Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa
File:                     AS32267.roa (raw, json)
Hash identifier:          /WjrRrR2LDuyMLivCeyM0iuqZfNYlqUyGO2w4iXYlrE=
Subject key identifier:   FF:DE:E6:94:EE:3A:7C:D9:AB:EE:58:83:92:B7:7B:E9:BF:17:4E:F5
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4015AF1164D154E6B86D85033A6D5C55F7138298
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa
Signing time:             Wed 23 Sep 2026 19:36:20 +0000
ROA not before:           Wed 23 Sep 2026 19:31:20 +0000
ROA not after:            Wed 22 Sep 2027 19:36:20 +0000
asID:                     32267
IP address blocks:        104.234.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 14:11:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:15:af:11:64:d1:54:e6:b8:6d:85:03:3a:6d:5c:55:f7:13:82:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 23 19:31:20 2026 GMT
            Not After : Sep 22 19:36:20 2027 GMT
        Subject: CN=FFDEE694EE3A7CD9ABEE588392B77BE9BF174EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:69:5b:e6:da:5c:e5:22:7f:9a:07:59:31:
                    1b:fc:1f:97:85:ff:d5:f6:73:78:7b:ff:30:33:8a:
                    f4:2d:f5:db:8c:06:1f:a0:b7:28:7d:16:07:ac:67:
                    9c:4e:dd:6b:6e:f4:82:ff:26:8d:c3:16:26:32:68:
                    b6:43:94:89:d6:1b:4f:89:9e:1f:9a:56:ab:d7:e1:
                    b4:b5:dd:7e:c9:9f:e5:f4:c7:b1:7f:ba:25:9f:be:
                    12:cb:bb:40:00:c7:57:78:4a:7c:93:a4:0b:07:9b:
                    42:af:54:2a:2c:75:d3:4f:4d:d2:a9:f3:c1:f7:41:
                    39:b2:f5:7e:fe:2e:8d:61:76:b0:8b:1f:1f:e5:2c:
                    fe:a9:50:e7:b8:05:91:3d:85:e2:8b:02:34:cf:17:
                    ed:4d:20:9a:c6:a8:38:b4:de:fd:20:8e:81:75:fe:
                    4b:91:a8:de:e9:51:15:bb:d3:73:0d:8f:f5:18:17:
                    78:5c:4b:01:68:a1:8c:3b:cd:dd:a6:dc:b9:9b:59:
                    02:80:5f:2b:cc:56:6f:9d:da:9c:ef:7b:50:a0:ce:
                    37:3a:fa:be:83:12:19:3d:2d:c5:f0:e5:50:1d:3b:
                    b4:95:ef:a5:32:3a:31:5a:6a:f0:fc:83:11:60:74:
                    f0:35:b5:6f:be:5b:42:00:5e:68:ff:90:94:f7:c4:
                    a2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DE:E6:94:EE:3A:7C:D9:AB:EE:58:83:92:B7:7B:E9:BF:17:4E:F5
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:72:bb:4c:7b:53:0a:18:cb:5e:f5:79:88:b9:02:f8:bc:83:
         f9:36:c8:a8:7c:dc:c2:c1:90:a4:06:d3:d0:97:4b:ae:8d:57:
         59:50:77:9d:ac:36:be:33:1f:d9:a8:b6:97:f2:f8:c4:7a:b0:
         e4:52:65:a2:c4:fc:97:16:89:51:a9:f0:c8:a4:37:b7:92:b8:
         af:36:aa:9d:83:dd:82:44:1b:3d:4c:03:66:13:b3:d4:7c:93:
         36:0d:70:b8:37:be:2b:f3:f9:3f:e6:6b:f1:73:84:2c:01:4e:
         cb:b4:e7:dd:23:18:0d:b9:41:19:60:07:28:36:76:be:6c:24:
         56:fd:09:36:c1:e5:78:4c:1c:dd:fa:24:7b:f3:09:18:e1:c5:
         09:7f:b4:17:bb:3a:d6:2a:35:f5:28:37:6b:45:7e:ee:56:b5:
         9c:5a:de:0c:e4:2d:a1:42:b2:87:24:94:fe:32:24:2f:93:06:
         e3:a2:d5:a5:8b:e4:6b:2b:20:77:50:e4:e4:25:6b:69:46:f7:
         92:40:54:e7:af:b7:eb:b9:df:a3:70:10:18:71:02:ff:48:f3:
         9e:1b:83:3a:46:0c:72:3a:f5:29:69:b2:7d:b9:88:02:fc:b6:
         a9:82:15:d4:0d:a5:3c:7a:2d:24:a7:de:ab:69:21:7e:ed:a4:
         3e:93:f7:dc
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUQBWvEWTRVOa4bYUDOm1cVfcTgpgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwOTIzMTkzMTIwWhcNMjcwOTIyMTkzNjIw
WjAzMTEwLwYDVQQDEyhGRkRFRTY5NEVFM0E3Q0Q5QUJFRTU4ODM5MkI3N0JFOUJG
MTc0RUY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrdpW+baXOUi
f5oHWTEb/B+Xhf/V9nN4e/8wM4r0LfXbjAYfoLcofRYHrGecTt1rbvSC/yaNwxYm
Mmi2Q5SJ1htPiZ4fmlar1+G0td1+yZ/l9Mexf7oln74Sy7tAAMdXeEp8k6QLB5tC
r1QqLHXTT03SqfPB90E5svV+/i6NYXawix8f5Sz+qVDnuAWRPYXiiwI0zxftTSCa
xqg4tN79II6Bdf5Lkaje6VEVu9NzDY/1GBd4XEsBaKGMO83dpty5m1kCgF8rzFZv
ndqc73tQoM43Ovq+gxIZPS3F8OVQHTu0le+lMjoxWmrw/IMRYHTwNbVvvltCAF5o
/5CU98SiGQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFP/e5pTuOnzZq+5Yg5K3e+m/
F071MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzMyMjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOomMA0GCSqGSIb3DQEBCwUAA4IB
AQCZcrtMe1MKGMte9XmIuQL4vIP5NsiofNzCwZCkBtPQl0uujVdZUHedrDa+Mx/Z
qLaX8vjEerDkUmWixPyXFolRqfDIpDe3krivNqqdg92CRBs9TANmE7PUfJM2DXC4
N74r8/k/5mvxc4QsAU7LtOfdIxgNuUEZYAcoNna+bCRW/Qk2weV4TBzd+iR78wkY
4cUJf7QXuzrWKjX1KDdrRX7uVrWcWt4M5C2hQrKHJJT+MiQvkwbjotWli+RrKyB3
UOTkJWtpRveSQFTnr7frud+jcBAYcQL/SPOeG4M6RgxyOvUpabJ9uYgC/LapghXU
DaU8ei0kp96raSF+7aQ+k/fc
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:58:35 2026 by rpki-client