Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31342e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e31342e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          7GjIm12YlardbB2kXeLkYHmoeV84X/CcS3L+u0oCaC8=
Subject key identifier:   33:BD:E1:F8:01:BB:6F:08:4E:AD:95:E5:3D:1E:99:5F:FE:CC:18:4A
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       18B7B2D47138F46F6A6596D67D17345B7B8ED6F5
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31342e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 16 Oct 2026 18:36:20 +0000
ROA not before:           Fri 16 Oct 2026 18:31:20 +0000
ROA not after:            Fri 15 Oct 2027 18:36:20 +0000
asID:                     54004
IP address blocks:        144.168.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 02:55:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b7:b2:d4:71:38:f4:6f:6a:65:96:d6:7d:17:34:5b:7b:8e:d6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:20 2026 GMT
            Not After : Oct 15 18:36:20 2027 GMT
        Subject: CN=33BDE1F801BB6F084EAD95E53D1E995FFECC184A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:7f:9a:03:05:94:7e:da:98:20:be:a6:17:
                    9f:93:fc:44:25:cf:8d:b3:69:1e:ed:2e:d6:7a:8b:
                    60:00:a6:58:2c:a4:c7:04:43:af:36:f7:be:9e:c0:
                    1a:43:bb:02:5c:88:2d:be:a2:bb:4b:b0:ba:e6:28:
                    8d:59:a2:84:ed:62:aa:87:6c:a5:79:82:4e:ea:36:
                    fb:c1:c2:76:21:cb:2f:54:fb:df:24:6f:0f:c4:15:
                    0e:d0:ce:71:60:f7:bd:a3:0c:7e:a4:53:78:ff:05:
                    49:ce:1a:63:6d:bd:7e:ab:d6:c1:a8:fe:d0:89:4a:
                    88:01:78:6e:2b:2b:8e:64:a5:71:73:55:86:4a:6c:
                    76:3e:85:cc:df:45:ef:cd:a9:e8:2a:fc:17:43:eb:
                    1c:cf:52:3d:52:0e:33:21:26:3b:b9:31:3c:22:08:
                    cd:ff:35:12:05:34:08:59:9e:7a:70:6e:a0:46:67:
                    6b:6c:2e:32:e5:e5:ed:63:50:a8:38:e1:3e:dd:8a:
                    65:0d:61:b9:72:98:79:e7:65:96:1b:db:6c:d8:bc:
                    84:f9:c0:1c:c5:ea:2e:a8:84:e8:57:f0:ef:64:81:
                    f2:77:2c:cb:5b:91:5b:25:5b:90:f5:7c:a6:7f:e4:
                    0f:00:7e:73:0f:42:64:2d:19:5e:bc:e2:09:68:46:
                    0e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BD:E1:F8:01:BB:6F:08:4E:AD:95:E5:3D:1E:99:5F:FE:CC:18:4A
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31342e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:5d:6b:db:8d:e7:22:67:a6:33:16:6e:3f:bc:b9:76:c3:
         fc:97:65:25:fc:af:ef:45:80:ff:15:50:7a:df:09:9c:97:27:
         0f:df:74:c7:61:5d:6f:fb:92:6f:88:33:d0:61:ea:97:4b:66:
         6c:6b:82:7b:fe:5c:fd:0d:1a:f2:e3:bc:d9:81:cf:23:dc:e5:
         80:13:79:ad:c5:78:fd:a9:04:00:12:ba:cb:33:b0:24:84:2a:
         89:73:84:fc:de:a6:7f:b3:36:a1:30:47:72:e4:60:f2:1b:74:
         77:3b:7e:12:b1:71:1b:89:58:80:e1:16:d6:c4:e3:01:69:50:
         ca:44:92:37:e3:65:5d:52:38:c1:40:21:64:d8:34:b5:f9:fb:
         1a:85:96:a2:05:81:71:f8:e3:32:f4:6e:98:98:53:e0:4a:29:
         b5:ac:1f:cf:b5:f6:c6:a2:fb:6e:10:12:90:ec:50:10:9c:cf:
         64:53:f4:95:6a:04:91:5e:1b:ee:a6:1a:50:04:ce:89:92:23:
         3f:a1:d9:9b:06:98:bc:57:e0:41:92:0a:48:bc:77:f5:dc:83:
         ce:a1:ca:ab:7a:fe:93:30:f8:ce:38:51:40:6e:28:2a:6e:2d:
         3e:4e:77:4e:e1:24:ae:ee:b4:d2:00:b7:dc:c6:d2:58:98:7f:
         0b:c6:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 18:22:56 2026 by rpki-client