Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35362e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132362e35362e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          8BEdCAatGqueNdW939qHdfpo6Ym+gMeHKmdJVgKPOhU=
Subject key identifier:   9E:79:3D:AF:F9:2F:00:72:C6:0A:10:06:AA:7C:2F:33:15:4F:CC:1F
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       3F397F777C19A991222AA2A64D7C1B48FED4AF5C
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35362e302f32342d3234203d3e203430363736.roa
Signing time:             Fri 16 Oct 2026 18:36:21 +0000
ROA not before:           Fri 16 Oct 2026 18:31:21 +0000
ROA not after:            Fri 15 Oct 2027 18:36:21 +0000
asID:                     40676
IP address blocks:        216.126.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 16:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:39:7f:77:7c:19:a9:91:22:2a:a2:a6:4d:7c:1b:48:fe:d4:af:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:21 2026 GMT
            Not After : Oct 15 18:36:21 2027 GMT
        Subject: CN=9E793DAFF92F0072C60A1006AA7C2F33154FCC1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:f5:fa:c5:cc:98:92:b8:2d:3c:81:dc:15:
                    7a:e1:36:df:2b:9e:29:15:60:34:a0:d6:41:1b:1a:
                    c2:70:c7:37:99:b0:7e:9e:c2:12:f9:fb:15:ef:36:
                    56:c2:c9:45:a4:64:b1:63:77:d4:97:9e:ec:66:71:
                    55:4e:1a:2c:f2:ed:ea:65:9e:2b:e1:d4:fe:bf:07:
                    d4:3b:d3:6e:48:a5:57:0b:8b:1a:b2:4d:69:74:ea:
                    b7:cc:31:ea:8c:ae:ac:1b:74:8f:3e:60:a7:44:32:
                    88:75:d3:b7:39:59:2b:43:25:40:14:97:c9:79:96:
                    6b:7a:9d:d7:8a:fd:ac:ff:23:e4:8b:7e:cf:f0:82:
                    60:d9:b5:e0:8e:6c:ef:45:57:52:77:5f:33:b9:f6:
                    51:bd:73:24:58:45:6b:a8:1e:2c:6d:54:87:d8:86:
                    77:ad:0c:42:67:f2:e6:44:80:c6:47:93:57:f1:10:
                    d6:d7:ae:8b:af:61:66:54:9c:0e:6d:69:b2:63:cd:
                    5f:99:9a:bd:65:d9:ac:83:ef:7a:0d:9d:9e:94:46:
                    5a:25:55:da:b7:b7:44:37:e8:15:3d:00:49:23:e1:
                    85:01:83:54:dd:53:11:88:b1:c0:99:ff:8a:cf:ab:
                    d5:49:3d:6f:78:0c:11:c1:9d:66:0c:5a:f9:69:7f:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:3D:AF:F9:2F:00:72:C6:0A:10:06:AA:7C:2F:33:15:4F:CC:1F
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35362e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:02:61:8a:5c:f6:44:5a:b2:88:86:7f:0c:e3:22:e5:8a:
         52:26:76:3f:d5:2a:dc:01:32:bb:99:bf:3f:51:dc:a6:89:9f:
         8c:6a:64:8e:69:99:36:cf:5e:c0:f0:9d:72:2d:77:d6:9d:18:
         af:ad:4c:98:f7:03:03:85:36:b4:c2:e1:20:cd:0d:31:9e:5d:
         72:4e:d8:ff:4c:45:0f:67:03:e4:c4:f0:90:f5:35:95:ba:00:
         e9:f0:2b:e2:f8:05:c5:78:03:fc:76:d9:aa:20:f4:44:83:00:
         3b:6b:a6:5c:b0:af:06:95:4f:54:e2:76:ee:8d:b2:b4:00:33:
         f7:01:b5:94:bd:39:2e:c4:35:f3:9c:cf:79:87:da:54:94:4d:
         f6:b9:84:74:3d:ce:13:33:d1:5f:b4:6e:99:db:fb:83:6f:f5:
         80:29:52:82:98:f2:25:2e:43:1f:5e:8a:5a:64:4e:54:e3:4a:
         18:75:77:94:18:75:b1:c2:83:75:71:d5:0e:58:ca:24:c9:e6:
         53:a0:7c:a7:a5:56:b9:2a:3a:db:1a:4d:c7:e3:c5:83:1e:a7:
         93:11:97:a7:c4:d0:1e:c9:36:64:67:01:fa:77:b2:fa:76:90:
         8f:8f:84:92:76:17:c4:5b:e9:7d:87:bc:73:26:05:d9:c0:6e:
         8e:af:92:f4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUPzl/d3wZqZEiKqKmTXwbSP7Ur1wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk
MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjYxMDE2MTgzMTIxWhcNMjcxMDE1MTgzNjIx
WjAzMTEwLwYDVQQDEyg5RTc5M0RBRkY5MkYwMDcyQzYwQTEwMDZBQTdDMkYzMzE1
NEZDQzFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iH1+sXMmJK4
LTyB3BV64TbfK54pFWA0oNZBGxrCcMc3mbB+nsIS+fsV7zZWwslFpGSxY3fUl57s
ZnFVThos8u3qZZ4r4dT+vwfUO9NuSKVXC4sask1pdOq3zDHqjK6sG3SPPmCnRDKI
ddO3OVkrQyVAFJfJeZZrep3Xiv2s/yPki37P8IJg2bXgjmzvRVdSd18zufZRvXMk
WEVrqB4sbVSH2IZ3rQxCZ/LmRIDGR5NX8RDW166Lr2FmVJwObWmyY81fmZq9Zdms
g+96DZ2elEZaJVXat7dEN+gVPQBJI+GFAYNU3VMRiLHAmf+Kz6vVST1veAwRwZ1m
DFr5aX/MiwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJ55Pa/5LwByxgoQBqp8LzMV
T8wfMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv
RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx
MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4
MTc1NGY0ZTY0OS8wLzMyMzEzNjJlMzEzMjM2MmUzNTM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDM2MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANh+ODANBgkqhkiG9w0BAQsF
AAOCAQEAfT0CYYpc9kRasoiGfwzjIuWKUiZ2P9Uq3AEyu5m/P1HcpomfjGpkjmmZ
Ns9ewPCdci131p0Yr61MmPcDA4U2tMLhIM0NMZ5dck7Y/0xFD2cD5MTwkPU1lboA
6fAr4vgFxXgD/HbZqiD0RIMAO2umXLCvBpVPVOJ27o2ytAAz9wG1lL05LsQ185zP
eYfaVJRN9rmEdD3OEzPRX7Rumdv7g2/1gClSgpjyJS5DH16KWmROVONKGHV3lBh1
scKDdXHVDljKJMnmU6B8p6VWuSo62xpNx+PFgx6nkxGXp8TQHsk2ZGcB+ney+naQ
j4+EknYXxFvpfYe8cyYF2cBujq+S9A==
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:10:51 2026 by rpki-client