Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/32332e3133332e3137322e302f32342d3234203d3e203131393637.roa
File:                     32332e3133332e3137322e302f32342d3234203d3e203131393637.roa (raw, json)
Hash identifier:          gme8lCQibweiTHuxZ9ktjZO6AAVf3tWjYfHRADRovPM=
Subject key identifier:   36:47:87:4E:48:D7:43:72:96:F5:9B:41:4F:77:FF:03:9A:2E:95:F9
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       3E7647C0AAC8ED381E7F8F5475539C5BBC8F75C0
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/32332e3133332e3137322e302f32342d3234203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     11967
IP address blocks:        23.133.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:76:47:c0:aa:c8:ed:38:1e:7f:8f:54:75:53:9c:5b:bc:8f:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=3647874E48D7437296F59B414F77FF039A2E95F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:f2:c0:40:2c:98:58:66:2b:76:31:06:74:
                    cb:01:97:0a:14:7e:77:51:34:25:59:97:5e:05:48:
                    62:7e:8e:b1:d5:62:a3:cb:35:bd:5a:f8:98:c5:0e:
                    10:c0:40:35:cc:37:c0:f1:4e:cc:6b:3e:45:f5:b4:
                    e1:f0:56:d9:2a:59:d5:1e:60:2a:be:75:3e:73:c9:
                    15:b4:6c:5e:ff:85:c3:6a:2a:d1:fe:2e:28:a4:30:
                    61:9c:83:c8:67:00:2a:3e:8e:06:f6:b8:a7:b2:b8:
                    28:3b:ce:da:dd:1f:9a:bc:44:74:1b:a3:35:b1:22:
                    aa:b5:bb:94:02:ed:ac:2a:82:fe:6a:40:0a:f3:52:
                    10:96:73:d6:82:68:cd:dc:9f:3b:52:6c:34:15:f4:
                    19:b7:4a:40:ad:4b:7b:0c:4d:60:20:5f:af:b1:6a:
                    5a:5a:d1:c4:ae:a9:0d:d7:66:d8:a7:ce:e5:8a:d6:
                    01:20:6f:fe:b1:88:2e:34:2a:dc:0e:e9:80:61:af:
                    a6:9a:9b:4b:1b:6c:07:ce:8f:d3:b7:a0:05:93:6f:
                    ed:53:d6:6e:2b:60:64:04:fc:e7:50:44:4c:20:c1:
                    95:f1:f0:13:3d:1a:6c:ad:bc:6d:c3:8f:cb:66:07:
                    9f:83:51:02:d0:12:45:72:a8:c4:31:70:a1:ac:a0:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:87:4E:48:D7:43:72:96:F5:9B:41:4F:77:FF:03:9A:2E:95:F9
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/32332e3133332e3137322e302f32342d3234203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:1c:69:b7:67:60:86:64:64:15:e6:b7:7f:9f:fa:35:83:01:
         20:a8:e6:02:20:ce:5b:b1:05:b8:c4:da:9d:b2:3d:7f:19:0a:
         24:28:e3:7d:bf:c2:08:2d:96:70:30:0e:10:10:8c:81:73:10:
         6a:d5:54:60:0c:ea:42:00:bf:e8:1f:71:ea:b9:96:cd:10:06:
         2f:44:b2:7b:22:6a:87:00:4e:5b:6c:3e:9c:a0:1f:d6:21:d2:
         1f:ff:62:b7:06:6b:fe:eb:18:fb:90:d2:ae:3a:02:28:f8:de:
         84:7b:93:8d:27:ba:fa:c9:dd:64:2f:3c:92:70:56:86:1e:78:
         97:0a:c1:4b:7b:8b:a6:46:d7:63:1e:fb:cf:30:42:16:31:e1:
         68:0f:bd:f5:75:d3:27:d4:56:56:45:4c:86:0e:f8:05:44:11:
         2b:f5:fb:a2:5d:3a:64:cb:40:d9:53:21:f4:b9:95:bb:3b:6d:
         16:e2:2e:24:c0:0f:65:f4:7f:82:05:08:94:b0:8c:f6:6c:7e:
         97:35:2b:65:06:84:a9:ee:a6:99:6b:44:fa:82:21:dd:81:83:
         a9:fc:86:55:78:ef:09:2d:57:19:84:bf:48:90:aa:30:ee:5e:
         6c:3f:27:cf:94:2a:ec:bb:c3:50:6c:fd:d5:a8:21:1b:92:6b:
         1f:aa:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:50:22 2025 by rpki-client