Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa
File:                     32332e3136302e34302e302f32342d3234203d3e203236313935.roa (raw, json)
Hash identifier:          DAs7kK7DlUXh5ySqEYduD5pExvLxFxQbve9x/ZM6ivI=
Subject key identifier:   70:C5:88:2A:F5:AA:04:05:28:9E:CE:14:2D:E3:FA:24:C5:1E:55:B1
Certificate issuer:       /CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
Certificate serial:       527AD4A99773FD510823A958260B6428E47966E4
Authority key identifier: 27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa
Signing time:             Wed 12 Aug 2026 19:21:09 +0000
ROA not before:           Wed 12 Aug 2026 19:16:09 +0000
ROA not after:            Wed 11 Aug 2027 19:21:09 +0000
asID:                     26195
IP address blocks:        23.160.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 21:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7a:d4:a9:97:73:fd:51:08:23:a9:58:26:0b:64:28:e4:79:66:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
        Validity
            Not Before: Aug 12 19:16:09 2026 GMT
            Not After : Aug 11 19:21:09 2027 GMT
        Subject: CN=70C5882AF5AA0405289ECE142DE3FA24C51E55B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:ea:bd:85:47:b9:4a:82:ca:82:15:36:4a:
                    a8:76:13:9b:b7:f7:0e:c1:35:99:5d:17:93:dc:66:
                    d5:3a:91:30:33:7e:7b:2f:f6:e3:a1:ec:d9:65:98:
                    a4:d9:84:eb:40:78:1f:54:d7:67:a2:6a:6a:95:05:
                    a4:d9:87:ee:3d:12:25:93:02:dd:7f:81:60:a8:8a:
                    40:4a:ae:ad:a1:5f:e7:fc:99:86:df:65:d9:d7:d8:
                    d4:fa:49:b3:16:81:aa:eb:f9:90:b3:30:dc:a2:c0:
                    06:98:83:80:2d:f1:14:05:00:82:03:8e:32:48:58:
                    df:d7:bd:4e:c9:56:e5:cc:56:fe:30:39:b9:94:7e:
                    f5:16:f7:16:3b:f7:e2:3d:41:95:3b:57:0a:0c:a6:
                    3f:f9:b2:2b:5d:09:b7:18:1d:69:d2:71:f3:b1:05:
                    28:6e:d1:5d:e9:04:fc:54:2b:25:42:8c:e7:0f:5d:
                    3f:9b:0e:2d:2b:ca:56:21:d1:6e:27:65:78:0a:53:
                    88:cb:e2:4b:7b:c3:77:b1:49:82:73:78:4a:d0:26:
                    99:bb:f1:70:1c:a7:c0:1e:1c:7f:30:c0:d4:42:a6:
                    54:43:66:0f:8d:9c:29:f2:de:42:06:ae:a4:64:5b:
                    ff:33:be:ee:7c:41:a3:22:e8:a1:87:c5:f7:ab:96:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:88:2A:F5:AA:04:05:28:9E:CE:14:2D:E3:FA:24:C5:1E:55:B1
            X509v3 Authority Key Identifier:
                keyid:27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:b8:79:6e:32:6e:4e:be:fd:8d:2f:ea:a1:e3:f4:13:74:
         ef:c1:dc:aa:18:91:9a:02:fb:7d:fe:1c:ae:46:c1:22:65:c8:
         de:01:a8:64:72:e7:42:e8:76:c1:a9:76:fd:bc:c1:0b:7f:40:
         e3:c1:bc:d1:50:49:9d:92:39:1a:f7:22:e2:69:d1:67:9f:db:
         9e:00:ad:eb:87:a6:ae:c1:18:cb:b3:aa:91:33:ad:d3:e3:5e:
         71:da:27:29:d5:fd:8d:17:ba:7c:02:63:79:11:78:ac:d6:b1:
         2f:dd:9b:44:90:d2:05:2f:5a:91:b1:6a:ab:4c:9c:36:61:6c:
         8f:2a:d6:8f:77:46:76:43:a7:d4:58:5f:e5:15:1c:bd:e4:5d:
         93:37:57:db:14:48:4e:ad:db:82:ea:16:d4:81:b7:45:43:dc:
         42:47:5c:93:a4:86:e9:4f:75:0b:85:ba:8e:e1:78:96:12:89:
         2f:e0:07:05:23:ef:eb:b9:04:ea:d7:a0:2f:6e:30:1c:70:86:
         3b:1f:20:55:ca:af:6d:7b:80:c7:b6:51:9b:d9:98:dd:71:64:
         b0:e9:07:46:0a:d8:0a:00:d2:3e:10:80:51:0b:d4:49:eb:62:
         ef:da:3c:66:9d:51:11:19:a1:3c:43:8e:d8:3e:d1:e2:5e:61:
         c2:c3:fe:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:55:45 2026 by rpki-client