Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e32342e302f32312d3231203d3e203131343237.roa
File:                     3134342e3136382e32342e302f32312d3231203d3e203131343237.roa (raw, json)
Hash identifier:          a7TSi0Z/UBfnRjkkprIf1btMIMzyG/G7/q4fKs6Fb4E=
Subject key identifier:   4C:C6:10:CB:9F:D7:61:BF:E0:2A:09:F2:DB:CB:2D:B9:BD:E3:09:E1
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       347A484C5EA9542E14D444DAD323EC611AC04984
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e32342e302f32312d3231203d3e203131343237.roa
Signing time:             Fri 16 Oct 2026 18:36:20 +0000
ROA not before:           Fri 16 Oct 2026 18:31:20 +0000
ROA not after:            Fri 15 Oct 2027 18:36:20 +0000
asID:                     11427
IP address blocks:        144.168.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 13:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7a:48:4c:5e:a9:54:2e:14:d4:44:da:d3:23:ec:61:1a:c0:49:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:20 2026 GMT
            Not After : Oct 15 18:36:20 2027 GMT
        Subject: CN=4CC610CB9FD761BFE02A09F2DBCB2DB9BDE309E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:7d:af:37:36:d0:6f:c8:da:db:b9:f1:f6:
                    cf:fb:13:64:ef:16:bd:0a:6a:21:a0:53:a5:a2:94:
                    ce:e0:60:90:c3:c4:21:c7:a6:12:50:94:8a:81:bb:
                    73:cb:9f:26:1a:2c:f6:52:ac:51:09:86:ef:c4:7c:
                    27:3a:c8:d6:32:bc:6b:69:b0:65:3d:71:f1:c1:f7:
                    d8:8b:cb:f6:4c:e0:f6:b4:8d:cd:bd:f1:e8:1f:0d:
                    71:d5:88:5f:48:f8:62:1e:a4:74:9f:26:84:bd:42:
                    55:0c:c1:99:84:ba:08:fe:5d:1a:70:84:85:21:00:
                    6f:b3:85:57:e8:d2:0e:ad:ed:42:86:23:65:76:28:
                    69:91:a6:2a:14:e8:8b:86:48:df:ba:ce:07:64:e4:
                    2f:e0:36:71:04:2b:69:1b:89:c7:13:7a:12:71:9d:
                    9b:92:5c:4d:6d:53:89:c8:f6:41:84:56:54:fb:08:
                    41:dc:91:ef:d7:98:38:18:78:d0:3f:2c:fb:cd:14:
                    bd:f0:6c:a9:bb:e4:87:0e:6e:3a:2e:e2:65:c0:d2:
                    0b:6f:28:e2:1e:53:27:3a:a5:6b:36:c1:3f:1b:15:
                    5a:85:fe:08:f4:7e:ed:65:08:27:53:dd:fe:67:8f:
                    16:01:89:cb:a0:1e:f6:bd:e6:4b:e7:66:74:01:b0:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:10:CB:9F:D7:61:BF:E0:2A:09:F2:DB:CB:2D:B9:BD:E3:09:E1
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e32342e302f32312d3231203d3e203131343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:04:b1:a0:bd:51:d0:ed:48:0b:27:7e:ff:c7:cd:08:8a:31:
         3d:cb:0c:f6:64:28:04:25:66:cb:8b:d3:b3:ca:49:55:bc:95:
         6d:01:76:7c:81:7a:89:1a:6d:b8:42:78:6e:5a:ca:66:9f:c0:
         e6:42:e3:be:41:f4:ac:8b:d3:0d:78:b1:16:d1:0b:1d:9b:8e:
         96:52:77:93:53:59:52:26:30:06:c6:0d:f4:f7:02:a2:c3:d0:
         55:38:3e:f9:1e:e7:23:f9:c0:13:cf:2e:9e:91:5e:9a:d5:5e:
         16:a9:d0:3d:72:47:57:58:c3:ea:e0:e0:e2:f4:9d:20:ce:9f:
         34:8a:c0:65:14:6a:dd:bd:07:29:12:f7:28:bb:5a:93:0d:43:
         a6:c1:fc:57:c8:db:6c:ba:60:3d:be:24:db:ee:d1:5e:8f:0b:
         55:ea:17:05:10:e7:80:31:68:74:10:b2:7b:7b:e7:0d:46:3f:
         60:4a:12:6e:ab:68:6a:cd:71:b8:54:ff:56:cf:6a:d4:e9:a8:
         52:fe:de:83:0f:84:ce:e7:af:9b:35:3c:0d:e1:67:b4:45:d3:
         af:6c:d8:e4:9a:91:61:74:67:8d:7e:46:9c:79:2b:94:a4:ad:
         07:5f:ee:5f:65:a7:5b:ba:8d:7a:39:aa:ed:8a:b1:b5:6c:88:
         1e:b1:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:04:15 2026 by rpki-client