Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f32312d3234203d3e20323634363831.roa
File:                     32332e38382e3232342e302f32312d3234203d3e20323634363831.roa (raw, json)
Hash identifier:          KuhcZ+wGCS1UItoXDb9+fdIadQC3gHEtdimX7r9upm4=
Subject key identifier:   CF:D9:93:68:7E:D8:32:27:60:A0:AD:2A:B3:A9:98:0E:FF:07:17:19
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5F6242729DF610AC6B5607FBCF9A6C9C15615509
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f32312d3234203d3e20323634363831.roa
Signing time:             Fri 25 Sep 2026 12:18:57 +0000
ROA not before:           Fri 25 Sep 2026 12:13:57 +0000
ROA not after:            Fri 24 Sep 2027 12:18:57 +0000
asID:                     264681
IP address blocks:        23.88.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:42:72:9d:f6:10:ac:6b:56:07:fb:cf:9a:6c:9c:15:61:55:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 25 12:13:57 2026 GMT
            Not After : Sep 24 12:18:57 2027 GMT
        Subject: CN=CFD993687ED8322760A0AD2AB3A9980EFF071719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:54:6c:7f:5b:02:89:06:48:5c:cf:33:51:
                    a1:c5:a2:b0:1f:26:8c:5e:0a:3c:5e:36:35:f7:f2:
                    73:8d:fe:83:c4:c6:55:29:de:2a:d0:bc:5c:d9:a7:
                    8c:e1:88:04:4f:16:2c:7f:e6:04:b5:1a:16:24:07:
                    17:69:c5:81:75:cf:96:24:44:a1:cd:49:c5:9b:5f:
                    e9:3e:f6:f0:8f:11:7c:d1:9e:c5:cc:ad:b4:ae:96:
                    4d:ad:04:89:38:57:21:ab:15:3a:27:8b:df:e6:2b:
                    f1:92:83:4d:13:cc:48:2d:46:f9:a1:94:0b:c8:a6:
                    0e:86:ec:0f:bd:e8:6a:cd:b7:2f:07:4a:bf:31:f1:
                    31:f7:59:54:15:d1:2f:f7:4b:f8:4d:62:97:2b:38:
                    ae:ed:0b:45:df:3b:24:54:ea:69:b3:27:42:76:1a:
                    a2:c0:bc:5f:98:54:b3:f6:00:a8:99:31:68:0d:1f:
                    ef:ff:1d:f7:72:5a:6c:9f:d2:56:49:c3:22:8e:68:
                    4d:07:ad:9c:91:b7:1e:76:a5:cc:57:5b:3e:70:4d:
                    c0:ba:02:c2:39:8d:e1:01:d4:b8:2e:ca:6d:7c:5f:
                    84:ca:ee:1c:eb:35:9f:84:88:16:4b:8d:87:2c:d3:
                    12:fb:e0:72:6f:41:05:5c:a2:87:5f:0d:a8:c7:ba:
                    36:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:93:68:7E:D8:32:27:60:A0:AD:2A:B3:A9:98:0E:FF:07:17:19
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f32312d3234203d3e20323634363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:c5:c6:c5:07:2d:77:37:2c:85:96:c6:78:db:49:ca:f6:
         0b:87:c6:0f:27:c2:64:ad:2c:ad:fb:ac:bd:19:49:f5:21:a4:
         10:f2:8b:51:4c:25:c4:e2:e9:84:92:95:25:d0:b6:1e:5a:ed:
         c9:fb:9f:2b:6c:00:96:ef:77:ae:9b:fa:fa:68:73:a0:cf:01:
         51:d1:10:77:89:82:80:98:7c:93:ec:97:5c:a3:a0:20:4b:3c:
         13:da:c6:97:2c:29:f3:d0:6a:49:29:cb:c5:fd:b0:ac:42:63:
         59:56:52:f1:e6:6d:8c:d7:b0:73:d9:85:ca:c0:80:a7:18:41:
         6c:73:0c:5e:1e:67:2c:e2:3b:e3:85:e2:ca:06:31:ac:b4:5b:
         c9:b3:23:75:d6:92:5b:f6:e9:02:65:14:0a:70:50:61:80:6e:
         aa:c6:04:de:ef:76:ac:b9:67:95:6a:b4:05:87:34:3f:22:35:
         0b:9e:af:84:98:7e:69:8a:c9:81:82:5c:16:ca:c8:29:22:cf:
         f1:6e:bf:48:c4:d5:0a:c0:c1:49:2f:43:a0:0b:11:e9:dc:5d:
         a2:5e:3c:55:9c:53:11:23:4b:51:7e:04:07:e1:9a:de:97:84:
         f9:41:ba:5b:bb:f1:3e:eb:a7:cd:cb:dc:cd:7d:66:c5:c0:90:
         11:ff:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:24:53 2026 by rpki-client