Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32526.roa
File:                     AS32526.roa (raw, json)
Hash identifier:          mNQPuMqvITj5183QkOD1SGLAhNM/GRzM/7MLCVrG4Yg=
Subject key identifier:   65:DB:48:8B:52:E8:1C:27:59:DD:81:56:1F:BB:4B:07:E6:65:EF:54
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       671C3330ACF078E2BBC2237AAA9681C969768A57
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32526.roa
Signing time:             Sat 09 May 2026 12:36:00 +0000
ROA not before:           Sat 09 May 2026 12:31:00 +0000
ROA not after:            Sat 08 May 2027 12:36:00 +0000
asID:                     32526
IP address blocks:        206.53.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 10:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1c:33:30:ac:f0:78:e2:bb:c2:23:7a:aa:96:81:c9:69:76:8a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May  9 12:31:00 2026 GMT
            Not After : May  8 12:36:00 2027 GMT
        Subject: CN=65DB488B52E81C2759DD81561FBB4B07E665EF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:21:e3:cb:a3:11:0b:4c:42:c9:be:f9:02:
                    d8:da:02:56:7e:b3:3f:a5:b5:8b:38:05:14:66:2a:
                    75:c5:be:12:77:8a:38:ca:b4:9e:55:1f:51:06:8b:
                    5a:7f:01:e5:d6:37:34:29:0a:d6:a5:61:8f:5b:c2:
                    8e:0c:2d:59:69:51:7c:d6:62:ad:25:81:7d:1e:c9:
                    83:89:02:da:45:51:86:e7:c7:97:81:a6:69:37:b8:
                    b6:00:1f:35:99:dd:00:5a:d6:d7:22:0d:9c:63:3e:
                    4c:14:12:3f:f1:ae:a0:83:1b:04:a1:19:ab:a1:f0:
                    01:fc:e9:c6:df:22:53:d3:f8:8f:3b:1d:50:2f:1b:
                    33:40:87:8e:c9:87:0d:7c:be:26:c6:21:ff:c0:dc:
                    1c:20:bb:7d:fc:a9:b0:8d:d6:4a:ad:e0:5b:23:fd:
                    12:59:50:bf:1f:49:03:45:8c:46:b1:ad:38:07:93:
                    2d:65:48:4d:17:9f:84:3e:53:7f:d5:b0:c8:bb:fb:
                    62:45:f3:53:9b:d2:2f:8f:6b:f9:72:ed:ed:53:87:
                    88:94:22:d9:40:bb:18:3b:a3:eb:4e:a5:73:01:c6:
                    fc:92:8d:0a:47:cd:fc:54:09:84:bb:17:fe:ed:f6:
                    f9:e1:95:2d:6b:a1:33:23:e2:cf:90:18:7f:4e:29:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:48:8B:52:E8:1C:27:59:DD:81:56:1F:BB:4B:07:E6:65:EF:54
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32526.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:b3:27:4d:e1:5c:a7:b6:6e:c3:bc:cb:80:2d:a0:c7:ba:19:
         ed:54:f5:50:10:db:16:91:13:6a:ff:91:9e:d6:70:19:97:8d:
         a0:39:ec:53:de:a5:fe:d7:fb:cd:aa:71:8b:0b:0a:19:4b:7d:
         a5:c9:60:9a:7b:3e:f1:51:67:bd:ba:09:28:27:d2:26:b9:80:
         b2:7f:86:12:62:3a:a1:23:3c:58:c3:ab:5a:45:06:79:fc:7a:
         33:5d:4e:52:e1:3e:ac:4f:e0:19:fa:5b:30:09:68:0c:42:90:
         24:29:11:5f:f9:25:30:18:d4:fb:18:59:22:91:c5:c2:6a:78:
         d4:c1:1f:1e:da:a0:d6:ee:02:97:40:78:d1:8c:80:23:ee:e6:
         83:53:58:32:bd:e7:c6:13:a9:77:2e:b9:0d:14:cd:71:6e:03:
         48:e4:3e:ec:9e:e5:d4:39:a0:e0:ba:ca:1e:b1:38:65:8c:5b:
         55:8d:9d:8f:53:42:20:7b:d1:bb:aa:29:2c:46:cc:23:80:49:
         71:cd:47:d3:47:16:03:7a:08:a5:0f:6e:00:7e:d2:59:2f:d0:
         ef:a9:43:59:96:f2:94:6a:87:31:c9:fc:26:2e:33:2a:f3:87:
         c7:68:ac:80:18:26:53:d1:7c:59:19:aa:89:8f:85:f2:98:ef:
         f9:b9:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:48:26 2026 by rpki-client