Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/9b12e064c23e477a9e9b2ad8b2cd8e64/0/3230362e3136382e35362e302f32322d3234203d3e2036303739.roa
File:                     3230362e3136382e35362e302f32322d3234203d3e2036303739.roa (raw, json)
Hash identifier:          /b7lj13aSJTc37mL0RIMsFVdb73dQs9F5oYayCgnkZw=
Subject key identifier:   77:B2:99:81:02:8B:CF:E7:65:B3:24:B3:24:93:4C:B1:B3:C7:EE:8D
Certificate issuer:       /CN=cedf65bba5592ba5a9bf7a9b5035977557982352dd7ffad98e
Certificate serial:       3247D5CDA1175CAD883FD70CA73AF488E7F902F5
Authority key identifier: B7:5F:4D:07:F6:1F:93:B4:2F:AC:5D:A1:5E:5F:7C:F4:60:8F:54:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b/cedf65bba5592ba5a9bf7a9b5035977557982352dd7ffad98e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9b12e064c23e477a9e9b2ad8b2cd8e64/0/3230362e3136382e35362e302f32322d3234203d3e2036303739.roa
Signing time:             Wed 14 Oct 2026 13:01:24 +0000
ROA not before:           Wed 14 Oct 2026 12:56:24 +0000
ROA not after:            Wed 13 Oct 2027 13:01:24 +0000
asID:                     6079
IP address blocks:        206.168.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9b12e064c23e477a9e9b2ad8b2cd8e64/0/B75F4D07F61F93B42FAC5DA15E5F7CF4608F5430.crl
                          rsync://rpki-rps.arin.net/repository/9b12e064c23e477a9e9b2ad8b2cd8e64/0/B75F4D07F61F93B42FAC5DA15E5F7CF4608F5430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b/cedf65bba5592ba5a9bf7a9b5035977557982352dd7ffad98e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 06:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:d5:cd:a1:17:5c:ad:88:3f:d7:0c:a7:3a:f4:88:e7:f9:02:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cedf65bba5592ba5a9bf7a9b5035977557982352dd7ffad98e
        Validity
            Not Before: Oct 14 12:56:24 2026 GMT
            Not After : Oct 13 13:01:24 2027 GMT
        Subject: CN=77B29981028BCFE765B324B324934CB1B3C7EE8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:64:0c:2c:a1:82:ef:ba:85:54:69:69:ae:
                    e8:93:4e:ff:d5:a3:7c:17:29:c7:4f:a4:9f:92:85:
                    87:9f:0a:b9:6f:d3:e8:2e:4b:38:ec:04:2a:c4:1d:
                    a9:b6:08:73:e0:54:88:f7:1b:c9:aa:3a:9b:9b:a9:
                    23:d8:bf:8e:40:37:07:a1:c0:22:da:84:03:04:37:
                    b3:88:80:2a:71:30:1a:3f:1f:9c:91:40:80:08:01:
                    c2:1a:e5:f8:f0:6b:5b:7e:8b:59:4a:50:0e:ed:df:
                    91:d0:a4:6b:a8:c3:79:11:5c:d7:9f:a9:02:ef:81:
                    b8:18:cc:41:f6:19:b0:c1:7f:03:7a:d3:a6:78:bb:
                    e4:41:f9:fd:3a:9d:e5:28:cb:2c:9a:a8:b2:93:3d:
                    6c:e5:c0:5f:4a:3b:2b:3a:99:3c:9f:82:d7:39:75:
                    34:fc:bc:ba:aa:fd:fc:e6:25:8a:54:12:24:19:6c:
                    2f:12:be:41:0f:a5:6c:66:d8:a9:7d:81:2a:1e:9b:
                    b9:ac:f2:d0:24:ad:7b:12:f0:f1:70:51:74:ba:57:
                    5e:ef:c6:58:5b:5a:b0:a5:dd:11:00:3a:32:30:b3:
                    26:65:28:85:e3:2a:b3:0e:b5:2a:0f:27:e9:03:7c:
                    48:56:6f:fa:36:d3:57:cf:32:e2:df:37:fa:36:53:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:99:81:02:8B:CF:E7:65:B3:24:B3:24:93:4C:B1:B3:C7:EE:8D
            X509v3 Authority Key Identifier:
                keyid:B7:5F:4D:07:F6:1F:93:B4:2F:AC:5D:A1:5E:5F:7C:F4:60:8F:54:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9b12e064c23e477a9e9b2ad8b2cd8e64/0/B75F4D07F61F93B42FAC5DA15E5F7CF4608F5430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/783b4077-ed4b-4ce6-86e4-e44ef2cfea9b/cedf65bba5592ba5a9bf7a9b5035977557982352dd7ffad98e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9b12e064c23e477a9e9b2ad8b2cd8e64/0/3230362e3136382e35362e302f32322d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:b8:1f:d6:4c:09:d6:d5:6a:0e:fc:1f:6a:fb:92:50:57:
         9f:29:3b:5b:7d:00:6f:55:dc:35:b8:fd:2f:fb:a3:b8:77:bc:
         1b:98:60:d6:cd:21:f8:8e:a9:2f:dd:63:45:20:ac:5b:30:85:
         a6:ba:57:2f:7d:6c:dd:6a:1a:af:08:c3:a2:ca:53:e6:4d:20:
         43:bc:50:88:c1:e5:a2:16:d9:82:63:cf:4c:f3:95:29:37:8c:
         8b:f8:a8:6b:90:60:63:01:68:a3:76:e0:3b:86:34:b9:31:56:
         8d:ce:af:35:53:d1:5a:bb:6b:4e:8d:7b:05:2a:92:7f:02:4d:
         ff:89:2d:cc:5e:f9:1f:09:90:2d:01:38:9d:42:bd:12:71:7c:
         04:04:30:c4:7e:06:53:61:56:0b:5e:66:b4:67:d3:aa:a9:7e:
         f7:84:b0:b5:9e:3e:ac:5a:30:90:4f:2c:6d:e6:f1:15:d2:38:
         60:d3:5e:22:fb:cb:df:a6:01:78:88:ef:17:e2:0a:09:be:d6:
         38:b4:09:11:52:bb:e0:0c:ae:db:a2:a4:08:6a:1b:c5:65:5c:
         e4:3d:65:32:41:b9:6c:9d:54:f8:28:87:13:81:70:44:92:67:
         5f:fa:c8:86:3a:cf:90:3f:4f:05:cc:5d:6d:1f:75:ec:17:ab:
         00:f5:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:26 2026 by rpki-client