Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203630323233.roa
File:                     32332e3137362e3138342e302f32342d3234203d3e203630323233.roa (raw, json)
Hash identifier:          QQktHkK3B8zyqbBnejd+sOSqMuB7Z1AZtjk3F01u/tE=
Subject key identifier:   D1:DE:C1:7E:A4:2F:20:4D:BE:65:D3:89:1A:47:01:ED:ED:98:D6:B4
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       09A65628AD60894DC183D0458FC8082C210C6D44
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203630323233.roa
Signing time:             Wed 01 Apr 2026 14:52:19 +0000
ROA not before:           Wed 01 Apr 2026 14:47:19 +0000
ROA not after:            Wed 31 Mar 2027 14:52:19 +0000
asID:                     60223
IP address blocks:        23.176.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a6:56:28:ad:60:89:4d:c1:83:d0:45:8f:c8:08:2c:21:0c:6d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: Apr  1 14:47:19 2026 GMT
            Not After : Mar 31 14:52:19 2027 GMT
        Subject: CN=D1DEC17EA42F204DBE65D3891A4701EDED98D6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:69:eb:c5:64:c3:3a:8b:29:07:a6:30:93:42:
                    d5:82:88:8f:50:40:e7:dd:01:60:40:ea:71:95:3d:
                    19:5b:8e:aa:fb:db:d9:ba:0a:f8:ad:ef:74:1b:54:
                    52:f4:f4:fd:af:a7:3b:8a:5d:27:f6:83:81:27:05:
                    78:58:a0:da:88:c3:71:f0:58:ad:80:74:04:9c:70:
                    34:46:73:99:89:d6:af:a1:c4:81:70:96:75:48:72:
                    18:80:1a:82:5f:ed:dc:a9:8a:49:c3:30:8b:da:20:
                    fd:21:35:f8:99:9d:39:0f:df:95:a0:7b:56:f4:60:
                    19:5b:24:d3:ae:92:01:12:13:82:39:d0:ca:4b:09:
                    ff:58:a3:e4:90:d6:65:2f:c1:77:93:4a:8f:bc:94:
                    37:2e:4e:4d:b4:3e:fd:db:29:cc:8d:d9:af:31:be:
                    c9:c6:e2:45:76:79:86:e3:51:2d:28:91:81:de:cf:
                    10:42:16:e2:35:59:02:6b:8b:5a:8f:8a:9f:bd:31:
                    11:05:f2:7a:7a:3c:b6:fe:c2:1c:9b:98:dd:c3:b4:
                    bd:6a:19:d5:c8:a8:a3:fd:82:53:ad:b4:68:2d:0e:
                    3f:ea:02:de:74:da:12:44:49:12:f5:76:28:b7:07:
                    a5:51:fd:10:c4:a4:48:a4:09:e3:ee:a3:d8:5f:af:
                    5d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:C1:7E:A4:2F:20:4D:BE:65:D3:89:1A:47:01:ED:ED:98:D6:B4
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:d7:94:3a:c1:fd:fa:6c:15:9a:e1:96:92:c3:3c:02:af:04:
         65:fc:9d:27:2b:18:1c:04:31:fe:38:ee:ff:7e:34:32:a9:d7:
         86:94:e7:7f:57:32:c3:5b:62:80:79:ab:0d:ff:5e:11:53:ac:
         24:fe:33:45:0a:c5:ae:79:5f:aa:ee:33:13:af:ba:ec:11:42:
         d8:ae:4b:64:f3:d5:56:a4:68:93:f7:01:ef:8e:24:f0:8c:14:
         28:10:88:51:7d:3a:20:74:33:4b:fa:69:a4:f5:e0:e2:03:30:
         a2:e1:81:f3:6e:45:b4:11:1c:05:12:6d:79:42:8d:e2:22:0a:
         c4:32:b4:10:12:97:7a:77:61:68:80:cd:cd:e7:7e:32:56:9a:
         41:28:eb:73:3a:94:37:0d:73:22:3e:f1:2a:ae:6e:7e:0c:a9:
         b0:5c:ea:03:a7:c3:02:ba:62:53:f1:85:9a:ff:a5:9f:46:d0:
         2c:b0:25:5c:fa:ce:c8:ef:66:e3:5c:7a:76:e1:9f:ec:20:2e:
         fa:cf:7c:05:a0:74:ee:5e:e6:fe:13:2a:72:14:85:8b:ff:66:
         95:2b:f4:09:65:c1:34:15:ef:9e:27:08:15:8b:10:76:1e:bc:
         c5:e3:97:90:ea:1b:85:cf:54:ab:ae:9b:9a:5c:df:3e:99:38:
         24:cd:74:a1
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUCaZWKK1giU3Bg9BFj8gILCEMbUQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmI3NWNhMjUwZmM2M2M2YzQ3ZDAzMjYzOGJjZWNjNDlm
NGI1ZmI3MTVlYzZkZmU4YzgwHhcNMjYwNDAxMTQ0NzE5WhcNMjcwMzMxMTQ1MjE5
WjAzMTEwLwYDVQQDEyhEMURFQzE3RUE0MkYyMDREQkU2NUQzODkxQTQ3MDFFREVE
OThENkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGnrxWTDOosp
B6Ywk0LVgoiPUEDn3QFgQOpxlT0ZW46q+9vZugr4re90G1RS9PT9r6c7il0n9oOB
JwV4WKDaiMNx8FitgHQEnHA0RnOZidavocSBcJZ1SHIYgBqCX+3cqYpJwzCL2iD9
ITX4mZ05D9+VoHtW9GAZWyTTrpIBEhOCOdDKSwn/WKPkkNZlL8F3k0qPvJQ3Lk5N
tD792ynMjdmvMb7JxuJFdnmG41EtKJGB3s8QQhbiNVkCa4taj4qfvTERBfJ6ejy2
/sIcm5jdw7S9ahnVyKij/YJTrbRoLQ4/6gLedNoSREkS9XYotwelUf0QxKRIpAnj
7qPYX69d7QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFNHewX6kLyBNvmXTiRpHAe3t
mNa0MB8GA1UdIwQYMBaAFPv3jl2ltdatTi+TJjQgaxM8y/0lMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3JlcG8ucnBraS5zcGFjZS9y
ZXBvL05ldGlmYWNlLzEvRkJGNzhFNURBNUI1RDZBRDRFMkY5MzI2MzQyMDZCMTMz
Q0NCRkQyNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00
YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA0YjI0ZGExLTExYWItNDhhZC1hMDNmLTZi
NzgzMmE1NjljOC8yYjc1Y2EyNTBmYzYzYzZjNDdkMDMyNjM4YmNlY2M0OWY0YjVm
YjcxNWVjNmRmZThjOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJy
c3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzEvMzIzMzJlMzEz
NzM2MmUzMTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzIzMjMzLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAF7C4MA0GCSqGSIb3DQEBCwUAA4IBAQC915Q6wf36bBWa4ZaSwzwC
rwRl/J0nKxgcBDH+OO7/fjQyqdeGlOd/VzLDW2KAeasN/14RU6wk/jNFCsWueV+q
7jMTr7rsEULYrktk89VWpGiT9wHvjiTwjBQoEIhRfTogdDNL+mmk9eDiAzCi4YHz
bkW0ERwFEm15Qo3iIgrEMrQQEpd6d2FogM3N534yVppBKOtzOpQ3DXMiPvEqrm5+
DKmwXOoDp8MCumJT8YWa/6WfRtAssCVc+s7I72bjXHp24Z/sIC76z3wFoHTuXub+
EypyFIWL/2aVK/QJZcE0Fe+eJwgVixB2HrzF45eQ6huFz1SrrpuaXN8+mTgkzXSh
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:51:39 2026 by rpki-client