Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
File:                     AS32475.roa (raw, json)
Hash identifier:          c2ZEEUeMCSqH/MfsI7Mv9KqlE5F2a+qanq7e5xWPQ+U=
Subject key identifier:   69:A6:4A:F6:37:30:DA:C9:52:AA:81:45:60:90:42:04:C6:F4:53:85
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       197F89FF97478AEE038D6B0864D07027CCC4DCE5
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa
Signing time:             Thu 05 Mar 2026 20:35:53 +0000
ROA not before:           Thu 05 Mar 2026 20:30:53 +0000
ROA not after:            Thu 04 Mar 2027 20:35:53 +0000
asID:                     32475
IP address blocks:        140.99.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 17:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7f:89:ff:97:47:8a:ee:03:8d:6b:08:64:d0:70:27:cc:c4:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar  5 20:30:53 2026 GMT
            Not After : Mar  4 20:35:53 2027 GMT
        Subject: CN=69A64AF63730DAC952AA814560904204C6F45385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b0:4f:a3:aa:17:b8:80:6a:fe:2b:e8:53:5f:
                    86:26:17:38:e1:d7:17:ca:cc:dd:be:90:44:3f:79:
                    09:ca:28:75:9b:27:1a:d3:fb:dd:d8:34:38:88:14:
                    8c:f4:22:83:e4:81:53:15:9b:d7:3a:ea:63:12:fc:
                    fd:35:57:86:92:bd:e8:4d:d6:f4:e4:9e:42:c7:3f:
                    dd:be:6b:5d:2d:bc:f3:c7:33:98:0a:23:1b:88:cf:
                    e2:c5:ec:f4:1c:cc:6b:5e:04:dd:99:25:65:84:c0:
                    f6:3f:b2:96:67:39:ed:5c:e3:d9:18:b0:41:dd:0c:
                    77:f8:08:b7:3b:9a:f9:a5:85:64:23:ca:82:01:b5:
                    b6:94:44:3f:95:67:82:17:bf:72:1c:28:cd:89:ee:
                    be:2a:0b:77:3b:a6:31:93:bd:d4:59:17:6e:b4:3f:
                    8b:29:c3:63:80:b1:20:37:f7:8f:c4:fc:a1:c9:a9:
                    4b:a5:20:09:37:8e:be:e7:98:53:d5:de:61:95:2d:
                    ef:c0:6c:2d:cf:b5:ed:44:2f:9f:0e:30:44:3e:16:
                    5f:c9:9d:dd:e0:38:1e:a6:17:23:ae:8e:2f:a0:a2:
                    33:9d:eb:92:8d:d1:e8:19:53:b0:83:b4:24:11:59:
                    58:cc:6d:46:23:cc:60:3e:f5:69:5d:02:c6:e7:ea:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A6:4A:F6:37:30:DA:C9:52:AA:81:45:60:90:42:04:C6:F4:53:85
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS32475.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:98:b8:c9:5b:be:f3:19:8f:ee:41:35:b1:e0:cb:7b:3c:e4:
         08:15:1c:12:b8:79:97:e6:f1:55:f0:a9:a5:af:46:dc:f4:4d:
         83:f0:01:4a:c9:73:9e:c5:2b:0f:63:bf:00:e1:f1:f0:41:97:
         7c:d1:91:88:88:02:fe:2d:42:b0:fc:41:0c:e3:d0:e5:be:d6:
         2c:f2:43:0f:83:5c:f4:45:40:4d:3b:83:13:e8:3a:14:4a:b9:
         8a:aa:05:4e:34:1b:ca:38:11:12:30:32:5e:a0:c0:f9:51:ce:
         9d:1f:11:75:c7:7e:c4:bb:1a:a4:6d:7a:5b:d4:ed:72:8f:41:
         37:7e:35:3c:0b:0b:e9:24:ab:d8:a8:4e:ff:80:81:03:17:03:
         81:f3:3d:9b:2a:b7:d6:23:a8:6c:50:05:89:fb:db:14:b0:a9:
         25:9e:ac:6c:9b:68:a0:d3:90:eb:9a:72:f2:f8:6a:1c:51:0f:
         62:40:08:51:0e:ab:3b:f6:8a:71:dc:12:18:56:24:ac:fb:a9:
         5d:b4:9b:04:89:44:7d:29:e5:af:b0:8a:e8:57:9b:a4:63:66:
         8f:eb:f1:c3:98:6b:3e:6b:c1:e1:74:21:94:d9:fc:db:4a:14:
         cd:ed:7c:19:3d:fe:4b:bd:0e:20:8d:5f:63:c7:f9:c5:2f:27:
         6e:b9:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:00:22 2026 by rpki-client