Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35392e302f32342d3234203d3e203534323532.roa
File:                     3231362e3132362e35392e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          TmW+FCAjh8GDQrR09zWK+ni7NVcnsWSmUP11xWma9DE=
Subject key identifier:   42:BC:C5:E4:05:78:12:F2:7A:46:CF:15:B5:E4:5E:E6:C2:6C:9D:E3
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       4C835AC991FFF30D66FC6C8DA5614B95B27E19F1
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35392e302f32342d3234203d3e203534323532.roa
Signing time:             Fri 16 Oct 2026 18:36:21 +0000
ROA not before:           Fri 16 Oct 2026 18:31:21 +0000
ROA not after:            Fri 15 Oct 2027 18:36:21 +0000
asID:                     54252
IP address blocks:        216.126.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 08:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:83:5a:c9:91:ff:f3:0d:66:fc:6c:8d:a5:61:4b:95:b2:7e:19:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Oct 16 18:31:21 2026 GMT
            Not After : Oct 15 18:36:21 2027 GMT
        Subject: CN=42BCC5E4057812F27A46CF15B5E45EE6C26C9DE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1c:c7:1e:1a:3f:db:e0:6b:f4:a7:5d:dd:6c:
                    5a:17:7a:15:fd:2b:a5:24:67:17:06:c7:23:ab:45:
                    6f:00:c5:05:45:af:93:44:83:6e:77:7a:b0:37:d6:
                    8f:da:cf:e0:98:df:98:8d:e3:f6:62:4c:05:ee:68:
                    13:3a:73:1b:da:7e:5c:b9:96:3b:8f:0c:ff:6d:7b:
                    4f:de:69:98:9e:2e:d1:4b:57:45:c2:e9:6a:a4:92:
                    e3:6c:9c:67:a8:7f:79:e1:44:c9:5f:c9:83:88:03:
                    1a:80:ba:ac:01:e8:3b:c5:6f:b8:1d:9b:37:cc:df:
                    ba:38:51:1b:b2:03:98:73:f3:58:e1:32:b5:ef:58:
                    a6:8e:05:24:57:1b:64:6f:d6:a0:79:f1:87:87:b5:
                    20:9b:eb:b0:c6:a5:2f:5a:b9:15:c3:71:78:aa:8a:
                    85:0d:72:1c:c2:2f:7d:c0:58:d3:04:cf:7e:c3:92:
                    b2:cc:37:21:b2:fc:c4:87:c1:6f:2d:e5:5f:b1:eb:
                    8e:81:8c:9b:d2:07:f5:44:1a:fa:26:86:5c:7a:00:
                    0a:5d:2b:f8:4d:1f:32:b7:cc:25:ec:ec:a8:b7:01:
                    05:72:14:83:fc:34:59:dc:63:58:b0:3f:ce:1b:f5:
                    38:59:98:f7:dc:94:86:c5:22:35:d7:f3:00:3b:6d:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BC:C5:E4:05:78:12:F2:7A:46:CF:15:B5:E4:5E:E6:C2:6C:9D:E3
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3231362e3132362e35392e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:93:d2:c3:ff:65:73:90:5b:80:6c:4a:f9:7f:25:be:82:
         dd:41:24:48:e2:21:d7:3f:1b:b3:28:e5:6d:4a:f1:a3:93:d8:
         8a:69:0e:f9:da:c9:7e:a9:7d:0d:c0:d9:2e:a1:54:9b:75:75:
         7d:bb:a5:e8:cd:a0:82:66:e5:c0:c9:6a:77:85:25:f0:d5:d5:
         02:41:b7:bc:9c:72:ae:db:c2:2f:ed:ae:73:bc:e1:b8:e9:b4:
         2d:a1:6d:40:8a:8b:c6:a9:0e:9c:3a:ff:82:9a:91:60:a7:7a:
         ed:45:94:84:ba:a7:a5:48:08:46:0c:5e:02:38:40:d4:7a:7e:
         b1:d1:2a:91:de:9d:88:83:11:51:b1:48:cb:42:e3:29:32:8d:
         34:ce:9d:57:f5:a0:01:84:c4:6e:36:a8:31:79:ab:a1:12:d4:
         81:5b:56:21:66:12:e8:ba:85:32:af:bb:77:0c:1b:8c:ba:f2:
         d8:44:14:a3:3c:c7:a3:67:44:af:d7:7f:0e:14:e9:67:6f:ab:
         ad:53:86:d6:92:a8:f6:0f:77:b7:a7:ee:15:3d:82:46:65:96:
         c5:9a:24:c3:39:17:b3:fd:e6:d1:ca:b1:53:a9:ac:1a:7d:9a:
         63:ec:2c:61:62:91:14:a2:00:79:50:3f:4c:9c:db:5b:50:09:
         dd:f6:be:7e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUTINayZH/8w1m/GyNpWFLlbJ+GfEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk
MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjYxMDE2MTgzMTIxWhcNMjcxMDE1MTgzNjIx
WjAzMTEwLwYDVQQDEyg0MkJDQzVFNDA1NzgxMkYyN0E0NkNGMTVCNUU0NUVFNkMy
NkM5REUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRzHHho/2+Br
9Kdd3WxaF3oV/SulJGcXBscjq0VvAMUFRa+TRINud3qwN9aP2s/gmN+YjeP2YkwF
7mgTOnMb2n5cuZY7jwz/bXtP3mmYni7RS1dFwulqpJLjbJxnqH954UTJX8mDiAMa
gLqsAeg7xW+4HZs3zN+6OFEbsgOYc/NY4TK171imjgUkVxtkb9agefGHh7Ugm+uw
xqUvWrkVw3F4qoqFDXIcwi99wFjTBM9+w5KyzDchsvzEh8FvLeVfseuOgYyb0gf1
RBr6JoZcegAKXSv4TR8yt8wl7OyotwEFchSD/DRZ3GNYsD/OG/U4WZj33JSGxSI1
1/MAO23XnwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEK8xeQFeBLyekbPFbXkXubC
bJ3jMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv
RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx
MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4
MTc1NGY0ZTY0OS8wLzMyMzEzNjJlMzEzMjM2MmUzNTM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDMyMzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANh+OzANBgkqhkiG9w0BAQsF
AAOCAQEAjBqT0sP/ZXOQW4BsSvl/Jb6C3UEkSOIh1z8bsyjlbUrxo5PYimkO+drJ
fql9DcDZLqFUm3V1fbul6M2ggmblwMlqd4Ul8NXVAkG3vJxyrtvCL+2uc7zhuOm0
LaFtQIqLxqkOnDr/gpqRYKd67UWUhLqnpUgIRgxeAjhA1Hp+sdEqkd6diIMRUbFI
y0LjKTKNNM6dV/WgAYTEbjaoMXmroRLUgVtWIWYS6LqFMq+7dwwbjLry2EQUozzH
o2dEr9d/DhTpZ2+rrVOG1pKo9g93t6fuFT2CRmWWxZokwzkXs/3m0cqxU6msGn2a
Y+wsYWKRFKIAeVA/TJzbW1AJ3fa+fg==
-----END CERTIFICATE-----
Generated at Wed Oct 21 22:19:40 2026 by rpki-client