Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
File:                     32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          tXuF82p86ExELCnlyvGUQeR9gcTFYgkCtwYNGs2p/c0=
Subject key identifier:   51:88:79:3D:10:DC:05:C5:61:51:6E:9A:C3:2C:38:D1:F3:9D:81:FA
Certificate issuer:       /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial:       1A54FC93B1DE5DB9D6B48D22F3BC1F65E3DA9EF2
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa
Signing time:             Wed 17 Jun 2026 09:32:57 +0000
ROA not before:           Wed 17 Jun 2026 09:27:57 +0000
ROA not after:            Wed 16 Jun 2027 09:32:57 +0000
asID:                     393577
IP address blocks:        23.142.248.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:54:fc:93:b1:de:5d:b9:d6:b4:8d:22:f3:bc:1f:65:e3:da:9e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
        Validity
            Not Before: Jun 17 09:27:57 2026 GMT
            Not After : Jun 16 09:32:57 2027 GMT
        Subject: CN=5188793D10DC05C561516E9AC32C38D1F39D81FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:b5:b0:88:06:87:fa:a6:52:11:4c:b2:df:
                    0d:aa:09:c9:ca:a1:a7:00:4a:6c:8c:11:ac:9c:59:
                    8c:b9:38:05:c1:80:5a:cb:04:24:1f:41:8d:93:4b:
                    af:1d:92:98:f3:f7:5d:3b:3e:4a:1d:40:5f:8c:36:
                    46:d5:89:01:1b:1b:ae:4b:29:4e:f2:ef:e0:57:4a:
                    fa:61:95:1f:05:43:0f:1a:c6:82:99:bb:34:96:7d:
                    4e:d2:59:f2:cf:5f:3a:19:ef:01:e4:c5:4d:3b:f8:
                    34:73:74:8f:c7:05:3b:c3:26:65:29:01:9d:68:ed:
                    71:4a:ee:33:03:0d:53:6e:90:5c:5a:d5:8f:fd:24:
                    7d:2e:8a:93:3e:3b:2c:3c:81:fc:55:12:55:e6:8f:
                    4d:14:fb:de:0f:bd:bb:d9:ce:76:27:d0:c1:ea:51:
                    5d:31:d2:0f:6b:04:e9:52:a3:34:af:08:91:45:0c:
                    25:91:a8:8c:a5:eb:f7:47:a4:0c:f8:1a:2a:04:af:
                    87:42:c7:88:31:b6:e5:5e:56:5e:54:b4:f6:84:c5:
                    75:ce:26:4a:cd:58:48:26:0a:7d:ed:5a:ea:9d:99:
                    3b:7f:05:5e:ce:14:ff:87:5a:ea:75:87:e3:e2:90:
                    74:a6:b0:aa:4c:52:54:49:99:a8:86:33:36:e2:d2:
                    f5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:88:79:3D:10:DC:05:C5:61:51:6E:9A:C3:2C:38:D1:F3:9D:81:FA
            X509v3 Authority Key Identifier:
                keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/32332e3134322e3234382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9e:9c:94:93:66:78:75:18:66:3a:a5:cf:57:bd:22:c9:3d:
         38:a2:81:69:05:90:1f:76:5d:a7:cd:fe:3b:48:f7:77:56:b4:
         41:79:8f:cd:9c:26:39:8b:db:f9:a4:af:e5:7d:8c:8a:dc:63:
         53:58:2c:bc:ce:b1:a1:48:ba:a3:18:d9:68:e7:a5:cd:ea:52:
         53:0e:5c:b6:b5:40:da:7d:12:0e:55:b7:42:85:f7:1f:31:fc:
         70:a1:18:ff:93:4a:21:14:53:7f:0d:0c:51:69:76:d1:8c:f3:
         be:c6:15:df:5a:64:b9:f6:24:41:2b:0d:72:e2:20:7c:78:5c:
         b0:88:04:44:db:67:ba:16:39:de:32:3a:d2:73:0a:c0:50:90:
         e9:14:3c:bd:bd:e0:89:c3:9b:51:66:6a:30:9e:c2:50:34:a8:
         83:15:66:6c:d3:7a:72:8a:0e:32:69:ec:ff:2c:c3:ae:f3:df:
         c3:88:77:38:0f:39:95:6d:84:ef:05:91:08:c0:10:cc:d9:45:
         c6:67:82:d3:0a:c8:23:24:27:78:4d:a9:19:92:07:b3:b2:88:
         86:61:be:77:bc:16:0f:7c:84:6d:55:8a:23:a8:ac:07:9b:f4:
         74:37:92:3e:c9:46:e9:76:36:25:00:24:d9:2c:38:b3:bb:89:
         ed:2b:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:04 2026 by rpki-client