Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e203138373333.roa
File:                     32332e38382e3232342e302f31392d3234203d3e203138373333.roa (raw, json)
Hash identifier:          XzDVneBgQWTAzrqEwCd68BKWPX8ZCThfNtKkA02RBQU=
Subject key identifier:   B3:77:D2:D4:85:CF:5C:AE:4E:23:71:EB:14:AF:1D:E3:B0:E6:3F:BA
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       235DF8703405DCE81A7767D3126BA0997EA8160F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e203138373333.roa
Signing time:             Mon 27 Jul 2026 15:21:33 +0000
ROA not before:           Mon 27 Jul 2026 15:16:33 +0000
ROA not after:            Mon 26 Jul 2027 15:21:33 +0000
asID:                     18733
IP address blocks:        23.88.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5d:f8:70:34:05:dc:e8:1a:77:67:d3:12:6b:a0:99:7e:a8:16:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 27 15:16:33 2026 GMT
            Not After : Jul 26 15:21:33 2027 GMT
        Subject: CN=B377D2D485CF5CAE4E2371EB14AF1DE3B0E63FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:63:18:5b:f9:dc:d2:cc:e2:dc:f4:cd:62:f4:
                    43:cd:87:46:aa:41:8c:38:8b:55:34:e7:0d:a7:13:
                    c5:aa:39:e0:9b:19:99:ce:08:0e:bd:70:2f:cd:30:
                    f8:7c:b9:ed:4c:30:bf:e6:ae:94:0b:57:8e:fe:6a:
                    31:81:c6:6a:5a:e3:f7:a8:33:c2:fe:88:1e:2b:0e:
                    b4:fb:81:11:a3:54:88:eb:81:30:22:e8:f9:da:2c:
                    b5:ef:b2:80:8f:76:fd:2b:53:36:75:7c:68:15:d9:
                    c1:dd:d4:87:b8:80:f1:bc:57:f2:d4:84:65:b3:28:
                    a9:8b:05:25:95:fc:c5:31:56:d4:6e:a4:a5:ec:f8:
                    e7:06:8f:41:34:2b:bb:3d:e6:f8:fe:e2:20:b5:65:
                    b9:e8:ba:0f:60:f0:c0:b2:eb:96:d8:2a:99:2c:19:
                    77:0a:eb:bf:66:3e:fb:37:f4:d8:76:10:d3:13:b8:
                    37:b3:60:d1:5e:cd:a0:77:49:94:89:c0:05:c3:4f:
                    8c:27:93:8d:80:2d:0d:b9:d7:7e:02:fb:d3:47:d9:
                    ee:27:1a:54:5f:a6:9a:88:2b:47:da:d5:74:cb:e6:
                    0c:40:04:87:b9:59:14:ba:a7:37:05:29:67:50:f4:
                    57:bb:3e:3a:8a:36:25:a8:c8:75:7a:22:59:85:49:
                    59:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:77:D2:D4:85:CF:5C:AE:4E:23:71:EB:14:AF:1D:E3:B0:E6:3F:BA
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3234203d3e203138373333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:2f:20:23:94:3d:b4:a9:ac:35:e9:f2:6c:1d:b3:f3:5f:60:
         8f:2a:0b:d6:bb:78:c8:70:c4:ae:c3:c8:48:09:55:1a:77:cd:
         88:06:4e:7e:bc:df:ae:65:40:00:fb:e0:dc:1c:0b:3d:81:33:
         7b:e5:93:f8:fd:48:ed:0a:f8:74:0a:71:dd:26:a6:d0:ad:24:
         2b:0e:c0:bc:d0:3a:92:2b:dc:9d:f9:86:cb:14:23:70:cc:2a:
         2e:19:01:d3:c9:5d:d2:26:3c:f9:51:7d:4a:76:03:5b:14:db:
         ea:8c:84:3d:41:9c:4d:12:3d:17:69:74:7a:9d:c7:bc:bf:ed:
         75:a7:fa:e6:34:b7:85:c7:ba:23:b4:28:56:b9:80:ae:4d:9e:
         a9:31:45:cb:ef:52:8b:44:18:18:11:39:ff:a6:a4:e7:a0:63:
         3b:86:d1:4d:97:bb:3c:21:82:72:1b:21:d6:3f:ae:e3:8e:3e:
         93:a6:6e:16:b9:5e:73:40:07:4c:7a:2c:5e:33:d1:5e:bf:43:
         14:73:2e:d3:7c:68:8c:1c:5c:28:01:ec:bb:7a:76:df:b5:e2:
         6f:05:b2:45:c6:6f:d3:4d:7a:3f:b5:d0:f5:91:ea:a6:75:a9:
         44:75:94:2c:2b:23:d3:d0:38:9d:c9:9e:99:7b:a1:31:b2:57:
         4a:89:26:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:24:24 2026 by rpki-client