Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31352e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e31352e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          H48CPot+BQfzYXLKRM6yx35Iwcqxxi85cig5jCVBwuQ=
Subject key identifier:   78:40:E6:9C:5D:42:BC:55:0F:AA:B4:08:68:0B:25:48:8C:00:65:79
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       1920A7C955CE0F2EC5A8056F469B98A2A204FC14
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31352e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 16 Oct 2026 18:36:20 +0000
ROA not before:           Fri 16 Oct 2026 18:31:20 +0000
ROA not after:            Fri 15 Oct 2027 18:36:20 +0000
asID:                     54004
IP address blocks:        144.168.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:20:a7:c9:55:ce:0f:2e:c5:a8:05:6f:46:9b:98:a2:a2:04:fc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:20 2026 GMT
            Not After : Oct 15 18:36:20 2027 GMT
        Subject: CN=7840E69C5D42BC550FAAB408680B25488C006579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:90:96:93:96:5b:fd:31:d6:1e:d9:22:77:
                    4e:8c:23:45:19:b5:d1:ad:2b:b8:99:0a:a9:9c:f6:
                    53:74:9a:f2:e4:80:fe:9d:1f:5d:18:28:e7:b5:17:
                    b1:33:d3:16:86:d0:a6:0f:fd:72:7a:16:5a:f6:05:
                    c8:10:09:b4:ba:47:8b:c9:4e:d1:ff:0f:e1:b3:90:
                    f2:05:2a:29:31:ac:c5:ec:cd:60:75:12:07:9c:07:
                    09:83:24:30:54:3d:ab:b0:48:49:d2:ae:e6:f4:89:
                    bc:a0:10:09:c8:fc:33:dc:5a:ee:4f:5c:06:ea:92:
                    1e:27:35:a5:30:8a:26:ab:1c:3e:39:77:5b:c2:14:
                    c1:93:7f:34:1e:f4:53:02:29:7f:f4:ee:f2:ea:50:
                    47:75:65:af:42:08:b0:6b:9a:4f:77:1c:ef:fc:d7:
                    03:a2:46:80:44:31:6a:0b:23:7a:20:d9:ff:e8:23:
                    e3:c6:5c:6f:e2:62:dd:7b:5d:09:fe:e3:e5:be:97:
                    32:5b:94:e6:49:4f:09:ed:0d:e8:2a:0a:58:36:41:
                    b8:f2:a4:fc:eb:b8:eb:e0:1e:b0:aa:00:76:1c:41:
                    13:46:aa:f5:23:72:3b:14:b8:3b:da:26:67:56:c3:
                    e7:6f:32:d2:1b:98:b0:c2:1e:a3:33:ae:0e:34:b7:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:E6:9C:5D:42:BC:55:0F:AA:B4:08:68:0B:25:48:8C:00:65:79
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31352e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:da:ee:3c:76:ae:93:2a:cf:1f:4d:74:4f:22:1f:d6:32:1f:
         04:ca:87:02:5d:05:5b:a4:2e:b5:0e:f0:e1:27:54:2a:48:12:
         93:58:b8:9f:87:2e:38:f4:f9:83:4e:68:49:29:d6:9c:b5:09:
         ea:57:44:7c:4a:76:ba:19:e9:40:f6:4d:9d:87:cf:40:8f:ce:
         18:ab:1c:6f:0d:17:cc:1d:72:61:f4:02:49:97:85:06:a8:46:
         2f:4e:2a:8e:c1:81:12:a2:f2:c9:ca:74:e0:7e:a0:7e:f3:5d:
         f6:d8:c6:60:4b:71:25:dd:ae:46:40:29:97:de:81:e8:9b:92:
         00:e1:a8:de:f5:63:2b:76:46:32:4a:54:01:f9:72:96:ed:ca:
         94:c2:ca:b7:e1:67:00:df:db:10:b6:92:b7:06:49:78:88:00:
         c2:3c:63:1a:d1:b7:65:af:b0:84:83:08:d6:07:bb:37:76:30:
         de:d6:80:0f:95:53:55:13:88:5c:c5:11:e6:a6:32:c4:43:86:
         45:99:a9:3d:b9:3e:63:d0:f7:4a:aa:3c:c0:31:02:24:ee:be:
         51:39:c6:9a:65:d9:8a:8e:3e:49:eb:b8:de:34:c7:1f:d3:77:
         a2:4b:a4:05:82:9c:f9:75:34:a1:26:48:6a:8d:96:e7:4b:f0:
         45:2a:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:22:02 2026 by rpki-client