Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e203534313438.roa
File:                     32332e3136302e3135322e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          Oefjjwc7ZqeOflW+PvZjwb1OXVoFwGvbOZiKZZchhgE=
Subject key identifier:   E8:3B:5C:31:74:5E:4B:D3:A3:78:C5:7F:CE:31:94:E0:C0:9C:98:09
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       78004B900A6482BBF93897C3AD3C4E57B72900A8
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e203534313438.roa
Signing time:             Thu 25 Sep 2025 21:45:12 +0000
ROA not before:           Thu 25 Sep 2025 21:40:12 +0000
ROA not after:            Thu 24 Sep 2026 21:45:12 +0000
asID:                     54148
IP address blocks:        23.160.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:00:4b:90:0a:64:82:bb:f9:38:97:c3:ad:3c:4e:57:b7:29:00:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Sep 25 21:40:12 2025 GMT
            Not After : Sep 24 21:45:12 2026 GMT
        Subject: CN=E83B5C31745E4BD3A378C57FCE3194E0C09C9809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:63:8a:21:f3:1d:d5:05:fb:de:36:32:9e:
                    b5:2a:08:4a:66:6c:4f:3c:ba:4a:91:4f:4c:3a:db:
                    01:d5:dc:88:88:66:5d:7c:31:d7:8b:23:70:51:19:
                    16:46:1e:77:7f:8f:74:4a:23:00:9e:a4:03:e0:f6:
                    82:3d:50:f2:a3:03:3a:11:ab:88:d3:91:e4:96:6d:
                    78:13:d5:14:ac:b2:65:ae:46:a5:7c:7a:23:fb:0a:
                    31:ab:e7:6b:5d:33:39:fb:e7:6c:46:b9:18:ef:02:
                    04:50:02:9c:87:4c:81:86:cf:8b:70:35:0d:84:21:
                    fe:c1:97:da:d2:1f:b0:d6:bf:47:5c:f4:23:71:9c:
                    22:c6:c3:c4:63:0b:7c:90:28:0b:86:85:d4:57:67:
                    ab:34:63:55:fd:36:a3:2b:2c:fe:6d:3c:02:4d:dd:
                    c7:4e:96:b1:6e:13:96:eb:f2:a9:b4:0e:22:a9:a3:
                    d3:73:54:54:2e:c0:02:99:b1:76:7f:8e:ea:78:25:
                    1e:90:b0:14:89:ca:dd:cf:85:3f:6a:57:ad:13:1c:
                    47:74:66:33:df:fb:be:1e:f2:41:5a:ad:c2:b6:21:
                    da:59:62:d2:de:13:08:f2:36:96:fd:97:a1:fc:9e:
                    5c:19:b8:53:80:9e:0f:84:ea:d4:9a:b4:2f:d2:a1:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3B:5C:31:74:5E:4B:D3:A3:78:C5:7F:CE:31:94:E0:C0:9C:98:09
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/32332e3136302e3135322e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:36:69:36:b0:ca:11:98:11:60:f8:f5:67:31:07:8f:5d:
         75:85:2c:8c:16:0d:0f:a2:b6:37:36:c9:c0:05:64:01:60:70:
         94:75:fc:97:7e:80:e7:fc:0a:a6:0c:04:55:86:62:62:8d:e9:
         d3:40:e9:ac:e6:5e:ed:3b:34:8c:be:3b:1e:06:28:b2:6e:e5:
         50:01:3d:1e:3e:dd:2c:1c:34:24:e0:39:0a:4c:84:24:06:a2:
         56:46:c6:38:ee:c8:25:2f:88:ba:8a:1e:9a:3e:79:12:03:c2:
         a1:0d:20:d2:f3:aa:49:14:a4:37:4c:f0:e6:4d:01:3b:a1:ef:
         a6:27:8a:8a:e0:4e:d5:79:58:23:95:1c:71:fb:18:fe:54:07:
         bd:b1:48:ed:0b:09:39:af:00:46:9b:5c:ec:72:2c:18:f5:ae:
         b0:56:24:8b:c9:36:08:3a:09:e8:56:e8:f2:a8:68:a3:05:78:
         1c:44:93:4c:45:89:72:e1:6b:e4:ec:f1:3b:bc:82:4b:40:34:
         16:d4:92:74:16:4b:7b:bd:61:58:88:b3:5f:2d:90:c6:41:d5:
         35:58:45:8c:0c:67:68:92:e2:3a:15:a6:32:8a:5f:cb:46:54:
         05:fc:19:ff:13:75:86:87:ab:52:d3:e5:32:77:e8:6c:a4:25:
         c9:5e:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:30 2025 by rpki-client