Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/32332e3136342e3130302e302f32342d3234203d3e203331383036.roa
File:                     32332e3136342e3130302e302f32342d3234203d3e203331383036.roa (raw, json)
Hash identifier:          uTg19NRmKfLk2xIymbQFNNCHGcPPhWlNsck2cZnHIGU=
Subject key identifier:   51:C4:52:E0:2C:73:32:5B:FA:CE:7B:80:F4:9B:43:84:08:17:46:A6
Certificate issuer:       /CN=a4224334a67661b560b1bf887aa52992d88047722b60a37258
Certificate serial:       78D5BC95E0B020D07AAA62ED1D412B7830ADF107
Authority key identifier: CD:9F:B9:FA:70:5E:29:28:B7:35:AE:A7:04:A2:C5:CD:11:09:BC:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/a4224334a67661b560b1bf887aa52992d88047722b60a37258.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/32332e3136342e3130302e302f32342d3234203d3e203331383036.roa
Signing time:             Fri 02 Oct 2026 23:14:15 +0000
ROA not before:           Fri 02 Oct 2026 23:09:15 +0000
ROA not after:            Fri 01 Oct 2027 23:14:15 +0000
asID:                     31806
IP address blocks:        23.164.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/CD9FB9FA705E2928B735AEA704A2C5CD1109BC8F.crl
                          rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/CD9FB9FA705E2928B735AEA704A2C5CD1109BC8F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/a4224334a67661b560b1bf887aa52992d88047722b60a37258.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/0f298a26-8e24-4e83-ad8e-abcaa660d2ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/0f298a26-8e24-4e83-ad8e-abcaa660d2ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 00:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d5:bc:95:e0:b0:20:d0:7a:aa:62:ed:1d:41:2b:78:30:ad:f1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4224334a67661b560b1bf887aa52992d88047722b60a37258
        Validity
            Not Before: Oct  2 23:09:15 2026 GMT
            Not After : Oct  1 23:14:15 2027 GMT
        Subject: CN=51C452E02C73325BFACE7B80F49B4384081746A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:52:e5:aa:b6:c0:61:31:69:0e:b1:8e:0f:
                    0d:8c:7d:e6:7e:70:9d:db:9e:e5:5c:6c:1b:b4:3b:
                    66:61:4f:f0:8d:55:ce:00:12:87:85:1d:82:c0:4e:
                    a4:0d:4e:1e:42:8a:78:2b:9e:22:fc:00:b1:93:67:
                    f8:2a:30:f4:a2:19:d7:e1:da:9f:2a:19:52:f9:63:
                    72:e2:06:c9:b8:0f:22:76:be:6d:48:c6:b1:0e:7e:
                    89:0d:f9:96:af:3c:14:27:aa:21:4d:20:92:10:d3:
                    5b:9f:4c:8b:2b:02:2e:c4:d3:de:8f:44:24:af:95:
                    be:c7:64:1c:2e:e1:0d:87:84:4f:70:11:8d:49:0b:
                    ec:1b:3e:b2:a6:58:38:3c:05:d2:a9:7a:cd:53:f9:
                    b2:12:00:29:ad:bc:9d:70:6d:44:db:4d:a0:6b:83:
                    af:29:4f:bc:6e:8b:99:f5:21:f6:e9:e8:1b:ae:bb:
                    2b:f6:c7:ad:35:3c:c0:82:f7:30:20:55:aa:9d:ad:
                    62:3f:2c:be:ea:40:e5:6e:62:39:e1:47:f8:d9:5b:
                    67:71:f4:bc:86:77:34:83:a5:6a:85:3f:82:ec:55:
                    e2:8c:de:70:ad:32:c0:ab:c3:c2:a8:84:26:1f:69:
                    1c:ef:29:ab:6e:1a:ad:1f:d7:29:4e:1b:6d:1e:67:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C4:52:E0:2C:73:32:5B:FA:CE:7B:80:F4:9B:43:84:08:17:46:A6
            X509v3 Authority Key Identifier:
                keyid:CD:9F:B9:FA:70:5E:29:28:B7:35:AE:A7:04:A2:C5:CD:11:09:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/CD9FB9FA705E2928B735AEA704A2C5CD1109BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0f298a26-8e24-4e83-ad8e-abcaa660d2ae/a4224334a67661b560b1bf887aa52992d88047722b60a37258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/355a72b9f47845dda9e51f8ce66d24d6/0/32332e3136342e3130302e302f32342d3234203d3e203331383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:8a:b5:54:cb:0f:d4:97:c8:89:28:c5:04:22:9d:f7:85:
         e4:9b:47:b2:af:bf:07:e6:66:d0:7b:52:4f:1d:34:29:bb:a8:
         ee:70:d6:2b:8f:3a:00:ab:97:4a:df:6c:9f:d4:e9:d9:39:61:
         7d:b0:42:33:da:f4:d9:36:67:05:c4:55:c7:53:21:d7:45:72:
         24:33:91:84:50:1b:80:9e:25:39:6f:0d:1c:90:b8:f2:15:4c:
         ea:07:74:51:a7:72:f8:c1:77:20:cf:96:bc:99:a6:9a:2d:a1:
         dc:c8:67:cd:b7:cd:34:bc:91:02:b2:5d:ad:ae:a1:f1:95:a3:
         d4:e0:4a:28:39:14:6a:cf:ad:3e:8e:b0:eb:51:e9:17:57:50:
         bd:74:c8:77:02:37:4c:b1:ec:7d:51:f4:19:f7:b3:82:74:87:
         66:dd:8b:5e:19:c0:a5:72:90:97:38:51:2a:c9:a6:70:b7:0d:
         e2:b8:58:44:b2:69:e4:db:49:d2:c2:f4:ae:cd:f0:f1:06:32:
         2a:48:72:ab:2e:5c:11:cd:83:ec:64:89:7f:d7:72:ab:35:25:
         f9:c7:84:ff:7d:8a:6e:35:9f:f4:54:f3:1a:7a:23:2a:5e:1d:
         32:53:81:56:e4:51:97:47:ff:a8:87:e0:12:22:e8:35:d4:70:
         18:dc:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:24 2026 by rpki-client