Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e342e302f32322d3234203d3e2039303039.roa
File:                     3137322e39362e342e302f32322d3234203d3e2039303039.roa (raw, json)
Hash identifier:          kZxTUnoAY/ehtzTFhDYOpBigF/+4fRjYD1Yw0mi9Xq8=
Subject key identifier:   6E:12:6D:06:5D:C7:EC:30:23:65:E7:F2:CC:74:7C:7A:DE:F7:83:DB
Certificate issuer:       /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial:       25DECEEA0C05A37D34C92DFC9F1D6BAD082F228D
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e342e302f32322d3234203d3e2039303039.roa
Signing time:             Mon 06 Apr 2026 13:35:07 +0000
ROA not before:           Mon 06 Apr 2026 13:30:07 +0000
ROA not after:            Mon 05 Apr 2027 13:35:07 +0000
asID:                     9009
IP address blocks:        172.96.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
                          rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 13:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:de:ce:ea:0c:05:a3:7d:34:c9:2d:fc:9f:1d:6b:ad:08:2f:22:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
        Validity
            Not Before: Apr  6 13:30:07 2026 GMT
            Not After : Apr  5 13:35:07 2027 GMT
        Subject: CN=6E126D065DC7EC302365E7F2CC747C7ADEF783DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:59:af:c7:38:03:f5:03:d9:e8:cd:26:ac:75:
                    00:7e:03:eb:79:b1:09:7e:d7:61:71:0a:a3:6f:a8:
                    d3:fc:99:6b:ce:48:55:3a:83:ff:b7:4c:f7:4e:fb:
                    df:1d:4d:d2:81:07:64:64:c8:22:b6:8a:8b:d1:b1:
                    93:c5:07:90:00:71:e4:09:e5:42:9d:8b:3e:95:95:
                    4c:52:88:49:94:03:e2:a3:3b:24:09:52:4a:95:57:
                    ff:dc:41:49:e3:20:ad:04:ad:04:c1:81:35:90:7f:
                    01:16:c9:c2:20:4a:05:c7:a7:c7:73:fc:3a:3b:d3:
                    8a:c8:53:d1:11:26:44:10:4e:ec:3b:da:f2:4f:2f:
                    c9:37:19:11:c4:96:b4:52:a6:df:1b:a5:49:86:a6:
                    75:e5:c3:f0:90:46:8c:05:ec:69:cf:05:21:d0:f2:
                    33:6f:26:63:54:a8:0a:84:a7:99:d6:bd:de:4b:cb:
                    45:7d:c4:db:d8:d9:e8:30:05:6c:c0:3f:84:5e:99:
                    f0:9a:e8:70:88:ce:08:33:ec:d0:ef:f5:7d:8b:45:
                    13:91:2b:dc:24:f2:3f:33:67:be:5e:ef:2a:b4:e3:
                    77:47:89:23:8c:e4:26:19:2d:ea:b7:b6:15:57:ea:
                    74:02:6a:c3:24:6e:75:fb:4d:a3:11:3d:50:c6:23:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:12:6D:06:5D:C7:EC:30:23:65:E7:F2:CC:74:7C:7A:DE:F7:83:DB
            X509v3 Authority Key Identifier:
                keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e342e302f32322d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:dd:b7:c7:61:57:2d:4f:a1:c8:06:8c:88:6f:04:ac:5c:7d:
         21:03:00:4f:c6:ca:b6:a9:87:4d:a4:02:98:ed:d6:d8:07:1d:
         c4:8a:2a:0f:3e:39:e1:0d:62:8e:c6:e2:dc:e1:1d:fa:76:01:
         d8:14:59:ef:0c:ce:01:74:b4:29:71:84:87:3b:cd:27:24:0f:
         2a:5a:34:30:37:97:0f:fd:fb:4e:ae:d6:b8:2e:7f:b8:31:9f:
         44:15:33:5c:df:cd:af:58:ff:c3:19:4d:4f:3a:95:03:00:66:
         6c:5e:ad:ff:43:8b:ab:3d:56:60:52:83:7e:30:0d:e6:64:f8:
         30:a3:aa:74:e2:f6:40:4b:ae:6b:72:30:d5:c4:59:10:24:b6:
         ed:82:05:76:91:c5:2e:95:30:61:35:6c:aa:e7:3a:0c:c2:eb:
         11:3e:13:f8:0c:44:9f:01:fa:13:33:3f:6f:8e:14:e2:e6:eb:
         62:a7:b9:8c:d9:ad:39:9e:d7:2f:c5:8e:e1:45:54:25:fa:c9:
         36:84:0b:05:cb:70:34:48:e7:49:61:8b:60:7e:19:6d:49:74:
         74:d7:89:d3:ad:75:e9:08:91:af:88:0a:68:be:cd:7d:1e:18:
         f1:d3:28:b6:c1:ea:59:1b:70:f0:49:c3:c8:e1:08:70:b5:ea:
         0f:de:eb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:39 2026 by rpki-client