Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS32613.roa
File:                     AS32613.roa (raw, json)
Hash identifier:          6R6hzl61OkdUOkdRsQq577PgzxQqSZCc1Zyb9c0x/zc=
Subject key identifier:   9C:B8:B4:66:81:09:C0:A4:8A:01:87:8A:A2:A4:82:77:73:13:86:6A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       2A88BF146F29FD0979EF3889E41D5E41109E7759
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS32613.roa
Signing time:             Fri 31 Jul 2026 01:53:53 +0000
ROA not before:           Fri 31 Jul 2026 01:48:53 +0000
ROA not after:            Fri 30 Jul 2027 01:53:53 +0000
asID:                     32613
IP address blocks:        157.254.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 10:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:88:bf:14:6f:29:fd:09:79:ef:38:89:e4:1d:5e:41:10:9e:77:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 31 01:48:53 2026 GMT
            Not After : Jul 30 01:53:53 2027 GMT
        Subject: CN=9CB8B4668109C0A48A01878AA2A482777313866A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:6f:c7:d2:ab:91:6d:df:14:4a:4d:34:af:
                    bd:88:2d:38:a5:9a:41:5c:b9:1c:cc:2f:f4:5d:14:
                    c8:c8:fa:9d:41:e4:cd:05:18:53:b1:69:24:c0:c7:
                    f7:fe:c8:1a:43:37:30:d5:b9:e5:cc:89:d7:84:6b:
                    4a:95:7a:45:fe:a6:0e:11:17:53:11:bd:9b:67:50:
                    c5:f4:ee:ff:f7:cb:d1:31:6b:89:76:25:e9:eb:09:
                    a6:0c:84:ee:23:3d:96:7c:9c:c2:52:75:0e:1b:c2:
                    f0:3f:02:17:3a:ac:ba:d1:6f:83:4e:6e:0a:16:ab:
                    f7:b5:71:d3:28:b0:01:e5:6b:ee:e0:ce:78:86:50:
                    4a:b1:bd:b4:c2:e4:81:0c:29:e3:4a:23:be:f4:1f:
                    6f:6d:b6:0e:da:f2:54:0b:49:99:79:cd:60:4b:05:
                    21:25:fb:75:fd:4f:f9:ab:a0:2d:f2:7a:c6:1b:1e:
                    e3:bf:19:6c:d4:8d:f0:09:b8:b4:e0:d6:0f:56:f4:
                    16:df:cb:f1:08:d5:ad:bb:7b:9c:89:5e:0b:99:e5:
                    52:36:64:98:35:b8:34:86:cb:33:aa:1d:7b:03:af:
                    39:3b:30:cc:3e:8e:89:4a:7c:77:4e:f7:46:6b:40:
                    29:9d:72:23:06:fb:86:aa:af:40:28:67:b6:99:c6:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:B4:66:81:09:C0:A4:8A:01:87:8A:A2:A4:82:77:73:13:86:6A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS32613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:32:40:6f:c3:77:2c:49:45:5d:23:14:8a:8c:4f:a4:e6:34:
         5f:f0:78:91:a3:5a:93:c8:71:50:04:ff:4a:cc:ce:4b:f1:48:
         9b:1a:c6:0e:85:96:63:53:af:cc:d8:1a:54:cc:b2:ae:c5:fa:
         60:57:af:0c:1f:91:10:36:71:ab:88:cb:7e:e2:2e:14:76:07:
         e2:78:75:cb:74:6c:68:70:ef:4f:f1:30:74:2b:6a:6e:87:4f:
         61:d8:a2:ad:d3:ed:66:f3:a4:bd:16:02:6a:e9:98:88:c4:33:
         36:d8:d3:e3:73:a1:63:22:8a:cc:4f:e4:3a:49:19:67:18:b4:
         56:67:6f:8f:7a:81:f0:eb:31:a1:3d:4f:4c:7b:90:f4:db:de:
         de:81:fe:2b:c4:86:b1:61:5e:7f:a4:8d:7d:5f:73:53:78:c9:
         4e:cd:c8:c7:b8:b8:97:86:91:d5:51:88:e0:c0:92:ce:0f:fd:
         5a:8f:56:43:16:59:e0:d7:c0:75:cb:b3:b6:4a:58:08:47:8d:
         1d:07:31:6d:85:c3:29:50:90:09:53:a5:58:4b:72:13:be:12:
         14:1c:76:85:d4:91:6d:b8:23:fd:1c:a4:81:c1:46:b0:31:5f:
         5d:61:34:16:fd:fe:11:4c:c5:b3:d9:c8:4d:77:6d:ad:44:69:
         44:69:dc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 10:10:47 2026 by rpki-client