Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/3134322e3234382e3135352e302f32342d3234203d3e203533333433.roa
File:                     3134322e3234382e3135352e302f32342d3234203d3e203533333433.roa (raw, json)
Hash identifier:          4brb6eX86h6OASvLZ5zjta8gNRglpZqU60ariUIdXls=
Subject key identifier:   12:0F:4E:7C:4B:E0:59:29:64:CB:80:0C:10:86:3F:36:30:CE:95:C7
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       7F0FA0847F96D6A7C537987BA6C51D078F7413EF
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/3134322e3234382e3135352e302f32342d3234203d3e203533333433.roa
Signing time:             Fri 10 Oct 2025 19:52:48 +0000
ROA not before:           Fri 10 Oct 2025 19:47:48 +0000
ROA not after:            Fri 09 Oct 2026 19:52:48 +0000
asID:                     53343
IP address blocks:        142.248.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0f:a0:84:7f:96:d6:a7:c5:37:98:7b:a6:c5:1d:07:8f:74:13:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Oct 10 19:47:48 2025 GMT
            Not After : Oct  9 19:52:48 2026 GMT
        Subject: CN=120F4E7C4BE0592964CB800C10863F3630CE95C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:33:70:ba:a4:43:29:55:1a:1d:c7:fa:6c:
                    f2:e8:3b:3e:81:df:ad:39:3b:3d:06:25:9d:ad:4f:
                    d3:ef:48:f7:81:93:66:bc:56:f7:6f:36:b9:41:cc:
                    4b:14:53:07:38:c8:1a:06:84:4c:2e:b2:94:67:c2:
                    a1:4f:5d:37:c2:56:e4:d1:fa:17:49:b0:84:03:3e:
                    9b:d8:17:81:7a:17:4e:0c:b3:c7:78:0c:c7:e8:39:
                    93:21:2b:2c:db:18:0a:73:ad:57:b8:b0:29:2e:74:
                    f7:e2:1a:58:5a:ee:46:a8:05:ed:fa:3a:34:de:46:
                    6e:f0:ea:08:25:ad:b0:03:7d:6c:f1:0d:4a:61:43:
                    6e:c3:83:78:6b:61:e0:ef:0a:ad:2b:95:9a:44:2a:
                    f8:82:f1:7f:fd:27:bf:50:b0:89:0b:90:8e:10:7a:
                    42:55:5f:38:f0:b0:3f:ed:a8:c6:d5:6f:a5:ce:ae:
                    91:a9:d1:57:36:6f:51:38:81:65:d1:17:d2:bb:dc:
                    e5:bc:06:ae:b8:3a:2a:50:06:4b:08:ce:e5:e7:37:
                    1a:81:59:11:4e:71:c1:89:f2:e2:31:0a:43:1c:83:
                    e3:88:b4:ba:c9:70:d1:01:b6:c9:b5:19:6f:36:42:
                    44:d0:ee:a3:eb:10:1a:53:35:72:90:2e:5e:4b:49:
                    df:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0F:4E:7C:4B:E0:59:29:64:CB:80:0C:10:86:3F:36:30:CE:95:C7
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/3134322e3234382e3135352e302f32342d3234203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:f6:01:46:55:9f:d0:30:b3:c8:a0:99:06:b7:6f:65:ec:b2:
         6e:92:46:c3:a7:dd:5a:b6:d5:72:e2:69:b6:42:af:c2:e0:1e:
         33:c2:e7:4a:8b:dc:04:2b:94:b5:a9:24:c0:d2:db:51:70:69:
         9e:ad:93:96:c7:85:ba:b9:d5:fa:5b:0c:16:c3:fb:da:09:66:
         da:a8:3d:45:55:ac:9f:dd:90:c0:24:e5:4a:c4:ee:3e:87:68:
         ef:ba:9d:98:39:ce:02:b5:0e:de:f8:f0:23:01:35:0c:e0:f1:
         59:67:e4:08:c3:f7:cb:bf:59:a5:5f:c7:26:6f:ee:19:bb:9b:
         f0:ea:c3:44:95:41:cd:77:5a:b8:9c:cc:e0:f7:9b:3a:2d:2b:
         a1:fc:e9:7f:87:bd:19:d6:d6:7c:4e:0c:75:fe:c3:0f:c1:19:
         ae:41:28:8a:10:13:78:3c:ce:c7:50:df:c0:81:4e:12:ca:38:
         0a:3d:7f:91:d3:6a:fd:d3:a3:0f:24:72:46:cb:f3:51:1b:e4:
         b6:d9:b8:87:21:82:df:2a:5e:9e:d9:96:4c:4e:86:b9:ee:dd:
         1e:7d:91:db:58:17:ef:dd:b0:07:91:a7:e5:c3:2b:de:d1:3b:
         32:d3:e1:d5:92:c4:be:8c:bc:0e:14:c2:ad:94:0a:d6:85:85:
         c9:fa:54:4d
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUfw+ghH+W1qfFN5h7psUdB490E+8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzcyY2E4YjliMWE5ODQwMjYyNGUwZDUxNDJiMTc0MjVk
ZGQyZTAzMzBlYmQyNGRjZmYwHhcNMjUxMDEwMTk0NzQ4WhcNMjYxMDA5MTk1MjQ4
WjAzMTEwLwYDVQQDEygxMjBGNEU3QzRCRTA1OTI5NjRDQjgwMEMxMDg2M0YzNjMw
Q0U5NUM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhczcLqkQylV
Gh3H+mzy6Ds+gd+tOTs9BiWdrU/T70j3gZNmvFb3bza5QcxLFFMHOMgaBoRMLrKU
Z8KhT103wlbk0foXSbCEAz6b2BeBehdODLPHeAzH6DmTISss2xgKc61XuLApLnT3
4hpYWu5GqAXt+jo03kZu8OoIJa2wA31s8Q1KYUNuw4N4a2Hg7wqtK5WaRCr4gvF/
/Se/ULCJC5COEHpCVV848LA/7ajG1W+lzq6RqdFXNm9ROIFl0RfSu9zlvAauuDoq
UAZLCM7l5zcagVkRTnHBifLiMQpDHIPjiLS6yXDRAbbJtRlvNkJE0O6j6xAaUzVy
kC5eS0nflQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBIPTnxL4FkpZMuADBCGPzYw
zpXHMB8GA1UdIwQYMBaAFGu/urQmZy05XPwXsTytrBo4IjutMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTk0M2Q1ODM2ZmYxYjI5LzAv
NkJCRkJBQjQyNjY3MkQzOTVDRkMxN0IxM0NBREFDMUEzODIyM0JBRC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2RhMDQ0ZmNhLWM0MTgtNDA4OC04YTY2LTBjNjg5Njc2OWY3Ny83NzJj
YThiOWIxYTk4NDAyNjI0ZTBkNTE0MmIxNzQyNWRkZDJlMDMzMGViZDI0ZGNmZi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5NDNk
NTgzNmZmMWIyOS8wLzMxMzQzMjJlMzIzNDM4MmUzMTM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTMzMzMzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvibMA0GCSqGSIb3DQEB
CwUAA4IBAQBN9gFGVZ/QMLPIoJkGt29l7LJukkbDp91attVy4mm2Qq/C4B4zwudK
i9wEK5S1qSTA0ttRcGmerZOWx4W6udX6WwwWw/vaCWbaqD1FVayf3ZDAJOVKxO4+
h2jvup2YOc4CtQ7e+PAjATUM4PFZZ+QIw/fLv1mlX8cmb+4Zu5vw6sNElUHNd1q4
nMzg95s6LSuh/Ol/h70Z1tZ8Tgx1/sMPwRmuQSiKEBN4PM7HUN/AgU4SyjgKPX+R
02r906MPJHJGy/NRG+S22biHIYLfKl6e2ZZMToa57t0efZHbWBfv3bAHkaflwyve
0Tsy0+HVksS+jLwOFMKtlArWhYXJ+lRN
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:54 2025 by rpki-client