Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3136322e3234342e35362e302f32342d3234203d3e203332333534.roa
File:                     3136322e3234342e35362e302f32342d3234203d3e203332333534.roa (raw, json)
Hash identifier:          6X6tq6sWZizJWmMz0ihJy/WaUfEgiJjO7OsFvRH1TtA=
Subject key identifier:   C5:A8:E2:1D:F8:56:30:FD:B7:84:3A:02:7C:6B:31:4F:5E:39:C7:AD
Certificate issuer:       /CN=b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff
Certificate serial:       1F62CDC24D1BD37EA7CA252A7B4E699240F827AA
Authority key identifier: 75:D0:60:2D:37:3B:EF:51:12:ED:A0:3C:FD:DA:3E:FF:ED:7E:55:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3136322e3234342e35362e302f32342d3234203d3e203332333534.roa
Signing time:             Wed 07 Oct 2026 16:23:45 +0000
ROA not before:           Wed 07 Oct 2026 16:18:45 +0000
ROA not after:            Wed 06 Oct 2027 16:23:45 +0000
asID:                     32354
IP address blocks:        162.244.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.crl
                          rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 00:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:62:cd:c2:4d:1b:d3:7e:a7:ca:25:2a:7b:4e:69:92:40:f8:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff
        Validity
            Not Before: Oct  7 16:18:45 2026 GMT
            Not After : Oct  6 16:23:45 2027 GMT
        Subject: CN=C5A8E21DF85630FDB7843A027C6B314F5E39C7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:94:23:4d:03:85:f5:21:9e:8e:e5:48:b3:
                    43:0d:74:df:e9:80:ca:ef:78:e2:6d:51:5c:27:29:
                    b2:ca:e8:dc:d7:cc:87:48:26:91:3c:72:6d:63:55:
                    7a:d5:82:7f:bf:86:bf:a3:78:89:88:9e:fb:54:8f:
                    f4:db:7e:93:9d:e6:08:44:01:84:56:f8:37:0f:54:
                    98:fd:19:f8:dd:cb:9a:82:8e:20:67:66:cd:d4:97:
                    ba:4e:6d:09:37:b3:2c:aa:f3:5b:5d:0f:3a:32:a3:
                    86:88:9b:a5:35:83:46:4f:a0:45:64:86:a9:c5:47:
                    23:08:60:87:b8:93:e6:7b:9b:c6:e1:b5:ad:8a:2f:
                    ea:38:12:12:d0:e2:bb:3f:dd:a6:9b:96:52:4c:14:
                    09:aa:5a:04:8b:a5:f2:a1:3c:a4:ba:de:49:ef:5b:
                    9e:a6:12:e2:2a:bd:ab:a0:2d:2c:c6:33:4c:19:f0:
                    c3:08:00:09:d5:1f:23:01:94:a7:01:be:4a:de:2a:
                    a8:7b:50:a4:1f:08:8a:52:15:31:76:0e:f5:7d:c6:
                    1d:55:3a:4d:a1:71:fb:79:23:05:20:bd:6c:67:00:
                    45:c2:7e:37:2a:25:b7:7d:62:48:de:54:a2:32:49:
                    7a:7b:44:d0:ce:63:88:00:45:4c:3a:a2:89:33:cd:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:E2:1D:F8:56:30:FD:B7:84:3A:02:7C:6B:31:4F:5E:39:C7:AD
            X509v3 Authority Key Identifier:
                keyid:75:D0:60:2D:37:3B:EF:51:12:ED:A0:3C:FD:DA:3E:FF:ED:7E:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3136322e3234342e35362e302f32342d3234203d3e203332333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:e7:19:38:4e:1d:32:53:26:e2:1d:a8:19:20:37:a0:37:1c:
         93:00:fb:0f:00:cc:5c:e3:66:d7:63:72:22:15:5c:ca:3d:ba:
         91:3e:d3:9a:1f:4e:97:92:01:5c:fe:48:2f:0a:72:73:e6:52:
         02:41:0c:ef:4f:93:c9:e1:d8:bc:5d:48:dd:38:1a:8e:55:9a:
         97:0b:cf:7d:e9:c7:62:f3:cd:7a:a9:94:ee:57:67:a0:73:b7:
         f1:6b:d7:12:de:c6:d2:8a:23:37:a3:a2:88:8d:e8:46:08:da:
         ce:a8:25:d3:da:95:5a:ba:a0:d4:36:ff:e7:17:47:80:94:29:
         39:56:ba:fc:4f:03:da:8e:33:8b:ef:fd:ea:c6:ee:93:7b:c7:
         34:28:bc:4d:00:a6:99:1d:cd:7d:23:61:ee:a7:5b:72:d3:d3:
         3e:f9:65:3a:99:06:01:9a:bc:8d:b1:89:74:52:1c:33:0e:9b:
         53:27:50:b1:3e:b3:2f:76:c4:e6:75:da:21:3a:6e:af:1f:f9:
         b9:f1:5e:e5:cd:de:0c:e8:03:73:44:8f:0d:f3:1a:a4:b1:1c:
         d6:9c:38:ed:cc:d7:67:fb:db:49:77:de:75:fd:43:a5:cb:6d:
         f1:9b:00:f6:3f:ed:99:e1:a7:1f:bd:1e:df:54:72:25:8a:d1:
         3a:22:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:37:03 2026 by rpki-client