Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31322e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e31322e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          Cw8BjOSpJ4zUBzUl9MKxPRJEQOQP1dcnLG3WXnmoe5U=
Subject key identifier:   B7:6A:17:2D:35:C6:69:43:5A:DE:9B:22:91:82:71:21:01:7A:DD:8F
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       25F018629BA815D467E129526A188DC9A386AA51
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31322e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 14 Nov 2025 18:29:44 +0000
ROA not before:           Fri 14 Nov 2025 18:24:44 +0000
ROA not after:            Fri 13 Nov 2026 18:29:44 +0000
asID:                     54004
IP address blocks:        144.168.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 17:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f0:18:62:9b:a8:15:d4:67:e1:29:52:6a:18:8d:c9:a3:86:aa:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Nov 14 18:24:44 2025 GMT
            Not After : Nov 13 18:29:44 2026 GMT
        Subject: CN=B76A172D35C669435ADE9B2291827121017ADD8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1c:b9:3d:3a:cb:c3:40:16:1e:65:ea:20:43:
                    f0:a7:d8:f9:0f:03:95:06:9f:3f:58:d5:cd:27:d3:
                    20:af:19:84:58:32:25:d4:78:1c:6f:c5:27:6a:8f:
                    5f:24:8f:05:c6:02:f4:42:ab:31:f4:84:4a:6a:c7:
                    fd:a0:71:e4:b0:b0:0b:21:9f:f2:2d:ef:e9:8b:e7:
                    8e:a9:9a:b2:48:e4:66:a1:78:57:01:2d:57:15:90:
                    b5:5b:2a:89:ec:d5:18:0b:de:55:ea:49:98:4c:aa:
                    97:24:93:bf:e4:cd:eb:b8:c5:21:cc:f6:ff:ee:b0:
                    f4:b5:d6:08:72:c1:2b:37:a8:ae:8e:72:be:a1:f5:
                    f5:e1:ca:0b:a8:03:b1:c7:b2:ac:99:ee:63:4f:2d:
                    8f:f1:d1:e5:3f:8b:3e:0e:7e:ea:b4:99:12:6d:b1:
                    a3:e5:37:58:47:47:49:fd:cb:ef:c0:59:79:92:d3:
                    63:ff:49:ac:41:ab:dc:90:86:ab:d7:86:41:92:ec:
                    6e:17:80:eb:cd:8e:a0:7e:55:29:fc:22:da:90:35:
                    92:e5:53:4e:9a:6a:6b:b5:af:46:6f:07:6a:b9:a9:
                    00:8e:29:fe:20:00:d1:39:96:a4:cb:1a:95:84:28:
                    a2:af:71:00:75:d1:d0:e9:30:aa:ee:35:4c:c2:ea:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6A:17:2D:35:C6:69:43:5A:DE:9B:22:91:82:71:21:01:7A:DD:8F
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31322e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:22:0b:33:bc:cb:d6:ed:2e:25:2c:b2:38:1a:ba:45:44:db:
         f2:1a:db:62:70:29:d0:98:37:a9:f9:5b:79:4d:84:97:21:cf:
         80:92:61:23:d3:57:92:ad:f5:6e:d6:89:f8:60:50:1f:c7:6e:
         a9:24:c2:4e:7e:f2:19:a0:43:48:08:44:6b:da:71:82:93:de:
         51:48:61:40:03:8a:70:09:9d:78:72:a8:2b:11:c1:c2:74:7a:
         dd:8e:d4:ff:14:e5:78:dc:9c:22:84:42:76:28:04:45:3a:d4:
         07:f9:78:82:df:dd:b7:f0:54:68:ba:91:84:70:0b:9b:1d:35:
         fc:f4:17:ba:cf:f9:68:a2:fe:46:f2:67:0a:cc:5f:b3:48:0b:
         3a:59:98:9d:20:f9:9f:72:5b:68:2a:74:77:25:10:70:7c:b9:
         09:3a:f5:fc:62:82:53:09:5a:5f:9f:41:30:2e:59:2b:6a:a3:
         74:1b:89:19:61:06:64:fe:bf:91:d2:bb:9e:86:6d:ed:e4:42:
         2b:89:35:88:b3:21:c6:e2:f6:4f:21:21:7b:2a:09:25:cf:56:
         11:6c:37:93:d1:75:a8:53:bf:40:39:61:08:f7:b3:06:fc:80:
         e3:a6:d3:5c:1f:e6:9d:dc:a7:3e:64:2b:a6:aa:34:d8:a9:d4:
         e4:a7:53:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:25 2025 by rpki-client