Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/32332e3136342e3130382e302f32342d3234203d3e20343031303636.roa
File:                     32332e3136342e3130382e302f32342d3234203d3e20343031303636.roa (raw, json)
Hash identifier:          iNekUYwmzAaqb18R+mITFjVvOjvRx7mnTDizr1GgXg8=
Subject key identifier:   F4:80:7E:B2:60:A4:0E:8F:9B:B1:1F:50:C1:50:90:F8:68:5D:AC:C3
Certificate issuer:       /CN=994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9
Certificate serial:       7F1D8BCE75E2E4B42E189BB29390B60698F45A3D
Authority key identifier: 5C:54:49:89:2D:AC:50:37:FF:CD:C0:B0:4A:FD:95:C9:3C:CA:A5:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/32332e3136342e3130382e302f32342d3234203d3e20343031303636.roa
Signing time:             Wed 23 Sep 2026 13:07:14 +0000
ROA not before:           Wed 23 Sep 2026 13:02:14 +0000
ROA not after:            Wed 22 Sep 2027 13:07:14 +0000
asID:                     401066
IP address blocks:        23.164.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/5C5449892DAC5037FFCDC0B04AFD95C93CCAA5E4.crl
                          rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/5C5449892DAC5037FFCDC0B04AFD95C93CCAA5E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/48207a98-128a-4c02-af42-d019fc1b8f07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 09:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1d:8b:ce:75:e2:e4:b4:2e:18:9b:b2:93:90:b6:06:98:f4:5a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9
        Validity
            Not Before: Sep 23 13:02:14 2026 GMT
            Not After : Sep 22 13:07:14 2027 GMT
        Subject: CN=F4807EB260A40E8F9BB11F50C15090F8685DACC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:09:fd:75:55:e0:a0:80:90:eb:2a:29:14:
                    9e:5d:fa:92:a0:06:15:2c:d9:de:23:0b:1c:39:a7:
                    75:81:f1:a3:6c:36:a4:c1:79:d8:6b:38:fa:16:d9:
                    4d:45:99:df:5e:fa:68:2c:ce:28:0e:b4:40:1e:4f:
                    7f:9c:69:7d:fa:76:cf:78:0c:d5:38:f5:96:6d:c5:
                    13:6b:47:2b:ef:f8:62:6f:b6:fb:37:5d:1e:62:fe:
                    39:0d:d8:d7:8d:60:88:85:59:ea:10:91:50:68:e6:
                    e8:31:62:61:a8:66:95:79:ba:2c:7c:6a:1c:4d:94:
                    ec:b1:f3:c3:f8:92:9a:35:d0:03:cf:67:39:85:d1:
                    e7:a1:72:ce:66:e7:ef:e6:c5:2a:ce:49:b5:0e:43:
                    e6:57:9f:ad:e1:48:ff:5f:45:4e:5f:89:8f:24:80:
                    12:df:27:92:80:92:f3:d7:62:fc:ac:ca:5d:81:5b:
                    7b:8a:7c:6a:e1:fb:e2:79:c7:8b:1e:1f:29:25:38:
                    7b:c8:fc:d8:17:a4:36:a6:fa:84:ab:4f:4b:9d:ea:
                    28:b7:b6:eb:a9:a2:9a:c1:3c:1c:f1:6a:b5:04:02:
                    73:33:ab:04:1f:ce:ab:b2:d4:09:2a:e2:cf:ef:b1:
                    17:38:ef:09:7d:61:4b:65:90:c1:a3:cf:eb:db:73:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:7E:B2:60:A4:0E:8F:9B:B1:1F:50:C1:50:90:F8:68:5D:AC:C3
            X509v3 Authority Key Identifier:
                keyid:5C:54:49:89:2D:AC:50:37:FF:CD:C0:B0:4A:FD:95:C9:3C:CA:A5:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/5C5449892DAC5037FFCDC0B04AFD95C93CCAA5E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/48207a98-128a-4c02-af42-d019fc1b8f07/994a0115605e9bbee5df6f1111a680c9dcb5888149350a75a9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a863a20f20424e0eafbb25523a8454bc/0/32332e3136342e3130382e302f32342d3234203d3e20343031303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:19:e1:3b:e3:8a:c1:17:5f:ca:f5:28:b1:bf:c1:c6:aa:62:
         d4:3c:b3:59:16:66:e3:93:4d:df:a7:6b:a8:d1:2c:8b:73:01:
         c5:11:7c:a2:f9:dd:7e:34:35:cb:0f:92:0a:3d:60:ec:43:5c:
         96:04:74:7a:0c:69:15:9f:19:31:2c:a7:05:0f:34:30:6c:b4:
         33:b8:ff:4a:24:ac:79:2b:52:93:fd:c7:d5:c0:01:65:d7:4c:
         10:25:4a:4a:8f:72:af:61:34:c6:30:e3:81:a7:75:63:e9:53:
         a0:c6:87:a2:81:fd:4b:19:1b:c1:54:4e:1b:67:8f:ad:34:9a:
         87:9c:3b:76:00:39:86:bb:c6:bb:b6:5e:42:52:16:92:92:98:
         0e:b3:1e:33:a5:f5:b0:e4:0e:95:12:21:2a:bb:0e:b7:cc:ab:
         e6:8d:64:3b:24:b9:fd:e6:03:b0:65:45:57:bc:1e:1a:18:dd:
         49:dc:69:3b:4e:41:83:bb:65:e6:06:b3:5c:84:ed:6e:f1:af:
         47:12:a1:7f:7e:2c:f0:ac:12:ee:d6:e6:c4:a0:98:80:fd:36:
         9e:e5:2d:84:c6:9c:bc:5b:1b:5e:f2:02:b8:56:3d:b2:f6:99:
         37:15:60:19:24:5a:f4:c3:9c:6a:8c:28:21:df:a8:fc:26:92:
         cb:1d:92:34
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUfx2LznXi5LQuGJuyk5C2Bpj0Wj0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTk0YTAxMTU2MDVlOWJiZWU1ZGY2ZjExMTFhNjgwYzlk
Y2I1ODg4MTQ5MzUwYTc1YTkwHhcNMjYwOTIzMTMwMjE0WhcNMjcwOTIyMTMwNzE0
WjAzMTEwLwYDVQQDEyhGNDgwN0VCMjYwQTQwRThGOUJCMTFGNTBDMTUwOTBGODY4
NURBQ0MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxoJ/XVV4KCA
kOsqKRSeXfqSoAYVLNneIwscOad1gfGjbDakwXnYazj6FtlNRZnfXvpoLM4oDrRA
Hk9/nGl9+nbPeAzVOPWWbcUTa0cr7/hib7b7N10eYv45DdjXjWCIhVnqEJFQaObo
MWJhqGaVebosfGocTZTssfPD+JKaNdADz2c5hdHnoXLOZufv5sUqzkm1DkPmV5+t
4Uj/X0VOX4mPJIAS3yeSgJLz12L8rMpdgVt7inxq4fvieceLHh8pJTh7yPzYF6Q2
pvqEq09Lneoot7brqaKawTwc8Wq1BAJzM6sEH86rstQJKuLP77EXOO8JfWFLZZDB
o8/r23PKsQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFPSAfrJgpA6Pm7EfUMFQkPho
XazDMB8GA1UdIwQYMBaAFFxUSYktrFA3/83AsEr9lck8yqXkMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2E4NjNhMjBmMjA0MjRlMGVhZmJiMjU1MjNhODQ1NGJjLzAv
NUM1NDQ5ODkyREFDNTAzN0ZGQ0RDMEIwNEFGRDk1QzkzQ0NBQTVFNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzQ4MjA3YTk4LTEyOGEtNGMwMi1hZjQyLWQwMTlmYzFiOGYwNy85OTRh
MDExNTYwNWU5YmJlZTVkZjZmMTExMWE2ODBjOWRjYjU4ODgxNDkzNTBhNzVhOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hODYzYTIwZjIwNDI0ZTBlYWZiYjI1
NTIzYTg0NTRiYy8wLzMyMzMyZTMxMzYzNDJlMzEzMDM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzAzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6RsMA0GCSqGSIb3DQEB
CwUAA4IBAQA5GeE744rBF1/K9Sixv8HGqmLUPLNZFmbjk03fp2uo0SyLcwHFEXyi
+d1+NDXLD5IKPWDsQ1yWBHR6DGkVnxkxLKcFDzQwbLQzuP9KJKx5K1KT/cfVwAFl
10wQJUpKj3KvYTTGMOOBp3Vj6VOgxoeigf1LGRvBVE4bZ4+tNJqHnDt2ADmGu8a7
tl5CUhaSkpgOsx4zpfWw5A6VEiEquw63zKvmjWQ7JLn95gOwZUVXvB4aGN1J3Gk7
TkGDu2XmBrNchO1u8a9HEqF/fizwrBLu1ubEoJiA/Tae5S2Expy8Wxte8gK4Vj2y
9pk3FWAZJFr0w5xqjCgh36j8JpLLHZI0
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:31 2026 by rpki-client