Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234342e302f32342d3234203d3e203536363535.roa
File:                     32332e38382e3234342e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          tck3RodgWHs4uPB0NkYFlL68hEkGkszwJk5jR4geGFU=
Subject key identifier:   D6:B3:45:A5:58:CD:46:30:9A:DD:37:45:22:6A:EF:1A:25:1D:61:49
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0B2B77DFD885C7016182D3D6721A288ECCD2B067
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234342e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:36:59 +0000
ROA not before:           Fri 23 Oct 2026 12:31:59 +0000
ROA not after:            Fri 22 Oct 2027 12:36:59 +0000
asID:                     56655
IP address blocks:        23.88.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 13:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2b:77:df:d8:85:c7:01:61:82:d3:d6:72:1a:28:8e:cc:d2:b0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 23 12:31:59 2026 GMT
            Not After : Oct 22 12:36:59 2027 GMT
        Subject: CN=D6B345A558CD46309ADD3745226AEF1A251D6149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a5:9e:82:31:3e:b9:d0:85:33:58:a7:1c:1f:
                    ad:3a:97:c4:dd:3d:10:30:25:c2:70:fa:8e:46:19:
                    33:ff:2f:76:94:ba:64:5a:b1:0d:c9:f1:5e:cb:68:
                    24:83:e5:a6:fd:71:08:b7:40:c5:34:74:5e:d8:b5:
                    60:c0:36:cc:7c:fc:1b:75:33:f4:98:7b:5c:4d:6f:
                    f8:27:95:29:6e:bb:5e:54:a2:db:67:94:12:3a:4f:
                    bc:a3:a7:78:0c:00:69:b2:8f:fd:5d:85:46:43:52:
                    ac:7a:5c:fa:e1:8e:36:4f:97:e3:a4:49:b3:b7:3b:
                    8e:0b:fc:48:95:a8:81:3d:9c:8d:9c:8b:65:12:9d:
                    b3:6d:69:36:34:be:95:1b:f7:7e:15:67:1d:ab:fb:
                    23:a0:c1:36:5a:f6:ed:0e:75:dc:6a:3a:79:76:df:
                    6b:0a:ac:6e:37:d1:00:6c:6a:c8:d7:a2:6a:5e:34:
                    39:cc:e9:39:fe:1e:a0:e3:27:5d:43:d7:59:3b:fd:
                    72:6f:10:4c:5b:5f:9f:2a:1c:e4:a9:05:e6:96:10:
                    ca:3c:5e:c7:71:8e:d5:af:0c:72:bf:1b:3f:15:25:
                    46:35:84:72:2b:43:40:91:62:36:e0:b5:c3:b1:cc:
                    34:bb:49:7f:75:17:40:c3:61:72:65:c6:28:14:04:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B3:45:A5:58:CD:46:30:9A:DD:37:45:22:6A:EF:1A:25:1D:61:49
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234342e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:54:67:46:63:0a:ba:76:78:2e:d1:5e:43:41:1f:7c:4d:
         27:a4:dd:68:f6:c1:11:86:75:1d:46:22:b8:a4:97:8f:b0:f3:
         a0:0f:5c:e9:3b:3e:02:48:cc:42:55:be:d5:02:03:bd:8a:3e:
         27:75:78:59:29:96:e2:d0:bc:19:40:69:64:3b:9b:ae:de:ad:
         41:ad:95:1b:d8:25:27:1d:7e:58:d5:cd:e9:fb:7a:8b:74:5d:
         49:b4:43:9e:7b:20:df:74:e7:94:78:a6:81:af:4f:0a:f5:c7:
         96:66:49:3e:41:bb:cb:00:80:fb:f7:ee:ee:bf:7b:11:a5:3c:
         12:ba:51:49:a0:d1:e9:c5:22:da:f6:7d:ed:bc:25:d2:8b:fd:
         e5:e0:04:8e:df:df:52:82:86:0f:c0:0f:30:fb:c8:40:c3:d6:
         f3:71:23:12:6c:76:34:cb:d0:a3:18:65:85:32:69:2d:4d:1f:
         8c:fa:de:90:ef:da:cf:ec:68:2a:00:47:9d:cd:72:a1:4b:d4:
         a2:9f:84:38:8c:9d:b0:9b:11:bb:6e:05:ef:7e:8d:93:4e:75:
         3c:8c:bb:15:ce:63:17:49:86:2b:e9:18:6e:30:c7:3d:68:dc:
         8e:83:08:66:a7:0f:10:f7:5a:5f:04:ee:ef:84:26:3b:ba:f4:
         91:49:cf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:47:38 2026 by rpki-client