Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e203437363839.roa
File:                     32332e3134342e3139362e302f32342d3332203d3e203437363839.roa (raw, json)
Hash identifier:          K0DWA3cxq4GUW9xlaMviljTF18tqBWUaw/5oVFwY0T8=
Subject key identifier:   27:8A:FF:6A:96:02:DC:FD:CD:56:DB:73:41:AC:C5:30:90:C0:A0:D4
Certificate issuer:       /CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
Certificate serial:       1A35689A7942FF00055C401F333837C968896018
Authority key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e203437363839.roa
Signing time:             Tue 04 Aug 2026 18:24:38 +0000
ROA not before:           Tue 04 Aug 2026 18:19:38 +0000
ROA not after:            Tue 03 Aug 2027 18:24:38 +0000
asID:                     47689
IP address blocks:        23.144.196.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl
                          rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:68:9a:79:42:ff:00:05:5c:40:1f:33:38:37:c9:68:89:60:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
        Validity
            Not Before: Aug  4 18:19:38 2026 GMT
            Not After : Aug  3 18:24:38 2027 GMT
        Subject: CN=278AFF6A9602DCFDCD56DB7341ACC53090C0A0D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:47:d6:7a:0e:d5:61:5b:a9:94:6f:12:b4:ab:
                    05:c6:a0:de:9f:f8:c8:c6:07:79:84:8a:ad:08:12:
                    89:21:0d:96:83:0f:35:aa:1d:92:4c:16:2b:07:f2:
                    8c:af:4b:a9:2e:94:bb:3c:bf:17:d8:ee:ed:6f:66:
                    d8:a0:45:06:da:28:a4:97:df:4f:ad:73:c0:48:3a:
                    48:85:13:82:1f:36:b6:1d:b7:34:f9:a3:38:33:c8:
                    aa:32:63:b5:e9:88:1e:98:4f:48:e8:8b:aa:6e:c5:
                    41:d7:6e:a3:5a:b2:06:23:37:6a:e8:bd:12:9c:92:
                    07:82:53:91:5e:7a:15:ba:72:fc:67:be:85:61:56:
                    cc:a1:cd:f5:d2:c7:e8:be:71:dd:dd:8e:0d:0c:c6:
                    3b:39:51:0f:96:95:ba:6c:52:d5:19:b8:d7:0f:4d:
                    5c:4e:9c:ab:0e:41:9d:24:ed:78:b1:b0:46:7e:1a:
                    b5:51:be:db:b9:e3:14:af:4e:2f:9f:06:0d:bb:81:
                    79:6b:71:32:c3:90:93:0b:36:6f:14:8e:9e:5a:e5:
                    1e:2e:38:e3:cc:4e:ee:15:75:c5:d6:3c:7d:7e:01:
                    c6:5f:23:67:e8:5f:31:a9:9d:d9:3d:32:02:48:79:
                    4b:ac:ea:41:01:1b:ab:61:77:3b:eb:2d:82:a1:36:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8A:FF:6A:96:02:DC:FD:CD:56:DB:73:41:AC:C5:30:90:C0:A0:D4
            X509v3 Authority Key Identifier:
                keyid:BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:90:72:27:ed:a5:45:32:55:b4:7e:2e:aa:78:2f:75:49:d5:
         46:11:93:e6:a1:90:b6:43:65:70:c4:ea:41:09:22:57:81:40:
         d8:e8:22:62:22:c0:1c:2d:9f:31:aa:a4:4c:39:11:2e:74:37:
         d1:bb:06:56:30:34:8a:b8:0f:44:b0:04:96:57:52:a9:21:d8:
         af:e3:01:c4:31:19:dc:28:f3:3f:7d:36:04:b6:5c:6b:f5:4b:
         91:8a:82:f2:8a:26:82:e0:fc:1c:6d:db:84:fa:d4:d7:f2:ab:
         d0:85:f8:eb:c2:73:64:98:07:e7:99:31:f4:6a:86:0b:b3:44:
         58:62:4f:d3:ac:f8:c6:5e:5a:c3:52:52:3e:78:3b:7a:53:a4:
         d4:3d:43:37:1f:43:ca:6e:f5:f9:cc:8f:3b:e6:64:08:a4:4c:
         c8:ce:bd:a6:7b:7b:a1:fc:d3:2a:04:b0:0c:8c:70:a0:4c:28:
         a1:19:74:f2:5f:62:f6:9b:ac:5d:23:d8:a6:2b:45:dd:10:09:
         f2:62:68:be:6e:3d:9c:5f:4a:28:be:49:67:97:cc:a5:67:76:
         66:64:ef:e7:17:83:a8:f5:75:93:a9:5f:f2:dd:85:e6:c2:a8:
         9d:65:69:a9:0e:b4:96:81:d1:6f:be:ce:df:62:ce:3b:87:b5:
         ca:29:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:31:51 2026 by rpki-client