Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234332e302f32342d3234203d3e203536363535.roa
File:                     32332e38382e3234332e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          +SYaKtRjM68gFxqe9TIPtBPUUZajmHMdeA0qG1ryafI=
Subject key identifier:   3C:A5:88:02:B1:B7:5B:EF:8D:77:AE:5E:C4:B1:02:8B:FC:FC:E8:2F
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6EABB5FD796A8B1BA9B97EE965E43CEA0DD05F64
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234332e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:36:59 +0000
ROA not before:           Fri 23 Oct 2026 12:31:59 +0000
ROA not after:            Fri 22 Oct 2027 12:36:59 +0000
asID:                     56655
IP address blocks:        23.88.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ab:b5:fd:79:6a:8b:1b:a9:b9:7e:e9:65:e4:3c:ea:0d:d0:5f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 23 12:31:59 2026 GMT
            Not After : Oct 22 12:36:59 2027 GMT
        Subject: CN=3CA58802B1B75BEF8D77AE5EC4B1028BFCFCE82F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:88:72:16:09:4c:65:81:5d:9e:4d:79:46:56:
                    e9:93:ac:9f:e7:f0:e9:1c:9d:88:c9:78:9d:79:8a:
                    37:c9:65:5c:f7:0f:09:09:90:f6:f5:fe:98:79:a3:
                    93:36:fe:2f:20:d0:eb:73:9a:2f:1b:40:c2:37:ed:
                    94:a2:0d:87:0b:5f:a2:4a:d3:39:ae:f8:43:76:d4:
                    0f:88:87:38:31:c4:c1:fd:72:b3:28:e6:1f:82:8e:
                    0a:af:48:ff:e9:72:ee:1c:fd:be:78:c2:7f:a9:aa:
                    a6:56:d9:00:3f:e0:6a:50:67:90:a4:b1:eb:3c:b0:
                    f8:40:e6:30:48:d7:76:a3:a3:82:d9:92:61:b7:b9:
                    3e:86:29:28:7e:db:b1:65:ba:99:01:42:aa:c1:90:
                    83:ce:98:d7:1f:bc:a3:96:51:96:17:28:c3:a8:f9:
                    13:0d:8f:56:30:39:12:32:64:45:d3:de:37:5a:65:
                    ad:67:ff:f9:df:45:33:73:df:38:da:7f:91:12:cc:
                    f4:21:c5:7d:fb:7f:f1:18:40:17:fd:9e:25:9a:a2:
                    96:b3:a1:9c:9e:a2:eb:79:05:70:7a:27:84:c8:d1:
                    06:a0:e5:8f:9b:4c:8c:05:7e:6f:37:e1:32:d9:2f:
                    42:5c:7a:a7:c2:de:64:34:c7:aa:a0:24:2b:93:b1:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A5:88:02:B1:B7:5B:EF:8D:77:AE:5E:C4:B1:02:8B:FC:FC:E8:2F
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234332e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d4:3c:45:8b:93:12:a4:69:57:3c:52:51:0d:1c:b2:4e:88:
         33:76:44:a0:20:d8:00:d0:2d:b3:11:4f:d7:f1:8f:1e:f9:3a:
         e2:af:d1:bd:8e:ea:42:21:54:51:36:22:a9:97:84:5f:89:87:
         5b:4d:e1:e2:3d:78:7e:02:9f:5b:3e:4f:6a:d2:a8:64:65:ec:
         c3:24:93:37:eb:b2:d5:6d:d5:42:f6:15:a8:69:4e:38:66:5b:
         19:0a:b4:d2:4c:2e:f9:ec:b6:1c:c7:9b:12:69:fb:a2:d0:fc:
         aa:78:1f:ce:55:d3:ba:b0:72:e7:c8:05:2a:a1:21:8b:e2:4d:
         3b:a6:64:db:f2:76:27:31:0f:c4:91:16:e7:44:5c:2c:54:eb:
         29:ab:93:78:ed:69:14:07:1e:b2:ec:66:f9:df:1e:60:28:00:
         c8:1e:01:d8:26:0e:53:86:48:e8:3c:6e:17:34:76:86:87:49:
         e2:be:f5:48:bb:de:cb:79:8d:eb:80:56:87:dd:5c:20:50:c5:
         ce:ee:27:da:96:c1:d3:c5:1b:86:0f:44:21:b0:db:b8:c8:e9:
         a2:b7:db:05:18:a4:f9:e2:dd:05:7a:66:e8:8a:ec:7d:9d:ba:
         7f:4a:bc:fb:9e:41:77:8a:09:59:43:c6:98:fc:79:73:89:55:
         c0:3a:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:56:34 2026 by rpki-client