Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS154114.roa
File:                     AS154114.roa (raw, json)
Hash identifier:          VQwkdtb3UGa3o6bXhQGPMEFLEk+iLhsuwQM3tu9HBfA=
Subject key identifier:   62:09:78:55:B6:FE:7C:1E:2A:D3:48:E8:F9:32:BC:CD:99:F5:FE:C5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1B23E33D842E9F4225554E61DB8091B7E496BE59
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS154114.roa
Signing time:             Fri 03 Oct 2025 08:13:56 +0000
ROA not before:           Fri 03 Oct 2025 08:08:56 +0000
ROA not after:            Fri 02 Oct 2026 08:13:56 +0000
asID:                     154114
IP address blocks:        104.234.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:23:e3:3d:84:2e:9f:42:25:55:4e:61:db:80:91:b7:e4:96:be:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct  3 08:08:56 2025 GMT
            Not After : Oct  2 08:13:56 2026 GMT
        Subject: CN=62097855B6FE7C1E2AD348E8F932BCCD99F5FEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:fc:1e:b2:6c:3b:ce:5a:50:ea:46:b7:93:
                    04:ca:4c:29:93:8d:0e:34:74:dd:df:e5:6c:f6:1a:
                    9d:53:67:f4:33:99:77:4f:02:e4:5e:a5:cb:5f:31:
                    27:34:ac:91:b2:84:77:f2:48:d1:3b:05:0a:02:e3:
                    cf:ea:0f:e5:63:64:4c:fe:94:a1:dc:ff:a8:cb:16:
                    f6:3b:90:56:fd:d4:f4:dc:e8:f2:2a:5f:99:52:db:
                    fa:d3:f1:87:db:61:96:4f:ae:68:55:e2:58:f8:05:
                    27:c1:db:5f:1d:71:f8:a8:e4:a3:6a:f1:11:84:37:
                    30:1d:c6:fa:8f:19:1e:1f:a7:2c:49:8f:6e:74:a7:
                    84:1a:f8:3a:60:ae:ee:9b:b5:b1:a4:38:35:a1:9b:
                    65:19:db:c1:40:25:15:e6:23:51:32:40:16:08:8f:
                    05:55:f4:dd:86:ad:39:ef:5f:b7:f3:b7:bd:cc:48:
                    37:74:dc:83:48:ee:42:68:b3:06:a4:dc:06:e9:7d:
                    aa:5b:b6:79:3b:cb:69:16:80:ac:91:6d:90:89:d6:
                    f3:77:21:0b:3f:45:5a:b4:08:e5:54:1f:c6:a3:b5:
                    09:2b:c6:96:f0:d8:93:27:71:dc:f4:c4:23:0b:a1:
                    ba:d3:26:9f:e6:1f:bc:dd:63:f0:e9:2e:0c:33:0f:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:78:55:B6:FE:7C:1E:2A:D3:48:E8:F9:32:BC:CD:99:F5:FE:C5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS154114.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:27:cc:c0:a0:72:fb:9e:51:2a:f4:01:19:86:4e:2d:54:94:
         da:38:bc:39:ef:83:17:5a:4b:a3:88:ee:02:c5:b6:83:8a:89:
         23:c6:06:8f:dc:f6:58:27:24:c3:78:35:fd:40:1b:71:41:62:
         bd:c7:5c:e7:eb:19:c7:f7:d1:a5:52:78:5e:18:e4:71:66:76:
         71:70:8b:10:b1:99:c9:20:78:32:83:37:ec:aa:26:db:fb:54:
         a5:e0:66:4b:ef:83:3f:00:c8:c4:cd:25:d7:4c:d7:63:23:ce:
         35:fc:d1:6f:35:6f:d2:d4:db:a0:53:e7:88:47:64:17:7d:61:
         66:c5:b2:55:e5:c1:ab:8f:57:cd:38:41:54:02:6a:8f:f9:a5:
         0f:10:49:34:61:3b:f3:42:9e:53:02:f2:03:4e:d4:6a:98:ce:
         9d:53:e6:45:50:f2:6b:25:f9:19:6b:74:c1:b0:d8:50:ce:3f:
         5c:1f:7c:ed:e8:2c:9c:6b:ce:2a:ec:f5:cd:8c:a4:9f:45:90:
         2e:c8:20:23:a9:ea:73:ad:8e:16:74:ad:b5:f5:10:e1:70:4a:
         01:34:50:cd:29:fd:d2:09:87:38:78:d4:92:34:70:71:79:2e:
         2b:6e:88:15:ee:d3:e8:d9:cc:e5:c1:1a:6c:d3:1d:84:b3:8f:
         b6:ed:60:0b
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUGyPjPYQun0IlVU5h24CRt+SWvlkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDAzMDgwODU2WhcNMjYxMDAyMDgxMzU2
WjAzMTEwLwYDVQQDEyg2MjA5Nzg1NUI2RkU3QzFFMkFEMzQ4RThGOTMyQkNDRDk5
RjVGRUM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNH8HrJsO85a
UOpGt5MEykwpk40ONHTd3+Vs9hqdU2f0M5l3TwLkXqXLXzEnNKyRsoR38kjROwUK
AuPP6g/lY2RM/pSh3P+oyxb2O5BW/dT03OjyKl+ZUtv60/GH22GWT65oVeJY+AUn
wdtfHXH4qOSjavERhDcwHcb6jxkeH6csSY9udKeEGvg6YK7um7WxpDg1oZtlGdvB
QCUV5iNRMkAWCI8FVfTdhq0571+387e9zEg3dNyDSO5CaLMGpNwG6X2qW7Z5O8tp
FoCskW2QidbzdyELP0VatAjlVB/Go7UJK8aW8NiTJ3Hc9MQjC6G60yaf5h+83WPw
6S4MMw8IEQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGIJeFW2/nweKtNI6PkyvM2Z
9f7FMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzE1NDExNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqDjANBgkqhkiG9w0BAQsFAAOC
AQEALyfMwKBy+55RKvQBGYZOLVSU2ji8Oe+DF1pLo4juAsW2g4qJI8YGj9z2WCck
w3g1/UAbcUFivcdc5+sZx/fRpVJ4XhjkcWZ2cXCLELGZySB4MoM37Kom2/tUpeBm
S++DPwDIxM0l10zXYyPONfzRbzVv0tTboFPniEdkF31hZsWyVeXBq49XzThBVAJq
j/mlDxBJNGE780KeUwLyA07UapjOnVPmRVDyayX5GWt0wbDYUM4/XB987egsnGvO
Kuz1zYykn0WQLsggI6nqc62OFnSttfUQ4XBKATRQzSn90gmHOHjUkjRwcXkuK26I
Fe7T6NnM5cEabNMdhLOPtu1gCw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:26:37 2025 by rpki-client