Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/32332e3133312e3231362e302f32342d3234203d3e203138383534.roa
File:                     32332e3133312e3231362e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier:          jJuSmMZqS32j4qQYMYv1INo7yl31mpMyPFkYVoxh5uU=
Subject key identifier:   F4:B2:21:22:26:A5:2F:B5:37:C4:6E:F9:F3:59:B4:3D:A8:B8:E0:0F
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       2EFD147AB8B7D7A078E6A7581BA4D7383EC86E99
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/32332e3133312e3231362e302f32342d3234203d3e203138383534.roa
Signing time:             Wed 22 Apr 2026 06:10:33 +0000
ROA not before:           Wed 22 Apr 2026 06:05:33 +0000
ROA not after:            Wed 21 Apr 2027 06:10:33 +0000
asID:                     18854
IP address blocks:        23.131.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:fd:14:7a:b8:b7:d7:a0:78:e6:a7:58:1b:a4:d7:38:3e:c8:6e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 22 06:05:33 2026 GMT
            Not After : Apr 21 06:10:33 2027 GMT
        Subject: CN=F4B2212226A52FB537C46EF9F359B43DA8B8E00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:73:c9:4a:7b:18:59:b8:ed:ca:52:da:fb:
                    66:c2:d2:04:41:bf:f1:80:91:a8:45:cf:1e:15:81:
                    f3:16:ae:10:70:fd:dd:5e:b2:81:89:e6:27:a1:b7:
                    dc:a5:14:c8:5a:d8:c6:48:9d:20:ba:d2:ad:07:6d:
                    87:9b:6c:9b:76:66:7d:bc:65:fb:d0:77:37:5e:60:
                    c4:da:7a:fb:43:9b:9d:3c:28:c6:21:02:76:2d:e7:
                    f9:97:76:e0:d3:77:4b:4c:d0:bf:ae:a6:75:fc:0a:
                    33:a7:d6:03:a8:15:c9:2e:dc:41:7d:a4:1b:72:fa:
                    b3:87:aa:e2:48:07:ae:0f:d2:5a:ef:b1:32:91:7c:
                    42:14:12:d5:a3:50:f8:ed:69:75:e8:3f:98:12:ea:
                    ec:9c:3b:bb:7b:82:76:22:78:11:ab:ff:f5:6c:d0:
                    64:d4:3f:ad:9f:7d:50:a7:61:50:fb:55:f5:29:93:
                    c4:d7:49:4c:7b:85:f1:6a:33:c2:ac:b0:9a:b1:a6:
                    bf:39:29:6e:b4:83:35:0f:f7:f3:c0:5a:d9:f2:19:
                    6d:fd:9e:d8:19:34:22:de:ea:c1:69:41:32:16:59:
                    1b:36:b1:c9:f8:39:6f:ba:ff:ee:32:e1:fd:f8:08:
                    a8:2b:d5:e4:36:4e:fb:3a:a7:f5:29:a8:a6:20:6c:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B2:21:22:26:A5:2F:B5:37:C4:6E:F9:F3:59:B4:3D:A8:B8:E0:0F
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/32332e3133312e3231362e302f32342d3234203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:10:b3:4e:0b:cb:87:3b:fb:9e:91:3c:94:e7:a2:18:3d:
         d7:19:94:95:29:89:51:38:56:4c:73:f0:c4:ac:99:48:7b:02:
         70:b7:06:f1:61:99:5a:da:84:42:b5:0f:4a:56:af:67:6b:6e:
         ca:3d:6f:90:f5:84:c7:90:38:6d:3e:07:f6:63:7f:1c:72:5f:
         57:5a:cc:0e:45:48:31:f1:1f:5e:e6:2b:1a:59:6a:58:81:ce:
         e5:3d:89:bb:cf:84:8d:9b:b1:24:c8:e3:90:d1:9b:3e:d8:58:
         b1:e6:e2:24:6c:85:7b:05:62:f9:2a:2c:30:51:86:45:ee:23:
         f8:96:3f:c9:6b:76:8c:80:f2:b7:b8:3f:7f:f4:85:4e:36:6f:
         f4:19:85:6c:75:02:a8:45:3c:45:59:28:09:87:5b:e2:16:46:
         59:90:03:49:8c:1b:38:df:1f:72:dc:93:05:47:09:b7:17:1f:
         8e:95:4c:87:50:2c:e6:b0:d1:3c:01:3e:ea:d3:6c:59:f4:2e:
         36:b2:94:3e:6c:de:5d:a6:96:f2:36:a4:63:dd:65:5b:ab:b7:
         08:6b:ed:68:a2:31:78:cd:0c:83:b8:ac:02:a0:0c:a3:92:d7:
         8e:7a:84:64:41:1a:8b:61:8c:c5:a7:3f:f1:de:86:94:17:4f:
         fd:eb:f0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:41 2026 by rpki-client