Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS23532.roa
File:                     AS23532.roa (raw, json)
Hash identifier:          fEcmUw5WPBoLuc/+LMVU9SGdzlO2V60FHRFPrBTD2Ac=
Subject key identifier:   7E:35:2B:79:BB:70:F6:8F:E7:F2:BB:6B:31:DF:66:31:5A:83:44:13
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       293EB396987769E4567817964A0473E263EE02D5
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS23532.roa
Signing time:             Wed 06 May 2026 07:17:19 +0000
ROA not before:           Wed 06 May 2026 07:12:19 +0000
ROA not after:            Wed 05 May 2027 07:17:19 +0000
asID:                     23532
IP address blocks:        207.180.30.0/24 maxlen: 24
                          207.180.56.0/24 maxlen: 24
                          207.180.59.0/24 maxlen: 24
                          207.180.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:3e:b3:96:98:77:69:e4:56:78:17:96:4a:04:73:e2:63:ee:02:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:19 2026 GMT
            Not After : May  5 07:17:19 2027 GMT
        Subject: CN=7E352B79BB70F68FE7F2BB6B31DF66315A834413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:ca:75:24:da:40:bc:ac:21:1d:19:f2:c3:
                    f6:fa:02:07:b7:3a:4e:a2:b6:f8:28:e4:ec:f1:a1:
                    c0:51:5f:5a:4d:24:f1:1e:28:a7:ba:69:ed:39:d2:
                    63:13:fb:b0:f1:62:30:3f:08:00:c4:3c:3f:82:49:
                    7f:42:37:68:11:35:4a:f1:15:fc:0d:73:6f:aa:4a:
                    82:26:09:34:1b:e2:c6:cc:cf:ae:17:75:29:f4:f3:
                    c9:13:31:9d:3e:ed:c1:38:c9:a3:01:25:d7:4a:b5:
                    2e:49:c4:31:6b:78:55:4d:a0:5f:de:dc:b7:5e:75:
                    2b:0b:16:ea:dc:e4:c4:2a:e2:7e:c6:99:07:6a:de:
                    a2:4e:58:11:f5:54:f0:e7:d9:6f:5d:11:7b:48:84:
                    b2:8d:28:db:ee:c8:e1:b2:51:d8:07:93:ae:2c:0f:
                    61:19:7b:c4:ff:c4:18:34:58:c1:0c:b8:92:91:1b:
                    9e:9c:39:cc:eb:70:01:c7:22:45:99:65:68:a2:6c:
                    46:b1:bc:9e:e9:48:a9:d8:9d:50:8c:db:1b:52:a9:
                    9d:8f:09:35:ae:30:b9:37:bf:95:e5:28:24:75:93:
                    6b:e0:53:19:12:e1:3f:47:ea:de:02:10:2a:59:83:
                    cb:29:16:8b:46:ef:3f:f0:ba:3d:42:74:7d:57:20:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:35:2B:79:BB:70:F6:8F:E7:F2:BB:6B:31:DF:66:31:5A:83:44:13
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS23532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24
                  207.180.56.0/24
                  207.180.59.0/24
                  207.180.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:81:9e:5b:8a:0a:2e:f2:b7:b8:c9:77:83:d2:40:62:ab:fc:
         1b:74:8b:fa:85:68:49:07:63:3b:c7:2a:2f:24:c7:f1:63:de:
         28:ae:b4:ec:22:1b:0e:8b:aa:f1:ef:30:5d:ca:23:9c:2d:3a:
         98:7a:8f:aa:f7:71:c4:a1:ad:6a:26:ea:64:50:6c:bc:42:a7:
         72:f9:79:2e:c6:8c:04:a1:ca:16:a7:41:06:80:2f:6b:76:21:
         1e:75:8b:82:97:92:5e:b0:2b:8e:8e:a4:7f:ef:16:10:8f:6d:
         4c:a3:77:43:c6:74:05:6e:46:2c:ae:f5:3e:2c:0c:25:3f:cf:
         6e:b2:4f:cc:9e:ba:f6:6d:bb:35:b1:fd:2d:ca:78:81:b1:8e:
         27:14:1f:d8:6d:2f:b4:a7:8a:f1:2c:2a:e2:e2:b5:61:6d:ea:
         87:37:7e:30:a2:be:6c:27:4c:d5:fd:9c:81:1d:04:4d:0d:c6:
         2a:3a:90:16:a9:61:8b:04:4d:ca:bd:df:ce:8d:49:6a:17:15:
         26:72:7c:1b:b6:dc:03:10:7a:d8:94:df:78:3c:e8:c2:ce:b9:
         31:39:5f:ea:39:ce:ad:c6:81:7c:a7:b9:f4:1b:5b:c9:ed:54:
         b3:f2:0e:a6:a8:ab:33:53:f7:14:0f:07:11:3f:a0:fa:f0:98:
         67:3b:cc:35
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIUKT6zlph3aeRWeBeWSgRz4mPuAtUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE5WhcNMjcwNTA1MDcxNzE5
WjAzMTEwLwYDVQQDEyg3RTM1MkI3OUJCNzBGNjhGRTdGMkJCNkIzMURGNjYzMTVB
ODM0NDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseLKdSTaQLys
IR0Z8sP2+gIHtzpOorb4KOTs8aHAUV9aTSTxHiinumntOdJjE/uw8WIwPwgAxDw/
gkl/QjdoETVK8RX8DXNvqkqCJgk0G+LGzM+uF3Up9PPJEzGdPu3BOMmjASXXSrUu
ScQxa3hVTaBf3ty3XnUrCxbq3OTEKuJ+xpkHat6iTlgR9VTw59lvXRF7SISyjSjb
7sjhslHYB5OuLA9hGXvE/8QYNFjBDLiSkRuenDnM63ABxyJFmWVoomxGsbye6Uip
2J1QjNsbUqmdjwk1rjC5N7+V5SgkdZNr4FMZEuE/R+reAhAqWYPLKRaLRu8/8Lo9
QnR9VyAxqQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFH41K3m7cPaP5/K7azHfZjFa
g0QTMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzIzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG
CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAz7QeAwQAz7Q4AwQAz7Q7AwQAz7Q/
MA0GCSqGSIb3DQEBCwUAA4IBAQBggZ5bigou8re4yXeD0kBiq/wbdIv6hWhJB2M7
xyovJMfxY94orrTsIhsOi6rx7zBdyiOcLTqYeo+q93HEoa1qJupkUGy8Qqdy+Xku
xowEocoWp0EGgC9rdiEedYuCl5JesCuOjqR/7xYQj21Mo3dDxnQFbkYsrvU+LAwl
P89usk/Mnrr2bbs1sf0tyniBsY4nFB/YbS+0p4rxLCri4rVhbeqHN34wor5sJ0zV
/ZyBHQRNDcYqOpAWqWGLBE3Kvd/OjUlqFxUmcnwbttwDEHrYlN94POjCzrkxOV/q
Oc6txoF8p7n0G1vJ7VSz8g6mqKszU/cUDwcRP6D68JhnO8w1
-----END CERTIFICATE-----
Generated at Thu May 7 04:12:35 2026 by rpki-client