Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa
File:                     3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa (raw, json)
Hash identifier:          WYyM4UXQi6zPRGhuJ3IiHQNtENa5s/nAKWv3C/eF1RI=
Subject key identifier:   53:8B:0D:F5:99:D8:7E:10:D7:41:BA:D4:4D:EB:1A:3A:61:18:2D:53
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       178D9BC32A1A912CA1E1B384CA7E6CB5AF368E86
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa
Signing time:             Sat 29 Aug 2026 22:00:46 +0000
ROA not before:           Sat 29 Aug 2026 21:55:46 +0000
ROA not after:            Sat 28 Aug 2027 22:00:46 +0000
asID:                     214150
IP address blocks:        169.128.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:9b:c3:2a:1a:91:2c:a1:e1:b3:84:ca:7e:6c:b5:af:36:8e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Aug 29 21:55:46 2026 GMT
            Not After : Aug 28 22:00:46 2027 GMT
        Subject: CN=538B0DF599D87E10D741BAD44DEB1A3A61182D53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:43:04:d7:9e:93:bd:25:2e:c6:20:9f:9a:
                    39:10:05:bd:ce:47:3e:b1:24:93:f2:8f:fd:4c:ba:
                    56:63:06:3a:42:29:24:a8:cd:dc:cd:5c:ec:a9:43:
                    20:16:7f:37:64:28:a1:ee:a8:ac:68:cf:a4:82:98:
                    8d:22:dc:5f:7b:c5:ab:0b:53:e5:67:ef:9a:e6:68:
                    27:73:cf:ee:d3:fd:4d:85:bd:17:36:d2:4a:7c:04:
                    cc:47:ca:f8:13:3c:63:aa:75:d6:50:54:4d:18:5c:
                    e2:7f:17:61:51:88:47:88:8f:7d:44:9d:58:1b:07:
                    7f:01:e9:c2:df:11:60:98:ec:cb:9f:85:d8:0f:22:
                    04:83:b9:05:29:d0:f3:8e:fe:53:91:5c:4f:6b:e7:
                    4e:76:c0:85:fb:39:78:92:f1:ff:16:5b:6c:d8:57:
                    a2:56:e1:0a:14:c0:5f:ce:38:1f:57:af:35:e9:d8:
                    de:6d:22:e3:d3:d8:8d:64:d2:1a:93:fa:71:c6:e5:
                    e1:d6:50:6c:c1:90:69:54:95:d4:7f:ac:a5:aa:61:
                    81:08:f8:ac:57:c7:4b:35:fe:87:7a:db:33:85:ac:
                    dd:62:05:e3:30:a2:88:57:1a:1b:59:8d:51:75:f5:
                    4b:e2:ea:bc:ce:c5:69:56:e3:2d:e7:79:08:ad:a0:
                    c6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8B:0D:F5:99:D8:7E:10:D7:41:BA:D4:4D:EB:1A:3A:61:18:2D:53
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e35302e302f32332d3234203d3e20323134313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:b1:a4:ff:f5:52:f8:99:f1:53:e8:92:fd:f6:09:59:58:e0:
         c0:fa:ea:e4:8e:71:33:64:6f:45:28:85:09:09:51:f0:9d:90:
         ae:44:61:bb:d7:dd:7a:49:19:d3:dd:f8:74:fd:81:e0:db:ff:
         fc:fb:3b:36:98:d5:ca:19:f6:2f:78:73:28:ec:3e:d6:4a:40:
         b6:13:aa:a4:fe:a4:6f:87:93:ac:d7:92:2e:fb:fd:8f:8a:af:
         cf:21:19:9e:d5:01:cf:23:2d:73:4e:48:4b:36:17:a7:73:48:
         a5:2f:87:6c:d3:4a:81:6c:1d:ac:28:d4:c8:ad:9f:cc:ee:f0:
         83:6a:d3:88:43:12:3e:d3:59:b6:ac:2b:23:8b:ec:0e:bf:76:
         bc:66:71:2f:84:58:7c:10:ac:a0:c4:38:4f:a9:42:69:b4:10:
         06:d2:0c:c0:2a:bc:a2:25:8c:81:67:74:dd:e7:e1:ce:31:24:
         00:3f:14:0a:57:92:7e:db:ac:f2:20:b0:7d:99:c9:10:07:65:
         2d:96:3b:60:27:26:1a:d1:5f:2a:31:fd:52:e0:90:d9:d2:7f:
         75:cd:38:4f:bc:9f:a6:b6:97:d3:c7:c5:1d:b8:8a:13:06:94:
         cd:28:32:8e:20:55:ee:9f:61:ff:57:b1:da:49:0d:87:0d:39:
         1e:84:d1:70
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUF42bwyoakSyh4bOEyn5sta82joYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmVjZmRmZGJkYjU2ZDNmYmZhMjYxYmIyODdiZjBjNDE4
NTU3MmQwYzIxYjY0ZTFmNzQwHhcNMjYwODI5MjE1NTQ2WhcNMjcwODI4MjIwMDQ2
WjAzMTEwLwYDVQQDEyg1MzhCMERGNTk5RDg3RTEwRDc0MUJBRDQ0REVCMUEzQTYx
MTgyRDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3JDBNeek70l
LsYgn5o5EAW9zkc+sSST8o/9TLpWYwY6QikkqM3czVzsqUMgFn83ZCih7qisaM+k
gpiNItxfe8WrC1PlZ++a5mgnc8/u0/1Nhb0XNtJKfATMR8r4EzxjqnXWUFRNGFzi
fxdhUYhHiI99RJ1YGwd/AenC3xFgmOzLn4XYDyIEg7kFKdDzjv5TkVxPa+dOdsCF
+zl4kvH/Flts2FeiVuEKFMBfzjgfV6816djebSLj09iNZNIak/pxxuXh1lBswZBp
VJXUf6ylqmGBCPisV8dLNf6HetszhazdYgXjMKKIVxobWY1RdfVL4uq8zsVpVuMt
53kIraDG6QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFOLDfWZ2H4Q10G61E3rGjph
GC1TMB8GA1UdIwQYMBaAFHW/F2dWTXxExb05X2pqIZDS3dcIMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2NhMmIxMmFmYzQyODQzZGJhZTRiMDVjZjM2MGQ5NTJkLzAv
NzVCRjE3Njc1NjREN0M0NEM1QkQzOTVGNkE2QTIxOTBEMkRERDcwOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyL2M0MTU2NDRhLWE1YTQtNDg0OS1hYmE5LTE5ODA4NmZkMTU0ZC9mZWNm
ZGZkYmRiNTZkM2ZiZmEyNjFiYjI4N2JmMGM0MTg1NTcyZDBjMjFiNjRlMWY3NC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jYTJiMTJhZmM0Mjg0M2RiYWU0YjA1
Y2YzNjBkOTUyZC8wLzMxMzYzOTJlMzEzMjM4MmUzNTMwMmUzMDJmMzIzMzJkMzIz
NDIwM2QzZTIwMzIzMTM0MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqYAyMA0GCSqGSIb3DQEB
CwUAA4IBAQDEsaT/9VL4mfFT6JL99glZWODA+urkjnEzZG9FKIUJCVHwnZCuRGG7
1916SRnT3fh0/YHg2//8+zs2mNXKGfYveHMo7D7WSkC2E6qk/qRvh5Os15Iu+/2P
iq/PIRme1QHPIy1zTkhLNhenc0ilL4ds00qBbB2sKNTIrZ/M7vCDatOIQxI+01m2
rCsji+wOv3a8ZnEvhFh8EKygxDhPqUJptBAG0gzAKryiJYyBZ3Td5+HOMSQAPxQK
V5J+26zyILB9mckQB2UtljtgJyYa0V8qMf1S4JDZ0n91zThPvJ+mtpfTx8UduIoT
BpTNKDKOIFXun2H/V7HaSQ2HDTkehNFw
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:18 2026 by rpki-client