Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35382e302f32342d3234203d3e203239383032.roa
File:                     3231362e3132362e35382e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          BsnKJHtW2+TBScDlw2KZ8o1rQS6HKci6W/WZ6Idgzjo=
Subject key identifier:   42:AF:D4:4B:30:9A:FA:CD:2B:6F:F6:70:6F:0E:B6:9B:41:AC:3C:3B
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       0EF7C6BCAB55BD72DE17527134AD10EDBEAD5849
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35382e302f32342d3234203d3e203239383032.roa
Signing time:             Fri 14 Nov 2025 18:29:45 +0000
ROA not before:           Fri 14 Nov 2025 18:24:45 +0000
ROA not after:            Fri 13 Nov 2026 18:29:45 +0000
asID:                     29802
IP address blocks:        216.126.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Nov 2025 17:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:c6:bc:ab:55:bd:72:de:17:52:71:34:ad:10:ed:be:ad:58:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Nov 14 18:24:45 2025 GMT
            Not After : Nov 13 18:29:45 2026 GMT
        Subject: CN=42AFD44B309AFACD2B6FF6706F0EB69B41AC3C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:eb:2d:7f:b7:49:d1:02:a0:a6:5b:67:12:
                    e8:33:bc:7b:88:b4:c6:61:d2:da:ca:8c:1d:7b:97:
                    73:4d:a4:dc:0d:1b:ac:20:94:0a:69:20:79:7b:c0:
                    00:7d:db:db:c6:53:a7:04:44:a9:c2:66:e7:d8:4b:
                    e8:29:86:3b:9a:3d:6a:16:24:84:ff:a2:f2:24:30:
                    d7:bb:a1:56:03:c2:e9:6c:05:1c:2f:2b:0b:da:19:
                    1a:59:ce:9e:7a:80:4f:d9:17:b5:5e:b2:be:9f:7a:
                    9a:1e:60:96:68:be:d4:2a:48:67:b5:a0:6e:af:0a:
                    9e:ac:0b:2c:d2:78:c7:4a:3a:e1:a3:04:4c:68:85:
                    ac:f7:2b:d8:ce:f1:1b:87:36:de:ad:d3:e0:15:06:
                    d4:05:23:65:71:83:03:be:a9:02:97:1e:9a:52:eb:
                    b4:2c:2f:82:9a:dc:39:77:7a:44:8a:31:e7:04:9c:
                    57:0f:e0:15:b3:38:a0:e8:19:84:35:d5:c2:06:02:
                    36:51:c9:7b:c0:2f:df:b2:e5:c3:9e:47:e9:58:24:
                    74:f0:07:16:7c:12:a0:a7:80:6f:ec:85:28:4f:06:
                    fa:2d:d0:a2:88:80:0c:7d:f8:31:90:36:8d:77:76:
                    03:d0:57:c9:20:55:e3:ed:6f:3f:6d:04:25:c6:37:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:D4:4B:30:9A:FA:CD:2B:6F:F6:70:6F:0E:B6:9B:41:AC:3C:3B
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35382e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:b8:5c:79:94:1c:2e:0f:69:33:32:92:a4:28:7a:fb:06:4a:
         d6:7b:05:c9:4c:1b:02:0c:2c:70:46:95:e9:93:e1:ed:fd:cd:
         42:bd:cf:7e:de:21:11:90:fe:81:20:98:06:cc:a3:80:09:7d:
         b4:e1:23:14:6b:70:87:8f:50:6b:1a:fb:f5:47:4b:ae:ae:54:
         78:7b:38:c3:01:14:13:8e:40:76:41:bf:f4:6b:1c:72:a7:81:
         8a:d7:8f:c0:84:4d:22:c2:e0:b8:80:0a:37:ee:70:13:cf:fc:
         8f:37:43:20:31:d8:75:13:4b:2f:ee:bc:0c:44:1d:c4:0a:3d:
         59:2a:24:84:91:25:ac:ca:18:a5:22:46:39:e8:48:57:f3:e8:
         fc:7b:54:57:36:ba:90:f8:4b:c7:b9:99:7a:73:ba:f2:28:36:
         df:fb:3f:94:5a:b1:55:bc:36:cf:16:62:a8:f2:08:ad:51:f8:
         47:de:35:35:37:ba:a7:92:b0:c0:f0:85:ac:fe:c7:77:97:6c:
         a5:8d:5e:54:86:07:82:1c:55:94:9e:15:15:5f:0e:0e:24:ac:
         af:20:fd:5f:16:11:71:d7:cc:20:a1:49:39:a6:e0:7a:e6:a3:
         45:51:b9:1b:cb:32:9b:0f:a6:41:c8:6c:66:00:ad:0f:b7:8c:
         75:0c:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:24:12 2025 by rpki-client