Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e312e302f32342d3234203d3e203136353039.roa
File:                     3137322e39362e312e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          GARBQiTllxd37tH+Zv5L5ST6Vfwr06Iq5mFbw4/0f4k=
Subject key identifier:   6A:9E:34:02:47:66:E7:C9:22:28:F9:B9:95:34:BB:20:3E:83:89:9A
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       37977BFEC8F85113150D5E8151A18746A170A572
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e312e302f32342d3234203d3e203136353039.roa
Signing time:             Wed 08 Jul 2026 20:48:04 +0000
ROA not before:           Wed 08 Jul 2026 20:43:04 +0000
ROA not after:            Wed 07 Jul 2027 20:48:04 +0000
asID:                     16509
IP address blocks:        172.96.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 21:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:97:7b:fe:c8:f8:51:13:15:0d:5e:81:51:a1:87:46:a1:70:a5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Jul  8 20:43:04 2026 GMT
            Not After : Jul  7 20:48:04 2027 GMT
        Subject: CN=6A9E34024766E7C92228F9B99534BB203E83899A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:70:ed:2f:d3:b7:88:bb:9f:8f:ad:1d:d8:c2:
                    e1:50:5c:9c:26:ff:8d:a5:92:72:75:20:06:e3:4c:
                    89:f6:af:e0:b1:8c:61:ba:bd:05:29:76:7b:1a:7a:
                    4d:cf:0f:f8:cd:a1:19:36:18:b8:60:e6:cc:f2:62:
                    26:89:35:34:66:2b:f2:10:2e:e6:3a:20:1b:36:db:
                    ab:c6:35:08:3a:8d:f8:c0:1d:f0:b7:02:69:db:fb:
                    8f:4d:25:e9:f0:3f:04:e2:28:2d:aa:ad:79:2b:d7:
                    e3:97:9f:c4:c2:31:93:df:da:2d:0c:f5:b3:c2:27:
                    e5:2d:36:59:95:8f:ed:f9:49:be:6d:d5:a3:5a:fc:
                    d9:0f:9c:94:dc:94:01:c4:16:65:af:ab:72:d5:97:
                    62:29:86:44:84:fd:cc:17:80:c4:6a:1c:54:f9:0a:
                    c5:79:39:76:f8:12:fc:18:99:c6:7d:42:15:62:2d:
                    a6:76:a2:af:31:bb:08:17:93:bc:07:91:71:3c:d5:
                    50:67:ff:f5:fd:94:ae:89:2b:11:01:4e:cd:da:2a:
                    dd:60:ae:4c:d2:ae:85:85:78:76:28:37:c3:99:ce:
                    dc:6f:45:4f:56:cd:ca:01:94:74:8f:73:6a:5f:e1:
                    a6:0f:24:e2:86:0f:ca:7d:9f:72:fd:3b:91:d3:46:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:34:02:47:66:E7:C9:22:28:F9:B9:95:34:BB:20:3E:83:89:9A
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e312e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ff:76:09:34:78:c5:bb:27:85:dc:9f:c9:26:b0:00:ef:f1:
         ed:b2:8b:42:15:8a:1f:35:1f:f8:f0:d6:11:cd:6e:e2:56:9e:
         e1:59:34:d9:14:99:65:b1:55:41:af:e0:de:60:65:ab:a4:9f:
         b6:5e:09:04:3e:4a:5b:54:f1:e5:a6:9c:9c:22:7c:fe:5f:77:
         96:b5:ff:b7:97:c6:73:9d:b7:9e:c2:00:da:f3:97:70:af:5b:
         b4:ef:0f:21:bd:4f:8b:00:b8:13:b8:a5:59:9d:ff:2a:3e:ab:
         e2:77:15:e2:03:ac:d8:30:99:18:be:97:de:fe:6b:dc:d5:66:
         1b:e4:8c:e4:cc:d1:1d:c5:55:ea:31:c0:31:2b:3f:99:12:dd:
         b2:8b:ca:0d:1e:e4:90:75:a9:26:3e:f1:ad:78:e4:25:a7:26:
         ea:b0:1b:c0:37:f2:9f:a4:6f:cf:f8:2b:80:d8:d2:f7:49:93:
         1a:44:65:2c:e1:3f:ba:b8:02:a6:fd:1f:4e:28:23:58:86:17:
         f4:00:1a:b3:d9:b2:bf:37:72:3e:1d:1e:aa:01:62:ec:03:88:
         0e:75:ae:78:6b:6e:a5:ea:25:40:f7:f9:fa:40:67:98:80:f4:
         b5:fb:0b:a6:8e:6f:7e:38:df:46:cc:d5:2c:de:35:4e:d4:f4:
         92:10:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:32 2026 by rpki-client