Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/32332e3136342e3135322e302f32332d3234203d3e203236353631.roa
File:                     32332e3136342e3135322e302f32332d3234203d3e203236353631.roa (raw, json)
Hash identifier:          PKGsO00Tgcuv2crzE9Qbn0YS4XRf4w3Y317foKOp++w=
Subject key identifier:   0E:9A:01:8D:1A:CE:4C:86:05:C3:52:91:29:B2:D3:18:AD:38:A7:49
Certificate issuer:       /CN=d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a
Certificate serial:       54468E8A0F5B9A0A97567531200E630B0D67F1CB
Authority key identifier: B5:15:69:E8:20:07:DB:3B:9C:33:08:13:72:00:D2:4E:7F:00:68:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/32332e3136342e3135322e302f32332d3234203d3e203236353631.roa
Signing time:             Wed 08 Oct 2025 20:42:36 +0000
ROA not before:           Wed 08 Oct 2025 20:37:36 +0000
ROA not after:            Wed 07 Oct 2026 20:42:36 +0000
asID:                     26561
IP address blocks:        23.164.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/B51569E82007DB3B9C3308137200D24E7F006802.crl
                          rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/B51569E82007DB3B9C3308137200D24E7F006802.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:46:8e:8a:0f:5b:9a:0a:97:56:75:31:20:0e:63:0b:0d:67:f1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a
        Validity
            Not Before: Oct  8 20:37:36 2025 GMT
            Not After : Oct  7 20:42:36 2026 GMT
        Subject: CN=0E9A018D1ACE4C8605C3529129B2D318AD38A749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:93:85:36:93:ca:ca:2b:1b:ee:29:44:af:
                    70:1a:db:6f:2c:b4:a3:70:4f:0c:9e:e4:a8:9a:94:
                    a9:2d:e2:db:b7:0d:5f:6e:42:5a:0e:de:be:e5:79:
                    f4:0a:a0:1e:2d:02:17:c3:5e:1d:c6:fc:7d:7e:a7:
                    6b:69:34:2a:bf:97:fe:3f:08:a9:dc:61:79:be:4f:
                    d7:5e:e2:3e:be:5f:8c:29:d9:12:3f:59:cd:23:87:
                    c0:63:42:60:94:dc:1a:2c:97:20:c6:37:12:91:35:
                    aa:79:0f:68:6f:3f:a7:18:38:62:9e:12:4a:0b:90:
                    d4:93:a8:0d:5e:32:9b:18:14:6f:dc:02:18:4f:f9:
                    9d:56:fe:4a:7b:71:c1:49:5e:6c:0c:53:53:db:b0:
                    e7:dc:b3:2e:4b:e5:0f:b4:92:97:be:62:e6:66:b5:
                    eb:a0:fc:65:ce:1b:1b:da:6b:b3:43:4e:93:d9:9e:
                    b3:03:22:6c:db:f2:6b:a9:91:7b:b2:81:10:40:83:
                    97:04:9b:a3:4e:eb:ba:32:08:ae:86:61:a1:4c:ae:
                    cd:c1:d7:94:7f:af:08:dc:8f:0d:7e:1a:70:3b:38:
                    89:d1:89:55:5d:69:7d:02:31:6b:b2:d9:75:a8:6a:
                    c3:32:49:ab:07:a9:f9:1d:fb:f7:29:e2:34:81:b2:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9A:01:8D:1A:CE:4C:86:05:C3:52:91:29:B2:D3:18:AD:38:A7:49
            X509v3 Authority Key Identifier:
                keyid:B5:15:69:E8:20:07:DB:3B:9C:33:08:13:72:00:D2:4E:7F:00:68:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/B51569E82007DB3B9C3308137200D24E7F006802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/32332e3136342e3135322e302f32332d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:a8:3e:79:e8:9e:23:46:ee:7c:3d:c5:5e:94:6f:b8:7e:56:
         c0:b9:0a:b1:eb:ae:17:0d:ea:fd:ea:fc:06:15:80:71:33:a1:
         17:35:50:fb:33:40:36:91:03:1f:09:21:9f:f0:ef:ed:95:e4:
         3a:82:c3:b5:50:74:18:36:88:6a:45:0f:22:67:21:ec:64:67:
         fe:4f:19:55:d5:42:d0:30:41:8a:55:e2:74:98:70:38:8a:ea:
         63:63:2b:e0:15:14:bd:1f:9b:be:a7:83:1a:bf:ed:ee:1f:e4:
         07:f0:9a:ae:77:6b:e6:9a:6f:58:43:ba:bc:29:ff:61:9b:75:
         a8:5f:cc:a2:a4:ff:c5:7b:5a:08:34:74:6d:8c:63:1f:23:55:
         f2:a0:01:c7:de:ef:c0:03:20:cc:81:39:c0:9d:5c:54:71:a5:
         b5:49:fc:43:41:7a:62:c9:33:d7:0e:4c:5e:cb:c4:a2:16:8b:
         b1:38:81:1b:0b:a7:66:03:49:b6:0b:ed:a2:bd:05:ed:92:ad:
         cf:06:7d:e7:f9:62:53:db:2b:f5:74:99:53:a8:df:60:b7:0b:
         47:2d:8d:6e:69:ec:51:fc:37:f9:48:64:86:ce:e7:34:f8:f4:
         0f:99:9b:20:c8:03:b9:be:23:a2:4b:de:c5:c2:53:c5:15:7f:
         27:42:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:56:17 2025 by rpki-client