Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa
File:                     3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa (raw, json)
Hash identifier:          Vn8aag8NWPlK5Ek9m7LhGtoD/XZ/2iNbqhciBujxD/M=
Subject key identifier:   EA:41:52:E8:73:60:25:6A:CD:08:30:7B:B4:2A:E4:C6:E3:0D:41:12
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       01930F4B26AC292D2883C052C22EE389C9D2DE1B
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa
Signing time:             Fri 31 Oct 2025 15:30:39 +0000
ROA not before:           Fri 31 Oct 2025 15:25:39 +0000
ROA not after:            Fri 30 Oct 2026 15:30:39 +0000
asID:                     214654
IP address blocks:        192.208.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:0f:4b:26:ac:29:2d:28:83:c0:52:c2:2e:e3:89:c9:d2:de:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 31 15:25:39 2025 GMT
            Not After : Oct 30 15:30:39 2026 GMT
        Subject: CN=EA4152E87360256ACD08307BB42AE4C6E30D4112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:94:db:78:3d:1a:79:d2:b8:12:58:45:79:
                    69:53:d1:6f:8b:41:12:25:48:8d:97:3e:28:87:ae:
                    8d:0b:51:fd:b1:f2:20:0c:22:6f:f2:17:4c:48:33:
                    0b:f4:59:10:38:90:36:f1:8f:db:2e:68:d7:fc:55:
                    f2:98:3c:70:26:a1:5c:0d:17:49:9e:de:9f:66:81:
                    06:62:0b:4e:a6:fb:61:50:03:4e:c0:89:7f:0d:18:
                    0e:5a:d1:e1:67:ac:2f:a0:be:f5:a3:4d:62:a8:a1:
                    58:0e:a7:b5:5b:2d:78:30:46:61:4d:b1:34:ab:87:
                    ca:78:e3:ac:1e:73:eb:2e:a8:03:bd:c5:f6:7e:59:
                    35:e6:f9:4f:a0:4e:8f:5b:64:52:46:df:1d:e2:8c:
                    de:af:9c:54:23:af:6b:38:a6:f9:a5:23:1d:37:b0:
                    96:91:2d:68:f3:9d:94:d2:3c:4d:62:80:bd:b4:92:
                    06:1b:84:58:3a:0d:93:43:97:29:ad:f4:0c:5d:7e:
                    8b:14:92:f6:c7:9f:c0:94:08:ed:21:26:70:3a:e9:
                    e8:d2:d1:42:c8:21:9d:e6:cd:ea:cb:e4:2c:66:82:
                    0a:d7:55:08:ec:ad:ae:e1:ca:91:6b:62:2e:51:4d:
                    05:4a:72:52:2b:e6:ce:86:d3:8b:3b:f0:ad:52:96:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:41:52:E8:73:60:25:6A:CD:08:30:7B:B4:2A:E4:C6:E3:0D:41:12
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323134363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:86:46:ee:0f:58:5b:e7:0f:04:05:1f:f2:58:7d:3a:0e:b4:
         35:0a:db:c6:51:1f:76:7e:8f:ca:15:08:19:d1:36:99:5d:9c:
         8a:af:1a:d8:31:1a:74:aa:40:14:e6:45:dd:04:2a:88:42:ac:
         f2:87:94:1b:63:01:1e:80:3c:c6:0f:95:11:c7:c5:48:77:bb:
         0a:db:ce:28:76:c3:c1:40:95:77:e9:37:79:bd:1a:4b:79:b9:
         0c:c4:dd:bd:ae:fe:3a:98:0d:0c:a0:72:7c:43:57:f1:fa:51:
         71:8d:2b:d8:bf:3e:46:2e:3f:a1:e5:79:a3:73:24:c0:a1:72:
         a3:f5:0b:d0:cb:a0:bc:09:ee:a7:57:54:67:d7:e9:67:ff:26:
         a4:f9:00:3e:15:6a:87:0f:db:92:2b:53:81:d7:e9:2e:83:39:
         9a:87:7d:ca:17:1c:92:6e:e9:56:e1:18:9d:e3:92:63:66:54:
         8f:6b:b9:c3:95:70:dd:6b:ec:f1:a1:64:9b:d4:99:de:2d:cb:
         0f:fb:22:cc:38:52:05:e2:fa:9d:1f:98:82:2a:ee:0a:0c:c8:
         71:99:d9:3c:2b:14:33:28:57:af:82:01:5f:20:c1:88:c3:76:
         08:22:d0:00:34:25:15:bf:e2:7a:b5:b0:fe:7e:3f:4b:bb:50:
         03:d3:a4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:22:45 2025 by rpki-client