Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
File:                     32332e3132392e3231322e302f32342d3234203d3e203136393039.roa (raw, json)
Hash identifier:          SHKm+cj5V0dfXifaRtNhWg5R8G9Z7v8AXWhGrQqtTwc=
Subject key identifier:   D1:A3:3D:04:E7:6E:86:AA:C4:73:FE:A9:7C:22:2B:8E:C5:CF:CA:21
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       42060137F9CD21F55D24BC28895CB1975BFBF7D8
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa
Signing time:             Thu 22 Oct 2026 15:06:45 +0000
ROA not before:           Thu 22 Oct 2026 15:01:45 +0000
ROA not after:            Thu 21 Oct 2027 15:06:45 +0000
asID:                     16909
IP address blocks:        23.129.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 09:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:06:01:37:f9:cd:21:f5:5d:24:bc:28:89:5c:b1:97:5b:fb:f7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Oct 22 15:01:45 2026 GMT
            Not After : Oct 21 15:06:45 2027 GMT
        Subject: CN=D1A33D04E76E86AAC473FEA97C222B8EC5CFCA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4f:10:bd:80:cc:74:71:da:0c:f6:52:9d:da:
                    30:88:e2:98:76:03:f0:dc:59:c2:e2:1d:64:5a:6c:
                    de:7b:df:29:a1:a6:ee:5b:3a:5f:89:d0:b5:4b:cd:
                    51:0a:74:e7:20:52:e2:6b:a0:02:1d:80:09:8d:ee:
                    ae:0e:cc:8c:e4:1a:e2:5e:a3:2b:45:ac:1b:e5:10:
                    9c:9f:81:d2:0f:78:3f:78:ca:40:4a:4c:10:77:cf:
                    fd:e3:17:37:49:63:0c:0c:9c:b0:da:ed:f1:7a:0b:
                    1a:36:0d:52:37:f0:c4:96:be:a2:19:1c:1e:76:1b:
                    ee:ab:46:97:9d:ec:6a:f9:01:85:bd:6c:da:c8:f2:
                    ad:77:7d:16:95:ee:38:0b:5b:2f:35:90:9b:76:20:
                    a4:7a:8e:71:62:8b:14:8c:63:5a:9d:b6:d7:84:a7:
                    74:ec:09:6a:c4:19:7a:e5:a3:c2:53:31:ba:a9:29:
                    43:de:0a:fb:cd:92:fb:81:ca:e4:e0:4c:7c:17:80:
                    bb:5b:e0:b0:cc:2a:4c:c3:ef:7c:64:ab:5c:7c:09:
                    23:cf:71:cb:34:cb:08:3c:4a:45:4a:07:e0:fd:a5:
                    68:a0:61:9d:cc:74:90:41:9e:11:aa:e1:a7:79:72:
                    e9:e6:4c:fe:a0:4e:fb:27:e7:f7:2d:69:58:83:12:
                    ca:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:3D:04:E7:6E:86:AA:C4:73:FE:A9:7C:22:2B:8E:C5:CF:CA:21
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/32332e3132392e3231322e302f32342d3234203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:48:1f:93:75:39:c8:70:36:dc:20:99:0d:40:08:ce:49:5b:
         01:ff:e2:76:66:a0:86:f8:40:7b:d5:1f:ad:fa:d0:4a:08:61:
         b6:84:92:44:9c:05:77:b8:3c:b6:1c:d0:0d:74:59:6d:49:d1:
         53:72:f9:db:be:78:4f:38:6f:a0:88:95:99:27:c1:d7:df:3e:
         c3:cc:6b:4b:f7:87:fa:d3:21:c5:e1:c8:fd:63:96:14:f4:6a:
         0a:8e:39:be:23:7c:97:1e:64:c2:1c:18:53:82:d3:36:76:d0:
         4e:ac:bf:d7:1b:74:e3:d3:0c:11:cc:b5:36:f0:e2:d8:5a:9a:
         f9:08:9f:5c:44:de:18:bc:99:47:bc:f7:62:e8:23:3a:ff:41:
         ef:63:0b:4f:30:b0:74:18:d1:8b:c8:b5:ba:9d:e2:75:c2:4d:
         e3:1e:01:48:3e:80:97:90:62:c5:01:44:80:0d:c8:ae:30:55:
         8f:98:9b:ab:f1:16:df:6e:6f:9c:0d:ee:f5:b8:aa:2f:eb:f4:
         4d:e4:1c:47:6b:64:c5:22:90:27:33:7a:93:6e:23:2d:d4:ae:
         39:08:44:bc:2d:65:0c:3e:ea:bc:fd:00:87:0a:4f:76:c4:4e:
         28:b9:e6:d5:ad:1e:29:0f:5c:3d:44:75:f2:58:85:5a:d2:8f:
         cf:7e:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:45:41 2026 by rpki-client