Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e31332e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          +v0vGPnnb23PynuE+EMI0svqQ27Dp85euHV1XA+r5EU=
Subject key identifier:   70:42:E9:3B:A1:B4:A3:C2:88:72:F9:5D:1F:FA:90:84:29:05:50:EE
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       365BCE8C8F211A45FCF343B5B68911C8F22386CC
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 16 Oct 2026 18:36:20 +0000
ROA not before:           Fri 16 Oct 2026 18:31:20 +0000
ROA not after:            Fri 15 Oct 2027 18:36:20 +0000
asID:                     54004
IP address blocks:        144.168.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 08:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:5b:ce:8c:8f:21:1a:45:fc:f3:43:b5:b6:89:11:c8:f2:23:86:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:20 2026 GMT
            Not After : Oct 15 18:36:20 2027 GMT
        Subject: CN=7042E93BA1B4A3C28872F95D1FFA9084290550EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:d7:29:c6:25:dd:71:ff:f1:1f:ab:61:e4:
                    c9:2f:f9:b4:c2:a7:9f:eb:83:bd:01:b8:a9:d4:02:
                    53:f4:b8:d1:f6:a5:b4:65:d5:5d:5b:a6:fb:b3:0d:
                    3d:3a:fc:73:6c:68:86:76:b8:4c:c0:f1:39:3b:a9:
                    38:83:ee:74:0f:68:b0:f5:54:1f:60:df:ab:c3:14:
                    c0:d3:ab:57:4c:bf:d2:3a:b3:f9:ad:84:80:9e:66:
                    ca:f1:76:33:2a:c4:81:43:c4:68:0c:14:c0:b2:07:
                    fe:56:de:17:a6:15:c0:59:63:07:24:13:fc:18:73:
                    ac:e1:9d:40:7d:b8:a3:84:bc:ee:ac:cb:ec:30:52:
                    99:b8:d0:77:e6:f6:87:b2:20:92:93:e6:21:3b:47:
                    35:40:73:09:35:cb:cf:87:bd:05:f1:20:38:e1:6a:
                    e8:30:01:3e:be:20:ad:84:c8:15:1e:30:91:a3:7a:
                    e2:e2:e4:4d:7c:46:c7:5e:76:87:37:42:88:ba:43:
                    b1:41:4c:30:61:e6:34:3c:63:a4:32:17:8a:33:31:
                    13:68:ea:1f:7b:ab:b1:51:ca:7f:63:af:ee:5c:84:
                    da:44:a2:e8:c9:a7:ae:61:83:fc:38:cc:d4:82:c2:
                    9f:da:ab:36:5c:97:bc:4c:cf:d6:67:53:5e:c7:03:
                    df:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:E9:3B:A1:B4:A3:C2:88:72:F9:5D:1F:FA:90:84:29:05:50:EE
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e3:9d:66:d3:06:f3:75:fd:a0:a0:df:df:69:c1:fd:ec:4f:
         5a:7e:03:bc:c3:b1:ce:64:6a:28:40:0a:e7:22:72:d1:bb:68:
         24:8c:9a:a6:06:01:d7:cc:98:b6:b4:37:e8:25:d3:bc:6d:9a:
         57:16:b3:b8:d7:65:96:9f:af:eb:a9:25:41:7e:79:77:9b:e4:
         53:a2:f0:bc:a6:cd:3f:36:52:90:f4:55:38:fe:a1:3f:22:ea:
         a6:70:b1:6f:10:3a:10:76:79:6c:9c:ee:2d:da:69:f2:35:d7:
         e9:95:21:44:68:b7:50:c5:90:19:0e:a6:2b:e1:25:42:41:ea:
         05:b6:bb:09:17:db:6f:f8:7f:75:f0:55:ec:2e:a8:8b:9a:f8:
         88:2e:90:f7:d9:8a:2f:d9:c2:2f:4b:df:c8:cc:8b:04:59:af:
         80:3e:da:9b:90:88:c1:af:89:d9:25:44:04:93:c5:cb:b0:28:
         53:59:65:4a:ea:28:27:f1:e7:72:7d:64:6d:25:dc:1d:71:24:
         7f:25:b1:d6:f7:f2:f2:a4:fb:36:cb:66:ae:35:6f:88:61:ea:
         49:5e:3a:7d:5d:2f:c8:4b:78:56:1d:af:69:c2:e5:5c:e8:ad:
         2e:fc:a4:8b:7d:03:28:57:98:a2:54:20:9c:cb:c1:68:4a:5b:
         a5:33:09:fe
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUNlvOjI8hGkX880O1tokRyPIjhswwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk
MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjYxMDE2MTgzMTIwWhcNMjcxMDE1MTgzNjIw
WjAzMTEwLwYDVQQDEyg3MDQyRTkzQkExQjRBM0MyODg3MkY5NUQxRkZBOTA4NDI5
MDU1MEVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztPXKcYl3XH/
8R+rYeTJL/m0wqef64O9Abip1AJT9LjR9qW0ZdVdW6b7sw09OvxzbGiGdrhMwPE5
O6k4g+50D2iw9VQfYN+rwxTA06tXTL/SOrP5rYSAnmbK8XYzKsSBQ8RoDBTAsgf+
Vt4XphXAWWMHJBP8GHOs4Z1AfbijhLzurMvsMFKZuNB35vaHsiCSk+YhO0c1QHMJ
NcvPh70F8SA44WroMAE+viCthMgVHjCRo3ri4uRNfEbHXnaHN0KIukOxQUwwYeY0
PGOkMheKMzETaOofe6uxUcp/Y6/uXITaRKLoyaeuYYP8OMzUgsKf2qs2XJe8TM/W
Z1NexwPf2QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHBC6TuhtKPCiHL5XR/6kIQp
BVDuMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv
RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx
MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4
MTc1NGY0ZTY0OS8wLzMxMzQzNDJlMzEzNjM4MmUzMTMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJCoDTANBgkqhkiG9w0BAQsF
AAOCAQEAUeOdZtMG83X9oKDf32nB/exPWn4DvMOxzmRqKEAK5yJy0btoJIyapgYB
18yYtrQ36CXTvG2aVxazuNdllp+v66klQX55d5vkU6LwvKbNPzZSkPRVOP6hPyLq
pnCxbxA6EHZ5bJzuLdpp8jXX6ZUhRGi3UMWQGQ6mK+ElQkHqBba7CRfbb/h/dfBV
7C6oi5r4iC6Q99mKL9nCL0vfyMyLBFmvgD7am5CIwa+J2SVEBJPFy7AoU1llSuoo
J/Hncn1kbSXcHXEkfyWx1vfy8qT7NstmrjVviGHqSV46fV0vyEt4Vh2vacLlXOit
Lvyki30DKFeYolQgnMvBaEpbpTMJ/g==
-----END CERTIFICATE-----
Generated at Wed Oct 21 20:20:03 2026 by rpki-client