Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/32332e3139302e3231362e302f32342d3234203d3e203137323930.roa
File:                     32332e3139302e3231362e302f32342d3234203d3e203137323930.roa (raw, json)
Hash identifier:          OU5XPByLVF3VlVlnpYBrtK06f7AFVcPXZIO9J5yXkEY=
Subject key identifier:   6D:22:2F:F2:CB:31:91:1F:E3:BD:D5:46:E3:36:03:64:27:18:16:D1
Certificate issuer:       /CN=8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464
Certificate serial:       1267A0ADCB435B3CF239398BC5DAFFA1AF3D1A9F
Authority key identifier: 32:56:29:5B:AE:B7:21:74:BD:12:23:0A:9B:59:25:1E:78:AC:EE:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/32332e3139302e3231362e302f32342d3234203d3e203137323930.roa
Signing time:             Mon 27 Apr 2026 22:50:08 +0000
ROA not before:           Mon 27 Apr 2026 22:45:08 +0000
ROA not after:            Mon 26 Apr 2027 22:50:08 +0000
asID:                     17290
IP address blocks:        23.190.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/3256295BAEB72174BD12230A9B59251E78ACEE2C.crl
                          rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/3256295BAEB72174BD12230A9B59251E78ACEE2C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/6d4f8857-fb8e-408f-a909-48a6df4a5a51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/6d4f8857-fb8e-408f-a909-48a6df4a5a51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 May 2026 02:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:67:a0:ad:cb:43:5b:3c:f2:39:39:8b:c5:da:ff:a1:af:3d:1a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464
        Validity
            Not Before: Apr 27 22:45:08 2026 GMT
            Not After : Apr 26 22:50:08 2027 GMT
        Subject: CN=6D222FF2CB31911FE3BDD546E3360364271816D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:7a:48:75:dd:94:2c:b5:df:0f:70:26:79:
                    6d:7e:d9:c8:95:7d:63:0a:07:c3:2d:44:22:ab:c1:
                    3d:39:21:bf:98:fb:85:fc:7f:35:e6:8f:a4:e3:af:
                    2f:3c:3e:03:59:0c:36:71:44:ed:cc:03:2a:6b:17:
                    8a:9e:c6:48:3c:2a:c1:a9:ee:90:c8:01:e9:3c:a9:
                    07:b1:d1:e1:a3:11:33:2b:fc:ab:3e:de:a6:a0:67:
                    24:f8:d1:49:9e:60:d6:c0:b2:51:19:a2:98:07:3d:
                    ef:2c:e7:7b:e8:59:c2:e9:46:1b:c6:6b:62:f4:71:
                    b5:c0:f9:54:51:7e:5c:da:e9:b2:43:1f:cb:99:f8:
                    61:c6:ef:25:47:88:45:4a:33:c0:57:ab:23:2d:04:
                    20:06:21:01:5e:5c:ba:e8:24:66:7a:91:50:70:85:
                    90:b3:d9:ea:ca:d1:d4:71:e3:b4:e3:2b:69:a4:31:
                    e1:24:18:33:d1:35:fd:d5:62:2c:08:01:48:be:9c:
                    74:89:34:ba:ae:fc:e2:5e:02:17:f3:31:a4:24:d3:
                    ec:49:18:8a:0b:fd:4d:e5:4f:cf:5c:a2:ab:35:9e:
                    a4:e3:f0:bf:3f:60:d9:88:2e:3b:7d:e1:a3:e6:83:
                    1a:60:35:3b:ff:8b:2d:5c:e7:13:61:c7:8a:53:2a:
                    b7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:22:2F:F2:CB:31:91:1F:E3:BD:D5:46:E3:36:03:64:27:18:16:D1
            X509v3 Authority Key Identifier:
                keyid:32:56:29:5B:AE:B7:21:74:BD:12:23:0A:9B:59:25:1E:78:AC:EE:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/3256295BAEB72174BD12230A9B59251E78ACEE2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6d4f8857-fb8e-408f-a909-48a6df4a5a51/8d36ad9b3dcd1179951b64c2023b9f593c3a5770e1e5c42464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/545b6c8b26d24c9b840cd045aadadc1a/0/32332e3139302e3231362e302f32342d3234203d3e203137323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:06:3e:e6:6e:04:97:de:37:e4:46:5a:0c:85:76:83:ef:
         0f:d7:d4:98:90:a2:b4:36:83:86:4a:ad:5f:21:94:96:59:3a:
         c6:05:a4:ac:f3:98:13:c3:29:b6:64:b4:61:07:b5:cb:df:9b:
         85:c1:06:cc:e3:f4:cd:c6:3e:e9:65:8b:a3:5b:d6:97:97:80:
         74:0d:c7:d4:b5:af:f3:b2:64:f8:0a:0b:4e:af:8b:de:c5:6d:
         ca:40:25:a9:5f:73:15:cd:94:72:39:07:8b:2c:79:68:0c:19:
         d1:cb:93:65:73:ff:5b:e2:0c:09:64:1e:a9:de:5e:bd:bc:11:
         03:f8:28:3a:2e:45:ef:0e:9f:18:bc:a1:31:a1:4f:74:a8:cf:
         8a:1a:18:45:de:90:0a:d7:03:66:67:0c:1c:ff:5a:66:c1:b7:
         01:55:9d:70:53:39:46:8a:97:1a:c2:36:3e:57:4b:2f:04:1e:
         88:5c:d3:7f:d6:8c:7e:c0:64:e6:b8:84:ba:d3:ea:fc:e1:fc:
         ca:8d:a7:76:d4:3e:84:2a:ca:6a:a9:09:d1:fc:50:43:b7:28:
         8a:b0:77:3f:58:c9:d2:aa:39:56:e4:df:0e:fa:41:4a:f2:4f:
         fc:dd:83:9d:85:87:c4:fd:33:c8:39:e2:ab:06:af:d4:85:fc:
         4a:81:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:28:57 2026 by rpki-client