Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203134363138.roa
File:                     32332e38382e3232342e302f31392d3139203d3e203134363138.roa (raw, json)
Hash identifier:          W/8XgYdPE3YMKPQ+Eq5SX0ov0e1bhnLL09y0+iFgq18=
Subject key identifier:   A6:D1:53:24:FE:73:8A:AC:E8:FF:02:35:2A:A2:9C:E2:2B:30:21:56
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       322291B5721A6F3813BE0148D5BB56D09E206E21
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203134363138.roa
Signing time:             Mon 15 Sep 2025 14:29:45 +0000
ROA not before:           Mon 15 Sep 2025 14:24:45 +0000
ROA not after:            Mon 14 Sep 2026 14:29:45 +0000
asID:                     14618
IP address blocks:        23.88.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:22:91:b5:72:1a:6f:38:13:be:01:48:d5:bb:56:d0:9e:20:6e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 15 14:24:45 2025 GMT
            Not After : Sep 14 14:29:45 2026 GMT
        Subject: CN=A6D15324FE738AACE8FF02352AA29CE22B302156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:e1:d7:45:4f:1e:e6:b3:eb:bd:30:3a:6c:
                    93:7a:fd:c7:9e:1f:2a:67:0e:70:da:3a:af:22:9d:
                    40:6a:63:53:74:fd:dd:64:d3:91:90:cc:35:2f:42:
                    c5:4a:df:53:76:7b:b6:dc:fd:49:f1:34:15:ba:c0:
                    b8:8c:c9:36:06:78:6e:be:3f:b3:b4:52:4c:94:94:
                    7f:8f:d9:7c:db:f0:34:90:a0:10:8f:3b:5d:04:4b:
                    3a:15:5c:31:83:76:ba:bf:e9:9d:73:34:74:e1:c5:
                    35:49:bc:93:f2:c6:00:06:fd:88:d3:f0:b4:2d:62:
                    65:b6:2a:9b:e6:3d:1b:08:65:d4:3d:86:3c:00:90:
                    7f:f7:63:8b:c7:a6:97:e3:fd:35:5f:f9:3a:66:eb:
                    d8:4d:6f:3c:c2:9f:3f:59:28:d8:2c:c5:d0:e6:3b:
                    08:4a:e7:b8:1d:42:20:ef:cb:17:9b:58:90:82:a4:
                    c8:c0:6a:e3:e9:a3:98:f0:ff:bd:ed:89:de:00:ea:
                    14:6a:01:65:fa:a5:76:16:b1:13:4f:ba:e1:84:93:
                    3c:ee:d3:2e:91:7e:f1:08:2d:00:3d:fa:fa:15:cf:
                    4c:86:48:e2:47:eb:6c:d2:69:f9:c4:f3:1e:2e:19:
                    43:5e:0e:7a:bb:4b:de:d8:5d:23:c4:d1:f2:db:e7:
                    07:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D1:53:24:FE:73:8A:AC:E8:FF:02:35:2A:A2:9C:E2:2B:30:21:56
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         81:bd:19:57:a3:cd:7c:2b:4c:4d:fe:30:82:3d:e8:9b:9e:7d:
         ec:90:80:53:0f:d3:ca:74:5d:87:97:a5:1e:99:c6:79:19:8b:
         1b:6d:27:72:ce:8f:e6:37:72:27:74:eb:5a:ba:c4:d7:0d:7f:
         78:c6:aa:b7:3c:a7:3d:3d:4b:e8:07:8a:95:42:11:87:22:16:
         79:81:30:40:d4:cb:73:3e:ec:e1:47:c6:30:53:c2:43:1f:8e:
         bb:a4:a8:64:86:d7:75:94:d6:39:9f:09:15:4a:ae:c8:92:ce:
         b2:63:48:05:8c:6b:a5:5a:77:fc:0e:21:0b:48:d5:93:a5:a7:
         26:3d:72:33:c0:eb:21:b7:6e:52:cf:fe:eb:8f:cd:5b:53:2b:
         bc:99:ab:53:34:a6:6a:f6:9e:6c:94:22:65:15:ba:42:08:73:
         d6:62:fb:82:45:b4:5d:b2:ab:3e:56:39:90:ae:03:7f:01:e3:
         8f:df:6a:8e:4c:d5:bb:dd:71:2b:31:1a:ab:fd:0e:4f:a3:04:
         87:1a:ba:08:21:b5:d4:90:05:45:97:1e:9e:c6:8a:a4:1c:4e:
         0f:22:92:72:7d:72:3a:7d:6d:76:2a:02:f5:4e:b4:56:66:cc:
         0a:ec:11:eb:7a:19:cd:2f:9f:b8:f5:1c:cd:07:3a:92:78:f1:
         0c:aa:8f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:16:39 2025 by rpki-client