Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e34382e302f32322d3232203d3e203630393030.roa
File:                     3136392e3132382e34382e302f32322d3232203d3e203630393030.roa (raw, json)
Hash identifier:          zaCr0/gxJoBaTFus9xSecY3rBLH7/zp1H9neeS1yvAs=
Subject key identifier:   21:B7:A4:6C:79:88:5A:D3:A2:74:87:45:E6:CE:77:29:5E:49:05:35
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       3C3A37A647D4C46656FFACBF8CFB964D6B7B4F61
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e34382e302f32322d3232203d3e203630393030.roa
Signing time:             Thu 02 Jul 2026 19:35:20 +0000
ROA not before:           Thu 02 Jul 2026 19:30:20 +0000
ROA not after:            Thu 01 Jul 2027 19:35:20 +0000
asID:                     60900
IP address blocks:        169.128.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 22:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3a:37:a6:47:d4:c4:66:56:ff:ac:bf:8c:fb:96:4d:6b:7b:4f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Jul  2 19:30:20 2026 GMT
            Not After : Jul  1 19:35:20 2027 GMT
        Subject: CN=21B7A46C79885AD3A2748745E6CE77295E490535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:03:ba:2c:6b:9e:d4:40:25:07:85:1b:cd:
                    2f:aa:5b:cb:bc:a8:4b:f3:19:3a:97:12:36:00:bc:
                    ca:01:36:95:47:72:b2:8c:76:45:b4:8b:ef:34:8b:
                    2b:a8:4d:5c:37:26:06:45:61:b0:29:4a:db:80:a7:
                    52:43:24:ac:29:b3:ee:a4:c1:fe:59:3f:38:18:8a:
                    cf:55:e7:60:d6:9f:48:ae:d3:3f:f8:2e:6a:4a:be:
                    fa:16:af:6a:e1:6c:08:18:40:1a:df:5e:7f:aa:c5:
                    91:36:fc:30:36:f4:a3:bb:45:bd:bd:ff:d4:58:ef:
                    9b:17:dd:4e:98:82:ea:c6:df:9b:a5:ae:fb:23:84:
                    16:3a:37:a8:a5:cc:76:23:48:fe:35:7e:7b:c2:ca:
                    08:d1:86:62:09:61:78:36:95:17:e4:4b:bb:3a:9c:
                    fc:a6:35:cc:41:f6:f0:e7:91:02:99:1f:c4:9e:e7:
                    47:22:b4:89:19:2b:13:25:d4:3c:ee:1c:da:01:7d:
                    33:5f:21:2d:4f:8c:41:f2:7c:c5:59:19:cd:b2:bd:
                    f0:18:15:f7:d0:9f:fb:f2:f0:dd:5a:6f:12:af:e7:
                    ef:4a:bf:99:75:83:1f:df:e3:e7:0b:e6:b3:b8:c8:
                    ba:ad:14:50:c5:27:63:71:1b:dd:29:29:e6:df:ac:
                    13:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B7:A4:6C:79:88:5A:D3:A2:74:87:45:E6:CE:77:29:5E:49:05:35
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e34382e302f32322d3232203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:77:dc:ef:9a:b1:8c:5f:f9:cf:a8:e4:63:6d:6c:3d:5f:d9:
         e3:81:1d:60:38:36:30:c2:b7:33:b2:89:44:3d:cd:51:13:de:
         69:7b:c5:d8:79:b1:ff:61:f8:a6:02:79:42:50:b8:ab:e1:c5:
         26:75:37:a9:f8:5b:ac:1c:fb:88:32:e8:30:fe:f2:6f:e1:4d:
         8d:62:b5:48:76:c6:2c:b5:28:72:fa:f1:5a:10:90:cf:bc:09:
         11:35:f0:b5:e9:2c:d3:92:89:d4:9b:47:19:6f:df:5f:e1:7c:
         f1:bb:3c:8f:78:9d:ce:dc:e7:e1:d8:42:8f:d9:11:01:d3:ad:
         c1:4c:cb:ab:16:1b:dc:53:42:4b:5d:bb:ec:09:5f:63:15:e5:
         e0:0e:44:c7:3f:b5:2f:6a:a3:c3:d5:34:2b:6f:9d:46:da:27:
         03:fc:a4:b0:c5:10:a6:14:3c:ed:72:d0:54:0c:5f:62:a7:80:
         2c:26:6e:28:5c:cd:a1:ed:4e:4a:c3:ce:9d:23:12:a1:92:58:
         e9:41:8f:c7:0b:6e:a5:75:01:46:07:17:1f:3a:22:2a:f2:59:
         8f:55:aa:a0:6c:0b:21:bb:23:ec:e1:bc:7a:9f:b3:1d:1a:f9:
         80:67:a1:93:1f:67:4f:8f:23:f9:c4:f5:ae:ff:88:be:0b:41:
         cc:70:5e:18
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPDo3pkfUxGZW/6y/jPuWTWt7T2EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYwNzAyMTkzMDIwWhcNMjcwNzAxMTkzNTIw
WjAzMTEwLwYDVQQDEygyMUI3QTQ2Qzc5ODg1QUQzQTI3NDg3NDVFNkNFNzcyOTVF
NDkwNTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AEDuixrntRA
JQeFG80vqlvLvKhL8xk6lxI2ALzKATaVR3KyjHZFtIvvNIsrqE1cNyYGRWGwKUrb
gKdSQySsKbPupMH+WT84GIrPVedg1p9IrtM/+C5qSr76Fq9q4WwIGEAa315/qsWR
NvwwNvSju0W9vf/UWO+bF91OmILqxt+bpa77I4QWOjeopcx2I0j+NX57wsoI0YZi
CWF4NpUX5Eu7Opz8pjXMQfbw55ECmR/EnudHIrSJGSsTJdQ87hzaAX0zXyEtT4xB
8nzFWRnNsr3wGBX30J/78vDdWm8Sr+fvSr+ZdYMf3+PnC+azuMi6rRRQxSdjcRvd
KSnm36wTmwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCG3pGx5iFrTonSHRebOdyle
SQU1MB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMxMzYzOTJlMzEzMjM4MmUzNDM4MmUzMDJmMzIzMjJkMzIz
MjIwM2QzZTIwMzYzMDM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqmAMDANBgkqhkiG9w0BAQsF
AAOCAQEAy3fc75qxjF/5z6jkY21sPV/Z44EdYDg2MMK3M7KJRD3NURPeaXvF2Hmx
/2H4pgJ5QlC4q+HFJnU3qfhbrBz7iDLoMP7yb+FNjWK1SHbGLLUocvrxWhCQz7wJ
ETXwteks05KJ1JtHGW/fX+F88bs8j3idztzn4dhCj9kRAdOtwUzLqxYb3FNCS127
7AlfYxXl4A5Exz+1L2qjw9U0K2+dRtonA/yksMUQphQ87XLQVAxfYqeALCZuKFzN
oe1OSsPOnSMSoZJY6UGPxwtupXUBRgcXHzoiKvJZj1WqoGwLIbsj7OG8ep+zHRr5
gGehkx9nT48j+cT1rv+IvgtBzHBeGA==
-----END CERTIFICATE-----
Generated at Mon Jul 13 04:08:49 2026 by rpki-client