Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35372e302f32342d3234203d3e203231373030.roa
File:                     3231362e3132362e35372e302f32342d3234203d3e203231373030.roa (raw, json)
Hash identifier:          sCv1XBCdAihkK3NbNoVO7r/z3IlRxUR2qOMBTUN/Rsg=
Subject key identifier:   D9:EC:9F:F6:48:B4:27:08:5A:32:E6:13:5F:D9:11:C8:FF:73:C9:4D
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       0BC9217C4656C86CFD3911D31233110DD12A89F4
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35372e302f32342d3234203d3e203231373030.roa
Signing time:             Fri 14 Nov 2025 18:29:44 +0000
ROA not before:           Fri 14 Nov 2025 18:24:44 +0000
ROA not after:            Fri 13 Nov 2026 18:29:44 +0000
asID:                     21700
IP address blocks:        216.126.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 17:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c9:21:7c:46:56:c8:6c:fd:39:11:d3:12:33:11:0d:d1:2a:89:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Nov 14 18:24:44 2025 GMT
            Not After : Nov 13 18:29:44 2026 GMT
        Subject: CN=D9EC9FF648B427085A32E6135FD911C8FF73C94D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b2:fc:dc:ac:49:5c:79:0d:b2:5b:d3:33:14:
                    55:80:80:e4:3d:bf:de:29:aa:b9:74:11:48:6a:89:
                    ed:a9:64:0e:8a:d0:94:db:5c:85:84:94:3a:7d:7d:
                    e2:b1:c7:08:cb:6a:f9:97:87:11:af:e1:66:00:15:
                    78:5e:95:bb:98:07:bf:80:60:c0:19:bb:f7:cd:f6:
                    0c:f6:ff:fb:cc:00:d6:b7:ad:9f:a2:fd:1f:a7:92:
                    b2:c6:21:6d:79:63:ae:54:f3:97:56:32:be:f9:5e:
                    41:1e:b8:88:44:bb:0f:0b:71:a7:33:c8:92:1c:48:
                    19:9a:2d:e8:27:98:b6:be:c5:5d:2d:09:d0:60:26:
                    ac:e2:38:93:d2:92:ba:25:58:57:26:92:a2:4f:72:
                    45:7f:a5:f8:b3:ef:32:43:14:2f:d2:c0:4b:13:06:
                    6a:2a:35:af:46:39:57:f9:0e:a6:33:be:f1:54:e5:
                    fe:26:2e:42:99:dc:ac:50:69:8f:4c:b4:87:f3:c9:
                    55:13:91:92:ca:9d:99:27:72:4b:b3:88:af:bf:09:
                    0f:71:94:d6:b4:b2:83:87:e2:74:2a:f2:c6:db:43:
                    07:79:39:41:e4:82:93:0a:5c:ee:ea:30:c9:36:97:
                    6a:e7:56:0b:25:81:1f:4e:9a:05:82:b9:93:2a:d5:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EC:9F:F6:48:B4:27:08:5A:32:E6:13:5F:D9:11:C8:FF:73:C9:4D
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35372e302f32342d3234203d3e203231373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:76:22:c1:78:b4:a5:3c:ef:3a:2a:90:38:f7:1b:bf:f5:
         78:00:d9:f1:7f:d0:68:07:b1:ba:0d:55:29:28:43:e8:da:4b:
         36:d7:fb:2a:6d:2a:7b:28:0b:a3:dd:f3:28:1a:76:fe:ad:6d:
         54:5a:e7:4c:30:fa:ad:66:1b:4f:f3:7e:20:ea:7a:83:80:ea:
         76:1c:dc:cb:13:00:e4:58:ee:17:8f:d4:b6:52:61:c2:05:f7:
         ca:84:8e:34:68:55:69:e5:16:44:72:d8:f8:4a:62:11:6a:41:
         77:99:af:58:26:4f:b4:ad:6d:43:e0:3e:99:92:76:e0:47:e4:
         2c:20:e4:31:84:61:05:13:c1:b7:f8:50:94:9a:ed:ae:71:3e:
         9f:f4:76:f6:06:2b:01:82:81:72:9f:9e:9f:11:a9:e0:c1:d8:
         58:90:a7:ea:5a:fc:cd:fc:5c:c3:42:ef:7f:0c:99:09:ae:94:
         40:46:58:f6:40:cc:05:95:fc:0d:dc:1d:b7:56:6d:a9:6e:9b:
         08:7d:3a:cf:ec:ea:78:95:96:b5:4f:96:23:02:8b:43:5a:14:
         20:67:9f:11:e7:31:a2:e2:f0:b6:d7:5c:ce:75:b2:9f:38:c0:
         c3:93:9d:2d:28:c6:d7:0d:ed:9a:c3:b4:4b:70:a4:69:b4:d4:
         6f:a2:a6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:59:59 2025 by rpki-client