Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS32613.roa
File:                     AS32613.roa (raw, json)
Hash identifier:          41pFkj+pKKYC+LWqzUydFNhL1gA9Xo3qaVlsTRep55w=
Subject key identifier:   A8:5B:54:06:54:0D:5F:3F:05:19:83:D8:D4:57:59:44:67:91:9E:62
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5A912BE2A7D4A9EF9420F3149F626D1EC7B039D6
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS32613.roa
Signing time:             Thu 09 Apr 2026 01:05:05 +0000
ROA not before:           Thu 09 Apr 2026 01:00:05 +0000
ROA not after:            Thu 08 Apr 2027 01:05:05 +0000
asID:                     32613
IP address blocks:        40.27.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:91:2b:e2:a7:d4:a9:ef:94:20:f3:14:9f:62:6d:1e:c7:b0:39:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  9 01:00:05 2026 GMT
            Not After : Apr  8 01:05:05 2027 GMT
        Subject: CN=A85B5406540D5F3F051983D8D457594467919E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6f:6d:49:6e:ad:44:4a:46:9b:f0:9f:ea:d6:
                    3b:e9:65:b0:af:88:4a:0e:62:6f:8d:44:de:a4:1a:
                    c2:16:a4:bf:04:12:4c:d8:fe:cd:28:e0:f7:a1:49:
                    28:5d:95:4c:6c:55:90:34:48:d8:ee:7d:7c:71:72:
                    d9:56:82:c9:95:ce:41:e3:52:dd:a0:ee:69:68:8c:
                    8e:56:8b:f8:6b:26:cb:9e:52:fb:d8:b8:c3:d4:83:
                    ec:83:88:e3:f9:ba:c1:51:8e:bc:ba:e9:88:41:4c:
                    7e:ba:65:e6:52:25:5d:6e:a8:d6:0b:2a:98:92:31:
                    d9:71:b1:de:90:20:1c:4a:d3:04:5a:d9:c5:24:26:
                    39:f5:2e:97:34:60:bc:de:38:45:0d:4c:88:b2:58:
                    c1:63:a0:d4:45:2a:0c:84:3b:12:73:43:51:cb:95:
                    11:df:7d:cb:85:13:38:9a:a1:8c:41:5d:66:7e:55:
                    17:f8:62:e4:16:cb:66:69:d3:e4:d1:ff:ce:c7:45:
                    ea:03:e9:f6:ae:9f:ff:5c:42:31:4a:fe:a8:0e:c0:
                    04:cd:24:88:7d:ed:82:f3:3b:a4:74:b3:6a:5f:11:
                    af:1c:f0:ac:81:e0:c6:12:70:fb:51:f7:1b:1a:f7:
                    0e:26:28:6c:25:32:42:8d:3a:36:a1:f4:c2:a1:9e:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5B:54:06:54:0D:5F:3F:05:19:83:D8:D4:57:59:44:67:91:9E:62
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS32613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:91:77:1d:6a:c6:cf:e3:b9:a4:7d:28:57:8e:5d:b8:20:
         14:c6:f5:0d:96:0b:26:57:ed:7b:e2:1a:97:9a:5d:9d:bd:2b:
         24:d3:c8:98:63:6f:f5:2e:cd:30:73:d5:41:91:ee:ae:e1:ab:
         35:17:38:f9:33:d7:73:cb:77:79:c1:a5:4a:1d:c8:be:ed:e0:
         d3:6d:73:d6:83:01:17:d3:f7:48:b1:8b:84:6f:da:89:25:c9:
         47:52:95:e5:5d:bd:c8:ae:37:fa:11:59:bd:c1:81:48:ad:0a:
         50:17:0b:62:8c:9b:4b:e1:da:51:20:0c:16:0f:1b:d7:d6:c0:
         c8:f0:1d:17:be:4f:7a:d0:3a:e8:03:2c:5c:fc:de:9f:a2:31:
         7b:01:63:36:aa:89:1f:4d:54:43:5b:ad:3d:af:4b:2e:f3:d0:
         39:d9:48:bd:7f:d4:30:57:9f:78:b2:51:1b:cd:a2:e0:0d:20:
         01:ce:3c:e9:6c:3d:33:09:71:0a:d4:a6:ec:c6:38:c2:67:fd:
         3b:43:27:9e:52:0d:a2:21:50:63:0e:f5:0d:ee:60:f7:5c:0f:
         82:56:8a:a2:92:21:9d:f2:a6:e2:18:d2:a1:c6:0d:d1:d8:43:
         1a:bb:cc:bf:72:02:dc:f2:8e:77:20:63:e0:a8:25:28:b0:22:
         60:9d:f3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:25 2026 by rpki-client