Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e362e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e362e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          Ugz6D+BebW/wBy+asjIs3sGjipl0Nr0p7eyqnlzksio=
Subject key identifier:   57:C1:B4:C9:9F:89:B0:2D:8F:FB:81:7D:0D:C8:BA:22:39:68:C1:0F
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       08F266A13D80A9E9F860654C8A15448EDE989024
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e362e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 16 Oct 2026 18:36:20 +0000
ROA not before:           Fri 16 Oct 2026 18:31:20 +0000
ROA not after:            Fri 15 Oct 2027 18:36:20 +0000
asID:                     54004
IP address blocks:        144.168.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 08:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:66:a1:3d:80:a9:e9:f8:60:65:4c:8a:15:44:8e:de:98:90:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:20 2026 GMT
            Not After : Oct 15 18:36:20 2027 GMT
        Subject: CN=57C1B4C99F89B02D8FFB817D0DC8BA223968C10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:28:12:b1:9c:12:89:09:1b:3c:41:97:8f:
                    5e:28:ee:30:86:4e:a7:c3:32:f2:3c:d8:19:aa:52:
                    a1:79:8d:ea:c4:6e:d0:15:59:44:96:81:78:94:bd:
                    e0:03:c8:52:c8:f6:a5:49:f2:2b:c9:64:c7:1d:26:
                    49:1b:8d:76:11:53:07:9b:23:c1:2f:f8:35:d9:2b:
                    63:3a:8f:30:91:25:15:b3:24:72:e8:93:80:e0:b5:
                    de:e6:6e:59:51:d0:b2:1e:c8:28:eb:56:ca:2b:61:
                    f0:39:f4:97:e3:f2:85:1a:17:4b:bc:90:a1:9d:67:
                    71:da:e1:97:7f:c7:05:12:28:57:08:1f:ea:e4:2e:
                    e1:d9:53:70:57:a3:af:e4:dd:3e:6a:e7:74:60:4a:
                    1f:f7:ad:47:89:a8:7e:0c:e9:23:97:ba:34:cb:96:
                    0d:00:a4:bf:c7:d3:22:b8:a4:41:88:f7:ca:ee:f6:
                    5a:9f:e4:3f:85:2b:77:15:a9:73:09:bf:49:17:db:
                    43:d0:6c:01:2e:7d:df:33:de:4f:e0:10:da:b1:3b:
                    78:90:b0:1a:d7:88:cd:f4:78:37:77:c9:d9:ae:58:
                    4f:69:37:6c:06:07:1e:67:8d:14:79:7c:eb:77:fd:
                    7c:ef:0b:ed:15:b1:19:19:2f:29:eb:c0:94:bc:93:
                    58:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C1:B4:C9:9F:89:B0:2D:8F:FB:81:7D:0D:C8:BA:22:39:68:C1:0F
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e362e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:73:1b:fc:dc:4a:7e:17:e8:0d:d3:2e:98:e8:6d:4d:9d:
         e2:1c:dc:3d:19:78:1f:48:ba:41:67:f4:68:00:6c:74:d3:c2:
         a4:f5:b1:00:a1:61:bb:a2:6e:51:6e:90:3c:09:bf:f8:c5:48:
         4b:e0:59:db:de:9e:41:45:cc:dd:f5:81:bd:47:ac:d8:8a:37:
         2b:65:7b:a8:86:15:e7:d1:ba:54:68:89:eb:0f:2f:21:7f:38:
         87:e3:42:d7:22:e7:0d:55:c3:86:1e:aa:0b:92:38:94:75:b3:
         ab:57:06:45:e4:7e:f0:5e:d4:59:f3:a0:67:c9:6a:cb:ca:47:
         ba:8a:f5:53:ee:36:2e:3f:c6:3e:89:cb:14:ac:09:fa:68:b2:
         5d:7f:bb:4c:51:c6:fb:31:96:87:b6:aa:a0:99:fb:24:be:8b:
         52:ec:53:f5:af:bd:20:3d:d9:f0:53:25:17:1b:92:19:67:6c:
         7d:18:19:eb:65:48:37:47:64:96:67:c9:fa:22:ad:8e:50:31:
         b9:3a:99:6d:5e:cf:a3:dd:70:4a:d3:5c:76:ee:ec:fc:67:83:
         25:56:97:2a:fd:5f:b7:77:b0:db:9c:61:96:c0:98:02:ec:41:
         2f:73:80:82:26:0e:ef:fa:c2:a3:7a:6a:09:2a:ae:64:f9:85:
         cb:91:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:41:39 2026 by rpki-client