Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3230382e37362e32382e302f32322d3234203d3e203332333534.roa
File:                     3230382e37362e32382e302f32322d3234203d3e203332333534.roa (raw, json)
Hash identifier:          ioJ1qdSIA5FY6gyvSxj2KfsRktVvCmMpYeVOtcsGm74=
Subject key identifier:   CC:9C:F8:38:DF:B7:6F:27:E2:77:5A:15:43:53:77:F0:14:7D:AD:EB
Certificate issuer:       /CN=b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff
Certificate serial:       3527258201870AF94CB2B38D0416289829CCCAC0
Authority key identifier: 75:D0:60:2D:37:3B:EF:51:12:ED:A0:3C:FD:DA:3E:FF:ED:7E:55:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3230382e37362e32382e302f32322d3234203d3e203332333534.roa
Signing time:             Wed 07 Oct 2026 06:17:28 +0000
ROA not before:           Wed 07 Oct 2026 06:12:28 +0000
ROA not after:            Wed 06 Oct 2027 06:17:28 +0000
asID:                     32354
IP address blocks:        208.76.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.crl
                          rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 00:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:27:25:82:01:87:0a:f9:4c:b2:b3:8d:04:16:28:98:29:cc:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff
        Validity
            Not Before: Oct  7 06:12:28 2026 GMT
            Not After : Oct  6 06:17:28 2027 GMT
        Subject: CN=CC9CF838DFB76F27E2775A15435377F0147DADEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:c6:6c:44:88:18:ec:78:c2:4b:76:05:4d:
                    ec:df:2f:d0:d0:93:5b:89:a6:cc:14:36:96:9e:62:
                    51:a3:f4:10:6e:19:3a:18:75:9e:24:42:b3:fd:fd:
                    74:f2:79:85:2d:a5:ca:cf:b0:85:32:21:58:b4:db:
                    6f:56:f2:ce:f2:67:91:f2:19:82:1c:79:51:32:0f:
                    20:2a:6e:84:79:95:71:bc:a1:e5:eb:cb:d6:37:0c:
                    03:e3:98:dd:18:a7:6e:ba:f7:1b:7a:13:3b:ac:ca:
                    64:b5:34:97:c1:ae:48:bb:e2:74:9e:5e:e5:7b:b1:
                    8c:90:46:3c:0a:48:21:a0:73:18:1d:cf:dc:33:72:
                    5a:53:07:60:23:3f:a1:f2:c6:8b:b0:c3:98:26:af:
                    dd:74:6b:80:75:03:14:3c:b9:e7:75:e0:90:94:1e:
                    4a:1e:66:0a:47:c5:8a:85:4f:d4:f1:7d:eb:fd:97:
                    c9:e5:12:ce:a9:22:49:89:98:21:3b:af:62:a4:9f:
                    56:99:71:53:ea:dd:64:d9:e9:71:89:2f:52:dc:1a:
                    3b:ad:d5:ca:57:a3:ed:d6:8b:7b:75:1a:53:55:c2:
                    1a:b0:cc:2f:5d:f3:1e:c7:36:4b:29:f3:2c:22:4a:
                    c4:1f:03:2f:e2:9c:b3:d3:81:05:2f:fa:36:88:2e:
                    82:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9C:F8:38:DF:B7:6F:27:E2:77:5A:15:43:53:77:F0:14:7D:AD:EB
            X509v3 Authority Key Identifier:
                keyid:75:D0:60:2D:37:3B:EF:51:12:ED:A0:3C:FD:DA:3E:FF:ED:7E:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3230382e37362e32382e302f32322d3234203d3e203332333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:ac:7f:8a:05:f3:e7:18:38:bb:ee:25:72:e3:0c:51:80:
         92:db:a3:15:90:49:cb:13:21:57:4a:f7:2e:fb:70:2c:dc:e7:
         0e:59:cf:77:d8:3a:73:6b:84:e2:fb:c5:52:22:fd:74:b9:81:
         a0:e8:7e:bd:5d:d1:ee:d8:2a:58:84:0d:a8:4f:66:f1:2d:a9:
         77:36:68:8c:b7:f5:57:58:36:d8:49:a5:27:73:d6:ae:3e:87:
         8a:57:b9:ff:f2:b8:db:2d:68:b6:28:f3:9c:a6:45:5f:60:65:
         04:d4:d6:0a:c7:b8:21:6d:34:05:5a:a3:19:a8:db:8d:f3:cf:
         76:c7:1d:3d:57:e1:70:d2:eb:4e:8b:fe:49:cc:82:8d:d8:38:
         7c:a0:70:df:ca:36:56:96:c7:fa:22:45:ab:10:90:e6:9b:73:
         8c:3b:a1:d5:b0:5a:04:0b:9a:48:d5:f1:a7:a8:e4:bc:cd:df:
         9e:6e:d4:b7:a4:0f:ea:ef:c6:36:fc:dd:84:6e:e2:a9:0a:48:
         2c:ed:5f:28:09:57:fd:fd:4d:ce:10:1c:08:bf:16:ba:c4:4a:
         f2:29:16:79:c2:54:cf:90:c2:54:b1:cb:6c:82:c8:58:75:43:
         c3:8f:55:c1:77:3f:02:42:29:b7:e7:a7:1e:18:23:24:03:e4:
         9b:a4:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:19:09 2026 by rpki-client