Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/32332e3133322e39322e302f32342d3234203d3e20333937373330.roa
File:                     32332e3133322e39322e302f32342d3234203d3e20333937373330.roa (raw, json)
Hash identifier:          YKj9uKZh869MEKFeEwp7y2cjU85CHmyu4GunPUfGS54=
Subject key identifier:   09:AA:97:D0:73:CE:1F:DC:F3:CD:FD:C7:29:E8:9C:D8:AE:FA:C4:22
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       7A7302DD191DC9919707DF04CCFACF6485B661A0
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/32332e3133322e39322e302f32342d3234203d3e20333937373330.roa
Signing time:             Sun 13 Jul 2025 23:32:09 +0000
ROA not before:           Sun 13 Jul 2025 23:27:09 +0000
ROA not after:            Sun 12 Jul 2026 23:32:09 +0000
asID:                     397730
IP address blocks:        23.132.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 13:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:73:02:dd:19:1d:c9:91:97:07:df:04:cc:fa:cf:64:85:b6:61:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Jul 13 23:27:09 2025 GMT
            Not After : Jul 12 23:32:09 2026 GMT
        Subject: CN=09AA97D073CE1FDCF3CDFDC729E89CD8AEFAC422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:eb:d5:46:07:75:73:ca:72:d8:4a:03:48:
                    04:0f:67:91:66:6c:8e:08:d4:bc:f7:ed:87:26:71:
                    0c:fc:35:20:52:03:2c:6b:8c:52:ea:4a:c3:6e:56:
                    5b:fd:d8:db:5b:9f:cb:11:be:9a:ab:75:f5:23:e6:
                    5f:a3:3c:99:26:2c:ee:a6:fb:8c:9d:74:d7:68:47:
                    76:d0:f0:30:d8:9c:45:bd:a2:b6:fa:da:2c:c2:68:
                    ff:98:18:d0:6b:ff:f4:ba:e0:ff:fd:ad:79:05:3d:
                    cc:d3:ea:65:49:20:f0:0d:c4:9c:5c:a4:3e:0e:f6:
                    73:c5:b8:8e:bd:1b:ac:53:65:2f:93:8c:34:73:f5:
                    62:ee:d1:b9:59:6b:9a:fa:34:04:43:e8:1b:07:16:
                    d6:cc:c7:d3:cd:bd:b6:2f:ac:14:ea:35:de:66:f6:
                    2b:2d:09:e2:41:5b:86:e0:8a:71:58:b0:85:67:51:
                    7d:fc:ba:10:a9:9c:fb:9d:ae:dc:87:f8:b8:59:6e:
                    5e:7a:ac:e5:ec:ce:da:b3:ef:26:ea:6e:8b:b3:34:
                    35:b2:82:dd:55:0f:5d:b1:30:7d:cb:30:76:81:c9:
                    fe:14:93:13:5b:43:64:9d:84:79:1d:16:57:bf:9c:
                    28:cd:2d:99:8e:e1:d8:2b:6a:d4:71:36:c5:ae:1a:
                    f9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AA:97:D0:73:CE:1F:DC:F3:CD:FD:C7:29:E8:9C:D8:AE:FA:C4:22
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/32332e3133322e39322e302f32342d3234203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:4a:ea:65:85:a7:4f:ed:35:95:36:e3:c7:a4:28:b1:ef:ef:
         38:65:ed:b4:81:b3:7f:35:24:6c:30:73:af:b8:50:b7:90:e3:
         bc:c2:6b:e7:76:68:7e:d5:e8:1b:63:73:38:38:5a:8d:ca:17:
         d4:3c:66:6f:0f:be:2c:3b:e7:91:c0:d8:2e:09:65:d0:ed:5e:
         54:6c:aa:e9:4e:9d:44:b8:f0:54:f5:63:cf:ff:cd:09:45:a7:
         63:9f:2c:86:dd:2c:15:e0:51:96:1e:0e:c1:ed:22:79:1a:39:
         65:35:69:98:1b:52:a3:79:69:fb:11:72:19:5f:bf:38:18:d7:
         c3:05:27:fd:a8:86:95:1e:b7:83:9b:ce:8a:3b:58:38:19:41:
         a3:3e:58:ef:37:be:55:33:8b:58:05:cc:11:5c:c5:f6:ce:9b:
         9b:e6:c2:a4:67:fc:8d:fe:1f:4a:28:1e:d0:5d:a2:5f:37:f9:
         c3:4b:81:3f:c5:86:15:c0:1f:fe:8d:62:7b:3f:9d:3c:b1:59:
         7e:46:33:2c:1a:8d:0c:ca:bd:99:c3:76:9e:0b:3d:41:be:15:
         3d:48:7d:71:c7:13:9e:f1:df:32:22:bb:d0:26:f7:60:35:91:
         81:c8:48:c7:7c:7a:8e:17:e2:90:8c:52:47:6b:5b:a2:41:74:
         9e:0c:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:29:01 2025 by rpki-client