1:52:82:2a:fa:7a:f7:
                    c4:6b:5d:79:d6:19:6e:d2:aa:c0:0e:86:a8:a6:cc:
                    af:27:80:4f:84:4a:10:12:da:22:17:eb:54:f2:57:
                    a4:30:70:c6:64:fc:b9:10:73:c4:75:bf:fd:ec:ef:
                    30:03:c8:37:29:a7:60:11:0a:2a:40:4f:9c:f8:59:
                    f0:5d:9a:74:62:9a:7f:ab:bc:46:ab:c7:d5:72:a0:
                    6b:c3:61:c7:57:65:4e:80:8b:56:8e:5e:cf:f5:53:
                    4c:82:79:80:dc:89:0a:00:cb:bf:c2:d5:b7:b5:d8:
                    70:e5:43:a6:6d:cf:1d:a6:6b:7d:b0:2c:4c:94:eb:
                    92:ef:45:e7:b3:c4:89:11:be:0c:42:be:89:b7:af:
                    11:75:32:fe:a6:97:8c:1d:7e:94:f7:b7:34:37:0e:
                    0c:c9:6c:00:65:38:5f:c8:44:96:ed:4b:c3:a1:de:
                    5b:a7:c2:ea:f3:9b:06:a0:41:ff:40:e8:40:6f:44:
                    0c:fd:ed:6b:b2:85:05:a5:cc:6c:10:31:ea:e2:75:
                    cb:32:57:d2:f5:c0:ac:df:23:a5:c8:36:66:5c:8b:
                    10:91:a0:eb:5f:17:8c:2b:4c:05:c1:c1:1b:b0:0b:
                    59:52:b4:fb:f1:0a:55:22:2f:68:40:63:fb:f9:cd:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:E5:CC:15:E7:AD:FE:A6:0E:E6:2E:4E:F0:EF:AC:6A:0F:F8:BF
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:9d:33:dc:e8:86:7f:36:4b:29:62:0a:f2:db:79:13:aa:
         b4:8a:7b:76:9a:8c:1b:75:4c:04:5e:ed:c9:70:3d:70:94:1e:
         4e:c3:7b:43:49:1f:7f:44:cd:95:d5:3d:47:46:d7:00:89:16:
         6d:bc:cd:4d:5a:51:93:21:68:e3:4f:4d:e8:1f:f6:6b:1d:dd:
         d2:ff:26:b8:a5:fd:d3:2f:7f:c3:64:9e:9b:9c:cb:85:17:86:
         9a:db:4c:78:79:63:51:b9:46:77:e5:10:80:e1:58:b4:04:98:
         fd:0b:4f:b5:ac:9e:dd:75:41:3d:9f:ee:de:32:61:a5:45:1d:
         31:a3:44:37:44:90:0a:50:54:8a:27:bc:39:36:61:22:fd:d1:
         0d:02:15:21:56:d1:72:c6:ee:08:1e:89:79:0d:51:af:22:e4:
         2c:4c:60:9d:3d:d9:03:11:00:0a:01:65:05:5b:65:96:11:49:
         13:ff:eb:bb:4b:4a:76:f5:a0:82:0c:1c:38:4b:59:0c:90:68:
         15:ca:2e:56:35:39:e1:97:51:8c:3b:55:bf:26:39:a9:f9:d2:
         9a:cf:f6:03:7a:de:b1:65:c7:f9:95:4b:0c:db:34:f4:d2:85:
         b4:6f:7f:47:a3:49:97:b5:0e:0a:cf:99:9a:50:1f:7b:5a:56:
         e8:e2:90:05
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUW/LAXRrx711jhN3EdHTDX33jIdswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODc3OGNkYmRjZGI5YzAxOWU1NDc4OWIw
MjBiNjg5NTAyYjA3YTZiZGMwHhcNMjYwOTExMjA0OTIxWhcNMjcwOTEwMjA1NDIx
WjAzMTEwLwYDVQQDEygwMjQ2RTVDQzE1RTdBREZFQTYwRUU2MkU0RUYwRUZBQzZB
MEZGOEJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx8Q9VbshOFS
gir6evfEa1151hlu0qrADoaopsyvJ4BPhEoQEtoiF+tU8lekMHDGZPy5EHPEdb/9
7O8wA8g3KadgEQoqQE+c+FnwXZp0Ypp/q7xGq8fVcqBrw2HHV2VOgItWjl7P9VNM
gnmA3IkKAMu/wtW3tdhw5UOmbc8dpmt9sCxMlOuS70Xns8SJEb4MQr6Jt68RdTL+
ppeMHX6U97c0Nw4MyWwAZThfyESW7UvDod5bp8Lq85sGoEH/QOhAb0QM/e1rsoUF
pcxsEDHq4nXLMlfS9cCs3yOlyDZmXIsQkaDrXxeMK0wFwcEbsAtZUrT78QpVIi9o
QGP7+c1viwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFAJG5cwV563+pg7mLk7w76xq
D/i/MB8GA1UdIwQYMBaAFEtcvEaOYkRKVFtFg2GK4yBAirCSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzAxZjJiYWNjYzU1NzQwZDNhNGEyODI0YjdlZmQ1OGEyLzAv
NEI1Q0JDNDY4RTYyNDQ0QTU0NUI0NTgzNjE4QUUzMjA0MDhBQjA5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2RhMjcyODY5LTUxMjctNGFmNi04MDUzLWI4NjE3Y2NiOWRlMy8wMzA2
OGNiZTg4Nzc4Y2RiZGNkYjljMDE5ZTU0Nzg5YjAyMGI2ODk1MDJiMDdhNmJkYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8wMWYyYmFjY2M1NTc0MGQzYTRhMjgy
NGI3ZWZkNThhMi8wLzMxMzQzMjJlMzIzNDM4MmUzMTMxMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzczNzMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACO+G8wDQYJKoZIhvcN
AQELBQADggEBAFLJnTPc6IZ/NkspYgry23kTqrSKe3aajBt1TARe7clwPXCUHk7D
e0NJH39EzZXVPUdG1wCJFm28zU1aUZMhaONPTegf9msd3dL/Jril/dMvf8Nknpuc
y4UXhprbTHh5Y1G5RnflEIDhWLQEmP0LT7Wsnt11QT2f7t4yYaVFHTGjRDdEkApQ
VIonvDk2YSL90Q0CFSFW0XLG7ggeiXkNUa8i5CxMYJ092QMRAAoBZQVbZZYRSRP/
67tLSnb1oIIMHDhLWQyQaBXKLlY1OeGXUYw7Vb8mOan50prP9gN63rFlx/mVSwzb
NPTShbRvf0ejSZe1DgrPmZpQH3taVujikAU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:44:10 2026 by rpki-client