Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa
File:                     AS32181.roa (raw, json)
Hash identifier:          pHN3Ztr6Zx75spoy8nLVf9bis60YlOeRezK8TFq7UGk=
Subject key identifier:   2F:01:EB:12:1B:63:A6:D2:DD:F6:E0:23:14:F1:C6:C2:11:4A:3B:F4
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       34FBC3F39220CD22EDC1E20CBF46A955C8C3A40D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa
Signing time:             Thu 12 Nov 2026 13:36:22 +0000
ROA not before:           Thu 12 Nov 2026 13:31:22 +0000
ROA not after:            Thu 11 Nov 2027 13:36:22 +0000
asID:                     32181
IP address blocks:        104.234.23.0/24 maxlen: 24
                          104.234.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:fb:c3:f3:92:20:cd:22:ed:c1:e2:0c:bf:46:a9:55:c8:c3:a4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Nov 12 13:31:22 2026 GMT
            Not After : Nov 11 13:36:22 2027 GMT
        Subject: CN=2F01EB121B63A6D2DDF6E02314F1C6C2114A3BF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6a:49:86:2e:05:4a:b8:99:8a:d3:d9:82:13:
                    70:ea:87:8b:08:87:61:b9:ec:e0:44:f9:8f:37:9a:
                    5b:36:1f:ef:32:02:79:f3:47:6b:af:90:04:f4:8e:
                    a9:c6:0f:5e:5e:57:b6:52:5e:de:73:8f:e7:f1:c6:
                    ef:74:49:2a:21:98:11:b2:bb:bb:96:d8:5b:7a:c5:
                    27:90:e4:a1:ef:16:70:3d:ef:96:d6:0e:c5:74:3d:
                    1c:bf:79:80:d3:08:f9:3f:9a:16:93:0e:f3:c5:8b:
                    b3:da:98:b8:89:d9:ee:22:02:ef:2a:3e:b3:4a:74:
                    19:1c:d8:6d:67:56:f7:49:1c:9f:c2:b5:fd:ce:be:
                    fc:60:4e:2f:d1:1f:8a:2a:f5:94:49:fd:f8:2f:6b:
                    29:6b:ba:ee:f6:5a:26:ba:b5:c4:83:5e:b9:8d:6f:
                    97:ec:dd:ce:8b:55:1d:6f:3c:fe:b7:63:b8:bb:ee:
                    17:96:1a:e3:70:93:62:ba:e3:39:7b:f1:d3:43:2c:
                    95:b5:01:08:df:5b:5b:d4:c5:12:2f:fa:c0:a0:14:
                    c4:c6:59:52:64:04:52:3a:57:33:6b:12:06:2a:8f:
                    76:c3:8b:de:31:8f:1f:c4:0f:05:dd:92:0e:8a:44:
                    f0:5a:15:2f:de:27:f8:08:92:31:d5:12:cb:e2:17:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:01:EB:12:1B:63:A6:D2:DD:F6:E0:23:14:F1:C6:C2:11:4A:3B:F4
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32181.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.23.0/24
                  104.234.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:5f:56:52:f4:34:d3:9c:ad:57:a4:9c:42:bf:ad:ba:07:
         a4:a7:36:35:ad:bc:91:c8:6c:05:de:9d:8b:5f:ef:93:89:94:
         c4:83:f1:10:1e:db:bb:1f:7d:9a:2d:65:65:0a:b2:ec:ce:7b:
         83:81:55:4a:ae:eb:9c:85:c5:df:ed:18:a8:19:b7:b3:ba:26:
         d7:d5:f1:c7:e0:b4:f3:80:cf:3f:10:29:9e:db:a5:21:11:9a:
         0a:ea:3a:d6:17:fd:2b:ed:6e:21:a8:b6:32:d2:4a:94:15:78:
         72:6d:db:53:b8:a8:65:90:99:a5:de:14:db:ff:88:a2:a9:bd:
         7a:48:ef:0c:d1:78:cf:d2:1f:cc:5a:8d:61:d5:e7:5d:e0:ab:
         bc:f9:e1:34:64:09:72:19:ac:dd:5f:01:26:81:c1:83:9d:ed:
         a6:20:1f:dc:b7:d2:d6:d5:db:3b:58:23:26:c8:b2:0f:2a:0f:
         ab:f9:32:ed:3e:8f:38:90:e0:aa:16:95:88:8e:f3:d0:21:fe:
         e2:22:70:6e:61:c0:1e:54:19:ba:e1:e2:96:b3:8b:e9:aa:c7:
         d2:4f:8b:f4:96:8e:32:b4:1a:33:4f:6b:d5:83:13:d2:1c:35:
         83:97:88:db:0a:6f:ea:88:6a:6b:a6:81:9b:b1:71:96:bc:a4:
         d5:d4:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:13:42 2026 by rpki-client