Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e203437363839.roa
File:                     32332e3134342e3139362e302f32342d3332203d3e203437363839.roa (raw, json)
Hash identifier:          oGFOVt2Vi2f/1gnmVxDaDL55Vroz/N2eXFraWAlNVSA=
Subject key identifier:   3B:5C:19:20:AC:CC:69:0F:0A:49:12:7B:39:58:AF:98:65:A1:14:95
Certificate issuer:       /CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
Certificate serial:       62730C90E0BE03747F2B9D90E8016C8DFC383D88
Authority key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e203437363839.roa
Signing time:             Tue 02 Sep 2025 18:10:27 +0000
ROA not before:           Tue 02 Sep 2025 18:05:27 +0000
ROA not after:            Tue 01 Sep 2026 18:10:27 +0000
asID:                     47689
IP address blocks:        23.144.196.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl
                          rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 15:41:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:73:0c:90:e0:be:03:74:7f:2b:9d:90:e8:01:6c:8d:fc:38:3d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
        Validity
            Not Before: Sep  2 18:05:27 2025 GMT
            Not After : Sep  1 18:10:27 2026 GMT
        Subject: CN=3B5C1920ACCC690F0A49127B3958AF9865A11495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:40:2f:aa:ae:30:f0:6f:f5:e5:48:74:b6:
                    61:52:02:b8:07:71:ba:b9:a9:48:06:c3:79:5e:a1:
                    d1:8b:ab:82:c2:8a:3e:eb:98:ee:cd:0e:55:63:d7:
                    af:4c:ed:fc:a7:60:0e:9e:a1:8b:2e:2c:78:3f:9c:
                    01:be:46:29:6d:58:0b:4f:27:5f:c2:6a:b8:78:be:
                    c8:5e:ec:9d:39:d6:1b:0d:7a:1c:ca:d7:1b:8b:69:
                    ae:a2:91:b5:7e:2a:50:48:6a:71:9d:a9:cb:59:b1:
                    7f:db:c1:ef:32:5b:e3:7d:40:b0:ad:10:59:43:c3:
                    8c:42:4a:60:7e:00:65:ea:e4:5f:99:d8:2a:7d:0f:
                    cf:b8:3f:29:bf:d5:fe:50:ea:ef:d1:f6:93:e9:f9:
                    d8:8d:5c:ed:75:3a:34:07:48:93:cc:77:ba:b8:31:
                    c1:41:c5:51:5f:9d:dc:36:b9:c9:f7:1d:2d:25:87:
                    76:3a:60:e0:6d:95:02:1a:f2:ea:99:b6:ff:d5:6d:
                    98:96:66:1f:4b:93:49:7e:38:b1:c3:da:8a:20:46:
                    ad:71:ad:4f:2b:3c:73:64:7a:5d:21:98:2d:eb:c8:
                    b8:4a:00:7b:89:ec:0f:6d:63:84:19:35:8b:81:43:
                    6e:cd:46:ed:b1:11:cf:c1:18:07:49:df:45:42:56:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5C:19:20:AC:CC:69:0F:0A:49:12:7B:39:58:AF:98:65:A1:14:95
            X509v3 Authority Key Identifier:
                keyid:BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:b8:6e:33:dd:5b:92:7c:62:60:4b:26:13:7f:ac:ff:ad:
         0b:b2:9e:4c:59:d6:ec:d8:4b:63:df:ae:4b:af:ce:7c:d4:a3:
         9e:ed:3b:a5:a4:ff:58:84:4f:2b:d8:1b:9d:02:2c:a7:05:3a:
         86:87:32:83:68:97:bd:8a:4f:4b:f1:83:bd:e6:0d:06:93:c7:
         b4:ec:ec:7b:45:b9:fc:86:b7:74:86:7f:86:0b:5e:29:b5:90:
         6b:e1:b9:ce:80:8d:62:57:2e:6b:64:02:a7:55:b6:83:6a:6b:
         09:6a:23:a3:5c:93:5b:b1:69:0b:30:0d:c8:ed:78:a9:9a:ae:
         fd:5e:1c:2b:39:43:9e:53:93:80:72:09:37:c0:20:c1:c1:b6:
         b2:83:f5:94:a2:d5:51:8e:fe:47:a6:62:f7:3f:59:cf:d0:f7:
         69:bd:de:78:92:68:21:3c:3a:b2:f8:5f:4c:3a:6d:0e:5d:01:
         43:18:c1:7f:ed:61:00:47:04:d3:d6:c9:1d:20:39:a7:f3:94:
         ef:f0:3f:9c:8c:c4:91:76:57:14:de:35:6b:bb:80:3d:58:fb:
         e5:8b:31:03:09:c1:df:67:17:b5:bc:cd:3a:0d:af:ce:10:7d:
         ba:a8:e8:d2:da:ef:e3:98:85:f7:40:3e:bd:02:1a:54:06:bb:
         55:0f:8a:9e
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUYnMMkOC+A3R/K52Q6AFsjfw4PYgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDMyNzc1MGE1MjQ2ODM1Zjk2YjE1Y2E2ODY1ZjY3Y2Yy
ZGRhZWQ0MzkyYzAyMDhjZTgwHhcNMjUwOTAyMTgwNTI3WhcNMjYwOTAxMTgxMDI3
WjAzMTEwLwYDVQQDEygzQjVDMTkyMEFDQ0M2OTBGMEE0OTEyN0IzOTU4QUY5ODY1
QTExNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5lAL6quMPBv
9eVIdLZhUgK4B3G6ualIBsN5XqHRi6uCwoo+65juzQ5VY9evTO38p2AOnqGLLix4
P5wBvkYpbVgLTydfwmq4eL7IXuydOdYbDXocytcbi2muopG1fipQSGpxnanLWbF/
28HvMlvjfUCwrRBZQ8OMQkpgfgBl6uRfmdgqfQ/PuD8pv9X+UOrv0faT6fnYjVzt
dTo0B0iTzHe6uDHBQcVRX53cNrnJ9x0tJYd2OmDgbZUCGvLqmbb/1W2YlmYfS5NJ
fjixw9qKIEatca1PKzxzZHpdIZgt68i4SgB7iewPbWOEGTWLgUNuzUbtsRHPwRgH
Sd9FQlY5ZwIDAQABo4ICXjCCAlowHQYDVR0OBBYEFDtcGSCszGkPCkkSezlYr5hl
oRSVMB8GA1UdIwQYMBaAFL7cuqDWrMvpfCL2C+N/gSttaQSVMA4GA1UdDwEB/wQE
AwIHgDBeBgNVHR8EVzBVMFOgUaBPhk1yc3luYzovL3Jwa2kucHVkdS5iZS9yZXBv
L3B1ZHUvNC9CRURDQkFBMEQ2QUNDQkU5N0MyMkY2MEJFMzdGODEyQjZENjkwNDk1
LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9y
cGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4
MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1kMGQyLTQxNjUtODMw
OC1kZjI1OTdlMzQzZjgvZjFiZDQ3MmMtYjBjOC00YmEwLWE1ZDItZmZmY2JlNGQy
NzUzLzQzMjc3NTBhNTI0NjgzNWY5NmIxNWNhNjg2NWY2N2NmMmRkYWVkNDM5MmMw
MjA4Y2U4LmNlcjB3BggrBgEFBQcBCwRrMGkwZwYIKwYBBQUHMAuGW3JzeW5jOi8v
cnBraS5wdWR1LmJlL3JlcG8vcHVkdS80LzMyMzMyZTMxMzQzNDJlMzEzOTM2MmUz
MDJmMzIzNDJkMzMzMjIwM2QzZTIwMzQzNzM2MzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABeQxDAN
BgkqhkiG9w0BAQsFAAOCAQEAm3G4bjPdW5J8YmBLJhN/rP+tC7KeTFnW7NhLY9+u
S6/OfNSjnu07paT/WIRPK9gbnQIspwU6hocyg2iXvYpPS/GDveYNBpPHtOzse0W5
/Ia3dIZ/hgteKbWQa+G5zoCNYlcua2QCp1W2g2prCWojo1yTW7FpCzANyO14qZqu
/V4cKzlDnlOTgHIJN8AgwcG2soP1lKLVUY7+R6Zi9z9Zz9D3ab3eeJJoITw6svhf
TDptDl0BQxjBf+1hAEcE09bJHSA5p/OU7/A/nIzEkXZXFN41a7uAPVj75YsxAwnB
32cXtbzNOg2vzhB9uqjo0trv45iF90A+vQIaVAa7VQ+Kng==
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:56:31 2025 by rpki-client