Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa
File:                     3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa (raw, json)
Hash identifier:          S00uCNetmZg2L51tN+/am8ImK4ql7SDwkTqs2jqlHsA=
Subject key identifier:   FC:A0:B3:93:61:08:FF:8B:5A:13:9C:65:F9:86:09:EF:18:03:4F:FA
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       5B209658F0B42E581AD092824764D5919C6A0628
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa
Signing time:             Fri 10 Oct 2025 19:57:39 +0000
ROA not before:           Fri 10 Oct 2025 19:52:39 +0000
ROA not after:            Fri 09 Oct 2026 19:57:39 +0000
asID:                     397730
IP address blocks:        142.248.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:20:96:58:f0:b4:2e:58:1a:d0:92:82:47:64:d5:91:9c:6a:06:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Oct 10 19:52:39 2025 GMT
            Not After : Oct  9 19:57:39 2026 GMT
        Subject: CN=FCA0B3936108FF8B5A139C65F98609EF18034FFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2f:72:ee:27:18:c3:a3:d9:90:76:55:c8:38:
                    bb:f1:e4:d3:1e:86:35:7c:d5:52:48:e3:40:16:1c:
                    b8:76:95:1d:f9:ea:94:7e:ac:90:24:88:4c:f5:d7:
                    22:12:9a:d7:35:22:12:e0:28:ee:48:c6:c7:a4:66:
                    e7:bb:3e:99:7d:6c:5a:51:36:17:6d:ba:8f:58:0b:
                    fe:2a:78:f2:0a:67:99:c9:68:ae:31:eb:3b:d2:d6:
                    0c:92:fd:0f:a7:bb:93:c3:c3:3f:fb:de:00:13:e5:
                    4a:d9:32:49:38:ca:eb:c9:43:3d:ca:84:26:82:ee:
                    8b:71:0b:3f:7b:12:65:f5:07:ee:e8:75:32:59:cd:
                    c4:e6:5c:44:20:09:fd:69:7c:b3:28:e9:dc:ce:41:
                    6b:ea:9d:04:88:32:a5:96:99:8e:f1:91:d0:8d:52:
                    64:9c:3c:8d:9f:3b:44:32:3c:62:7a:f6:b4:5f:f7:
                    12:94:14:00:bb:1e:76:2f:1c:0f:95:c1:fd:ac:44:
                    1d:9c:b1:5b:02:3c:ea:02:de:0a:1d:89:73:b1:9a:
                    bb:33:6b:09:36:ba:78:21:fd:9b:89:2a:32:af:6a:
                    3f:4f:60:d7:e2:69:74:57:70:10:4a:74:45:b2:15:
                    4a:e9:53:ff:14:ea:6b:3b:da:3d:ff:f8:a8:36:7f:
                    a1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A0:B3:93:61:08:FF:8B:5A:13:9C:65:F9:86:09:EF:18:03:4F:FA
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/3134322e3234382e3131312e302f32342d3234203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:79:dd:4b:11:63:eb:4c:09:2a:3c:99:39:fb:10:76:33:
         50:de:ee:95:2c:9e:22:35:7f:53:d6:f9:96:a7:b7:b9:79:fa:
         10:00:fe:10:b5:82:77:0a:6f:cc:ac:ad:93:ed:ea:f0:3a:88:
         68:e6:d5:a9:83:66:4e:95:f8:6b:07:0f:e0:c0:b4:77:6d:dc:
         14:ab:da:1d:40:03:00:eb:04:22:5d:f8:c1:cd:b7:57:70:27:
         08:3b:91:0f:dd:d3:36:d9:81:85:d6:02:86:f8:d0:52:f9:83:
         f4:79:6b:dc:a1:37:99:c7:4f:9b:14:91:d5:ee:42:42:1b:fe:
         26:77:1f:cd:66:a4:84:c0:93:d7:4d:38:4a:49:b1:10:20:53:
         4e:97:0e:4f:c0:ae:29:f3:e0:29:69:ea:83:7e:95:07:4c:d1:
         8a:8e:ea:30:5e:9c:83:4f:84:03:04:2d:77:59:67:92:44:2c:
         60:f7:6c:1d:77:6b:04:13:32:0b:2c:4e:f2:fa:75:54:cc:b1:
         cc:4f:c6:19:ad:51:18:cc:e0:ba:20:23:3e:f7:cb:63:12:1e:
         8d:87:37:96:7f:a9:9e:cc:6e:45:77:52:56:81:2e:b3:e9:84:
         3f:66:ac:61:ed:61:25:41:67:04:6c:0a:c8:a3:da:8c:6a:be:
         b4:3d:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:11 2025 by rpki-client