Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e31332e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          cf8NeM0e7Hvp/RsQY3tiKrzDoW55g/cmukPKcuYHktk=
Subject key identifier:   60:32:FC:BC:CC:1D:BC:D1:70:6B:5C:AA:25:0B:15:44:9F:81:60:79
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       2A2A13C64E7AEFA579F4D4C2A5DE3024C152991D
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 14 Nov 2025 18:29:44 +0000
ROA not before:           Fri 14 Nov 2025 18:24:44 +0000
ROA not after:            Fri 13 Nov 2026 18:29:44 +0000
asID:                     54004
IP address blocks:        144.168.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 17:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:2a:13:c6:4e:7a:ef:a5:79:f4:d4:c2:a5:de:30:24:c1:52:99:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Nov 14 18:24:44 2025 GMT
            Not After : Nov 13 18:29:44 2026 GMT
        Subject: CN=6032FCBCCC1DBCD1706B5CAA250B15449F816079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:f9:bf:3d:61:26:01:91:b9:0d:1f:10:0f:
                    ff:ce:1b:32:cf:60:c4:6a:e7:e3:ae:b8:3b:00:a0:
                    a9:56:c2:24:0c:a9:fa:a4:c4:4d:38:83:ad:81:db:
                    87:2a:42:53:98:ae:60:e2:d0:8d:86:bf:a2:89:16:
                    81:e1:9f:f3:4e:d7:e7:ed:57:29:bd:9c:e2:a2:3f:
                    15:54:7f:bd:4f:35:33:d3:fc:38:6f:02:0b:72:2d:
                    34:c1:fb:30:10:4d:29:6f:f3:1e:44:3e:e1:8a:2e:
                    8f:97:97:12:f4:03:e5:ca:05:d6:3f:a6:69:53:97:
                    ca:c7:19:49:f5:6d:c6:e2:a0:8d:b9:8a:6a:24:04:
                    15:9c:3a:25:54:a3:bd:8f:ac:dc:3f:e8:af:02:5e:
                    db:33:c6:21:8f:81:36:49:0e:a4:6a:96:d8:33:63:
                    5e:a7:fe:95:41:f6:ac:57:b2:49:af:1b:41:9d:d7:
                    9a:26:b8:36:b9:8b:e6:06:1a:b3:36:05:38:74:ce:
                    bf:6d:47:c5:62:fa:9d:3a:89:da:67:54:d5:18:d1:
                    3c:36:8f:a0:b2:b1:01:54:4c:76:63:c9:ae:f5:ea:
                    53:35:29:8c:a8:fa:22:0b:b2:02:84:ba:52:5b:06:
                    6b:c6:80:19:66:f7:58:67:fd:c4:20:1b:91:84:2c:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:32:FC:BC:CC:1D:BC:D1:70:6B:5C:AA:25:0B:15:44:9F:81:60:79
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ce:46:7f:f4:75:01:52:5a:ad:c1:41:93:54:95:53:0c:5a:
         0a:30:11:d6:c2:e6:5e:c1:24:55:af:da:18:c1:dc:c8:45:0c:
         99:e9:42:a3:51:f2:e2:b3:46:d1:e1:cc:3e:62:c7:72:f7:34:
         0f:84:66:01:c8:e2:8e:0c:45:1f:0a:c2:e8:1c:0c:65:70:07:
         cd:8b:36:c2:19:4a:c6:ec:0b:94:6f:ec:8e:90:a6:9e:5e:6e:
         1d:da:9d:b4:cb:ff:18:26:0c:8a:c0:1a:31:12:3b:52:6a:87:
         35:09:7f:b0:b8:3b:1a:3c:8e:46:12:54:89:ea:60:f3:bc:00:
         25:dc:33:f4:ec:c7:aa:75:b6:12:57:db:9a:98:e3:a0:13:0b:
         9e:67:80:b3:ca:c0:44:30:0f:39:96:7a:2d:f8:f9:7a:b4:83:
         31:b6:4d:9b:4e:61:39:4c:8b:ac:92:d8:e4:d3:4c:62:fe:c9:
         72:bc:d0:94:7b:f6:3b:40:5d:bf:02:7f:33:5b:61:7e:48:1a:
         aa:44:f3:af:92:32:ce:27:42:94:77:f9:94:22:c2:55:08:21:
         89:ee:83:eb:12:7d:b1:3f:1c:4b:36:f6:fe:43:fb:a4:b3:96:
         c8:fa:de:0f:59:17:0f:fc:16:1a:df:f5:9a:ec:55:8e:a3:01:
         1c:2a:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:27 2025 by rpki-client