Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa
File:                     3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier:          /f5FFgJahj6/jruJXajD3sizI/pBGT6zfrVmLhOqLgI=
Subject key identifier:   91:9B:2A:DF:9D:9A:94:E3:DD:3F:6B:42:6E:11:02:BF:9F:AB:F1:DE
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       6B29059256B9EDF03D188ACAB0F435092565AB15
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa
Signing time:             Thu 30 Oct 2025 12:30:39 +0000
ROA not before:           Thu 30 Oct 2025 12:25:39 +0000
ROA not after:            Thu 29 Oct 2026 12:30:39 +0000
asID:                     215304
IP address blocks:        192.208.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:05:92:56:b9:ed:f0:3d:18:8a:ca:b0:f4:35:09:25:65:ab:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 30 12:25:39 2025 GMT
            Not After : Oct 29 12:30:39 2026 GMT
        Subject: CN=919B2ADF9D9A94E3DD3F6B426E1102BF9FABF1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:70:ed:7b:f2:30:66:0b:91:7a:8f:96:87:a6:
                    fa:9f:5b:02:1b:4c:de:e2:80:d1:5e:39:f3:81:5f:
                    2b:64:9e:d7:b7:f4:66:8d:2d:1b:84:0b:f0:6c:2f:
                    78:9f:2f:0d:39:f2:ec:3e:66:f8:a1:dc:b0:c2:14:
                    01:94:cf:4b:59:02:7e:b2:f1:98:ae:fd:5b:bb:a4:
                    39:e7:ee:32:bb:82:9d:3a:f7:1a:88:f7:d4:91:e6:
                    0d:14:46:a8:19:a8:e7:82:8f:63:45:aa:44:df:52:
                    77:bd:28:72:3f:5f:2e:86:86:8c:44:db:59:d6:c6:
                    75:31:5f:02:31:19:c0:01:5c:77:01:79:d1:b9:12:
                    f5:cd:4c:b9:18:a0:af:bc:96:60:72:fd:2d:22:f9:
                    d4:2b:62:e1:7e:68:28:b5:dc:d7:7e:d2:9a:44:74:
                    55:91:ff:3d:77:5a:a6:f2:e7:a4:e9:01:05:06:d0:
                    19:ac:16:6f:a3:db:06:48:9b:eb:6e:60:a5:c8:29:
                    8f:df:05:ff:6e:78:33:fc:ac:a7:bf:da:cb:e8:39:
                    66:82:fb:a7:f7:42:6e:77:21:7a:e4:29:c7:73:2b:
                    e6:22:54:36:ef:0f:1b:78:47:d7:c9:da:32:11:83:
                    c6:44:13:ed:7e:43:e3:10:d9:0c:0a:60:b1:38:03:
                    13:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9B:2A:DF:9D:9A:94:E3:DD:3F:6B:42:6E:11:02:BF:9F:AB:F1:DE
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323135333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:d0:0e:04:e4:63:c5:bf:81:17:0c:21:af:8a:b7:0c:7f:e8:
         d4:99:50:40:6c:0f:6b:01:22:77:ae:a3:4e:d0:8c:f2:4b:a6:
         70:6d:6f:cc:fd:f2:4d:14:49:43:11:c1:6f:78:10:8e:08:5e:
         f8:f5:aa:de:dd:2b:d0:e4:c1:13:69:fc:2b:57:a4:3b:bf:a4:
         a9:96:8c:34:b0:11:b1:62:6f:b0:6f:ce:7c:19:c6:f0:a6:ec:
         88:20:d5:a1:19:bc:19:de:1c:87:61:6a:b1:60:1b:18:56:bd:
         76:67:2a:dc:a5:a5:58:74:b4:0c:06:85:ed:0f:5c:ed:13:ea:
         35:45:8c:92:61:82:f9:87:46:ec:31:ed:d1:cb:62:1e:fc:79:
         39:b9:3d:85:a4:27:ca:0f:ec:ee:a6:07:0a:3f:2b:22:3c:f4:
         64:b0:38:ff:ab:e6:19:43:a7:75:4c:c2:4d:9a:ad:46:60:6f:
         d1:74:8a:8a:04:3f:c4:bf:96:dd:8f:e1:23:17:38:d0:7f:04:
         2e:60:b6:a0:aa:f5:ee:06:64:83:73:7c:e6:73:6e:a1:1a:79:
         3d:e4:6e:f7:cf:0e:00:6f:67:54:ed:68:9a:36:48:c2:4c:fb:
         40:ed:d7:41:9d:a1:c1:7f:01:9c:ef:f7:7d:02:18:88:45:2f:
         7d:ca:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:32:36 2025 by rpki-client