Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa
File:                     32332e3136302e34302e302f32342d3234203d3e203236313935.roa (raw, json)
Hash identifier:          iAY/0w9um1fn+9vfOaNJ3h6vt0kGlYGP0Iu7m7HqoeI=
Subject key identifier:   66:28:2E:E4:7C:E9:EF:5F:96:EE:9D:DA:E6:A5:27:38:EC:51:1E:F0
Certificate issuer:       /CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
Certificate serial:       01B027F59F59CF069743B4E3FC801BFF1263B8D9
Authority key identifier: 27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa
Signing time:             Wed 10 Sep 2025 19:06:20 +0000
ROA not before:           Wed 10 Sep 2025 19:01:20 +0000
ROA not after:            Wed 09 Sep 2026 19:06:20 +0000
asID:                     26195
IP address blocks:        23.160.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 15:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b0:27:f5:9f:59:cf:06:97:43:b4:e3:fc:80:1b:ff:12:63:b8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
        Validity
            Not Before: Sep 10 19:01:20 2025 GMT
            Not After : Sep  9 19:06:20 2026 GMT
        Subject: CN=66282EE47CE9EF5F96EE9DDAE6A52738EC511EF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:a0:46:47:06:81:bc:07:c8:60:cd:c4:06:
                    12:11:92:71:9c:36:9f:61:ec:72:39:10:2a:a1:ae:
                    b0:d8:66:52:c3:9d:a7:78:60:9b:43:7a:ab:29:d8:
                    80:8a:6e:95:e9:9a:56:b5:1c:3d:1e:8d:a6:9b:0e:
                    aa:e3:ac:9f:e2:f3:8c:74:53:6d:ee:a8:5e:10:bf:
                    6b:37:48:d3:88:8c:04:f4:fb:ee:85:67:19:61:c3:
                    e8:3e:77:29:76:ce:60:e7:25:7b:48:db:22:ad:55:
                    d7:a2:32:2e:63:6d:1c:e1:21:e1:ad:ce:9a:50:bd:
                    f8:e5:f3:ed:90:3f:a2:c7:17:a9:4b:23:d4:44:db:
                    8a:18:00:e3:99:92:4b:3f:b7:45:79:2a:3d:87:82:
                    72:ac:e2:65:89:2f:f6:3f:9e:a1:0b:c4:d8:94:35:
                    fa:4b:e4:10:65:75:2c:e5:ca:62:02:4d:02:31:69:
                    75:b5:50:a3:bf:ce:aa:6c:bb:46:20:74:bc:a3:02:
                    4e:1f:5c:4a:a8:5d:22:7e:65:57:a2:24:d7:6c:e4:
                    2a:c9:ac:bf:d6:e0:46:5d:43:37:59:52:d9:e3:8b:
                    c9:e2:60:e7:5b:69:d8:21:bd:d1:3f:5c:dc:28:a4:
                    05:96:a3:2b:b3:6a:43:3e:c6:41:ee:35:4d:66:5d:
                    de:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:28:2E:E4:7C:E9:EF:5F:96:EE:9D:DA:E6:A5:27:38:EC:51:1E:F0
            X509v3 Authority Key Identifier:
                keyid:27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/32332e3136302e34302e302f32342d3234203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:e2:36:b4:9c:fc:78:26:df:91:be:bc:a7:54:bc:38:32:0a:
         f8:5b:cb:61:27:a6:16:67:7a:d9:70:71:39:ae:91:3e:9a:f7:
         f2:76:b0:ff:b2:6d:15:f8:23:b3:e2:f0:f1:1c:28:7a:32:13:
         1c:23:0a:dc:a3:40:5e:3b:4a:35:b2:d5:36:94:52:76:69:f7:
         13:a6:5c:91:5a:4e:d4:45:83:bf:b2:30:e5:91:ed:b9:b1:71:
         9d:7a:c9:92:e6:27:7f:a5:bb:46:94:c3:ae:22:4e:41:3d:6a:
         fa:b7:4a:65:2c:6e:cd:66:ef:a3:df:84:46:03:a2:d4:c2:03:
         b2:b0:de:61:7d:54:2a:c5:dd:88:28:60:03:80:2c:9f:a3:62:
         ae:b3:47:fb:83:63:5a:50:20:1a:35:d3:c1:3c:09:d2:2a:3a:
         cc:73:ce:60:76:e3:58:ca:e4:cc:57:ec:bb:4f:1e:fd:05:12:
         c4:d5:79:25:de:be:22:45:a5:37:35:85:60:0e:c2:33:41:d1:
         8a:04:95:46:46:79:5a:cd:f6:d9:f3:35:70:1e:e9:d9:4b:6c:
         21:a8:0d:35:a1:17:1b:a1:d6:7b:e7:70:2d:e2:e3:8f:b1:ec:
         f1:36:b9:60:4b:5c:ce:f1:6b:5c:9b:90:e1:34:54:a7:3b:f7:
         a0:ed:01:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:48:50 2025 by rpki-client