Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e372e302f32342d3234203d3e203534303034.roa
File:                     3134342e3136382e372e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          k4mf55rs7Y4YItHwHP7EkUVhgj7TNIvIPfvOvhmuZe4=
Subject key identifier:   A4:30:60:92:50:94:EF:96:5E:E0:89:49:6D:9B:B3:79:30:7C:8A:D9
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       4CBAA5D5F9B65F3BA6C3A034DEF7596D8EA1BD63
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e372e302f32342d3234203d3e203534303034.roa
Signing time:             Fri 16 Oct 2026 18:36:21 +0000
ROA not before:           Fri 16 Oct 2026 18:31:21 +0000
ROA not after:            Fri 15 Oct 2027 18:36:21 +0000
asID:                     54004
IP address blocks:        144.168.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 08:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ba:a5:d5:f9:b6:5f:3b:a6:c3:a0:34:de:f7:59:6d:8e:a1:bd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:21 2026 GMT
            Not After : Oct 15 18:36:21 2027 GMT
        Subject: CN=A43060925094EF965EE089496D9BB379307C8AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:58:60:6f:e1:ef:66:9b:9c:f4:b1:7f:0d:
                    c2:37:99:6a:ae:cf:6b:b8:2c:da:d9:2c:6e:f6:a2:
                    7d:16:e1:54:83:42:a8:c2:97:e6:8a:49:ee:40:f7:
                    e1:3e:d8:73:0e:33:f0:7c:e1:55:99:79:ee:ef:eb:
                    66:47:99:8c:d8:3f:0a:b8:75:0d:50:6e:04:0f:bb:
                    28:f9:f0:78:87:ee:6d:97:2d:3a:d9:45:af:af:eb:
                    db:ae:ce:72:c9:2a:6a:49:3a:b7:af:24:e3:a9:4f:
                    5e:b8:7c:14:a1:3b:01:46:41:38:34:2a:dd:18:6f:
                    44:bb:29:9a:39:e8:a0:ea:6c:be:09:1c:1e:71:d9:
                    04:19:d0:25:f2:7c:b7:e9:7e:9b:0b:13:f4:87:88:
                    d0:78:69:88:e9:8c:5e:0f:21:09:17:63:b4:69:2c:
                    d9:b5:87:95:29:a3:e8:9c:72:f7:2d:02:ec:47:42:
                    27:57:30:7c:c0:d1:3b:84:c1:22:81:3d:5a:23:5a:
                    8b:9a:17:88:ad:1c:7a:57:2c:51:b4:96:63:2f:ec:
                    bf:3a:4b:47:c9:05:aa:9e:20:d1:69:a7:1e:3b:04:
                    ab:83:13:f1:4a:44:38:a1:3a:b0:2f:e3:8c:81:b6:
                    d4:6c:91:c8:6d:d4:c4:e6:2f:5a:33:a4:5a:2c:82:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:30:60:92:50:94:EF:96:5E:E0:89:49:6D:9B:B3:79:30:7C:8A:D9
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e372e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.168.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:22:13:19:55:6f:29:89:9c:38:ba:e9:72:8e:9d:4f:dd:a4:
         48:55:39:60:78:e8:bd:1d:4b:47:05:97:4b:3a:3f:b8:f7:60:
         a8:66:8d:be:10:2c:eb:20:e7:30:12:c1:4f:81:b8:6c:56:51:
         98:9b:ef:a6:ee:07:0a:61:ad:83:ee:01:2e:d3:b5:6c:69:ac:
         15:70:21:e4:b3:75:48:cb:b4:e3:75:ea:46:50:0d:0a:c9:46:
         78:3f:7e:37:0c:66:ab:ac:1c:f0:0b:e9:b0:9f:71:05:eb:55:
         a9:5d:cb:c5:a2:71:3c:d5:ac:66:2a:4b:e2:eb:fe:ca:6f:fd:
         d2:aa:81:ae:cd:db:3f:fe:be:c5:12:0c:56:ab:dc:7b:5d:85:
         ff:db:8d:ad:d1:bc:85:5d:6f:13:f2:20:7a:21:9c:aa:16:a4:
         03:78:10:0e:55:38:59:ef:be:81:f6:86:81:54:bf:40:14:b5:
         b2:74:14:f5:b5:50:e0:73:ba:19:d1:f7:80:33:30:99:8f:65:
         c7:96:16:8a:5d:de:3c:b0:1c:ea:f9:49:c0:31:ee:ac:c6:05:
         e2:1f:76:9e:e4:d5:e3:a6:4e:36:cf:9f:fe:71:78:b5:d9:eb:
         66:47:89:b2:d1:d6:8b:03:01:0b:34:07:cb:0b:b8:c4:8b:20:
         f4:bc:18:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 18:46:15 2026 by rpki-client