Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
File:                     32332e3138352e3230382e302f32342d3234203d3e20393833.roa (raw, json)
Hash identifier:          P2i/En77UcWCUvlsrPkPmxVwNKnfwsJ5Rblv+cdx+4k=
Subject key identifier:   42:74:C5:53:57:F3:D4:B2:05:89:20:4C:C0:08:EA:52:FC:EE:85:4C
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       168EE31BD34ECF5D9952A4B592D9544DE46A587A
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
Signing time:             Fri 19 Jun 2026 07:53:13 +0000
ROA not before:           Fri 19 Jun 2026 07:48:13 +0000
ROA not after:            Fri 18 Jun 2027 07:53:13 +0000
asID:                     983
IP address blocks:        23.185.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:24:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:e3:1b:d3:4e:cf:5d:99:52:a4:b5:92:d9:54:4d:e4:6a:58:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Jun 19 07:48:13 2026 GMT
            Not After : Jun 18 07:53:13 2027 GMT
        Subject: CN=4274C55357F3D4B20589204CC008EA52FCEE854C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d2:43:79:98:d1:c0:fe:12:71:9e:cb:02:6d:
                    aa:81:d1:8a:8c:46:17:e0:d3:3e:d0:4a:36:75:9d:
                    fd:d4:92:db:a3:94:0f:c9:cd:ea:87:db:ca:aa:c4:
                    a0:29:82:d3:02:fb:48:89:da:ce:8a:f1:81:69:38:
                    03:83:76:fb:63:38:e5:67:ee:26:4c:78:e8:3d:86:
                    b7:f0:02:2a:55:a9:0a:75:11:c7:d3:84:84:46:aa:
                    57:03:62:98:33:c7:1e:fd:83:c3:99:cd:30:d4:b9:
                    18:d1:9c:e6:ee:62:6c:63:f0:a1:19:d3:7d:f8:b7:
                    dd:2a:be:35:4a:b2:8f:e9:1e:c5:72:30:ef:16:6b:
                    22:2d:a7:75:03:6c:09:e9:0b:76:8b:f3:90:19:a8:
                    02:a9:b9:0e:14:f4:db:62:27:23:5f:36:58:f6:e1:
                    94:ab:94:33:09:ae:b1:b5:c0:53:4f:6f:5b:3e:56:
                    32:c0:b4:8d:6b:97:92:e5:75:53:7b:ab:8d:63:e2:
                    0d:22:69:30:b5:27:05:5f:43:a4:09:53:05:8e:9d:
                    26:dc:6b:ba:9b:5f:e1:80:22:05:41:a0:d3:62:56:
                    12:ee:71:db:15:99:3b:f2:7a:9f:b3:39:61:49:92:
                    1e:02:81:3e:75:57:fd:c9:bd:c6:6b:8a:68:66:61:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:C5:53:57:F3:D4:B2:05:89:20:4C:C0:08:EA:52:FC:EE:85:4C
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:25:ad:e4:1f:94:8c:c0:6e:ce:a1:41:ef:25:cf:a9:45:be:
         ce:ae:a1:e2:bc:7e:e1:2d:c1:67:e4:d3:01:54:85:6d:ec:32:
         90:7e:d0:10:ca:c6:09:10:f6:1c:b9:1e:e4:0d:01:b6:ce:a9:
         22:b1:69:b5:45:56:94:c0:12:b5:70:49:e6:41:46:18:d2:03:
         a7:43:e6:ef:fe:b2:23:cb:90:ce:55:5e:01:cd:6c:fe:3d:4b:
         ba:f0:72:67:91:c6:61:ad:cc:7b:43:48:a9:4d:96:74:fa:44:
         d0:8c:32:c7:d7:79:22:d0:66:c0:d9:ae:47:c7:e6:4d:01:a6:
         57:ef:a5:ba:2d:ec:7f:91:4d:ce:6f:a8:ea:62:fd:35:a6:25:
         10:c7:61:0c:24:50:5a:15:16:c6:73:68:33:14:3a:0f:99:d6:
         7e:79:d9:c7:a5:6c:f7:ed:f1:27:de:43:10:0b:ed:f8:63:d5:
         56:85:c8:67:bf:76:d2:26:12:b2:0d:21:b1:fc:4b:2c:5c:0f:
         9e:51:46:fb:4d:54:f2:e3:26:bd:27:fa:ec:13:b8:f9:ed:74:
         d8:a5:c3:e2:58:f9:8d:76:10:1a:1d:a8:fa:71:ae:6c:36:73:
         cf:a9:63:ab:d0:40:32:35:d4:f6:a1:42:d9:a2:21:e5:86:58:
         08:41:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:56 2026 by rpki-client