Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234322e302f32342d3234203d3e203536363535.roa
File:                     32332e38382e3234322e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          1SDL30q5agwWOdEu5LGi8UFpEFBg1XC3qW+bDcEZDCI=
Subject key identifier:   21:98:8D:81:E5:48:6F:47:D1:98:6F:DE:82:21:11:7C:5A:F0:3F:F7
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       66AC14E1617A6DCE4A2C549CAF4A0CD634AFAB95
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234322e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:36:59 +0000
ROA not before:           Fri 23 Oct 2026 12:31:59 +0000
ROA not after:            Fri 22 Oct 2027 12:36:59 +0000
asID:                     56655
IP address blocks:        23.88.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 13:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ac:14:e1:61:7a:6d:ce:4a:2c:54:9c:af:4a:0c:d6:34:af:ab:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 23 12:31:59 2026 GMT
            Not After : Oct 22 12:36:59 2027 GMT
        Subject: CN=21988D81E5486F47D1986FDE8221117C5AF03FF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:dd:8d:9c:3c:b9:16:b2:bb:41:05:c1:ff:8c:
                    1d:59:dd:eb:3a:73:56:ba:41:92:86:1a:14:f6:ad:
                    86:71:b5:ea:34:4b:10:a4:5f:e4:d3:b1:19:b6:c9:
                    c4:07:4c:2e:3b:c6:d4:6c:02:39:3a:72:f7:70:eb:
                    f8:ad:00:64:64:77:9f:a4:30:aa:6a:3e:b4:7f:0f:
                    c1:54:2b:51:c2:ad:e9:71:21:c0:57:7d:5c:7f:ce:
                    4d:3a:70:4a:28:9e:4a:bb:a6:8a:db:b4:45:c8:06:
                    ba:b9:8b:89:77:24:5c:09:af:ff:f6:0a:f2:5e:5f:
                    de:d9:45:7b:f1:ba:6a:7b:74:ae:3e:32:f7:fb:c9:
                    d7:3b:a9:3c:8a:9c:55:51:86:83:6a:97:a2:b3:7d:
                    3a:78:28:60:f6:2b:82:f9:db:31:a8:fe:30:b7:d0:
                    6a:fc:51:90:3a:20:21:10:31:8e:60:dd:df:72:86:
                    7e:a5:89:bb:e6:aa:57:74:27:38:bb:36:a8:8b:1d:
                    5f:6e:f4:43:40:de:50:e4:7c:06:05:55:c5:37:df:
                    ec:74:70:76:df:6c:a8:37:6f:42:5c:68:2a:65:9f:
                    30:ff:40:b7:68:ec:10:a3:81:15:d7:28:48:67:f1:
                    75:30:c5:47:59:4d:f9:1a:aa:d1:e6:78:a3:f4:00:
                    26:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:8D:81:E5:48:6F:47:D1:98:6F:DE:82:21:11:7C:5A:F0:3F:F7
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234322e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:05:be:f6:23:ec:53:8f:d2:50:f7:35:19:37:58:06:0d:71:
         b1:aa:7a:15:20:97:fa:c5:3a:09:65:93:c2:e7:ce:1d:9e:a0:
         0c:1e:ba:ed:2e:2a:b9:ca:7b:35:4d:d5:04:2d:99:43:82:95:
         f7:ae:f1:05:a0:65:94:47:85:73:44:02:c6:0e:d0:fc:8f:c8:
         d9:a2:e7:6c:10:d3:15:14:68:f4:23:b2:2a:73:6f:a8:09:d2:
         28:36:27:34:ae:4a:e1:f0:62:0c:53:c4:0d:d6:cc:2c:20:c4:
         61:84:d2:37:97:d0:d3:5d:22:b9:d2:b5:55:24:af:06:ad:78:
         62:a3:da:f4:b7:30:9f:4b:86:52:b8:be:5a:61:50:f5:81:52:
         af:ef:3b:10:4b:b5:fa:f4:6d:b1:3f:2f:32:e7:72:3f:9d:0c:
         2b:28:ef:b0:05:2a:36:ae:ac:b7:ed:82:a2:6c:67:2f:a0:23:
         6e:15:33:9f:a8:85:1b:7c:11:64:6a:fd:63:e7:71:95:db:6d:
         5d:a9:75:8c:8d:e8:5f:f3:a6:05:19:87:c8:6d:c7:18:4d:59:
         a9:2a:65:c9:25:0f:c1:e8:47:56:5c:07:7c:b7:fc:79:6d:15:
         0e:d9:20:56:a9:b0:f2:5e:e9:2f:f2:20:c1:e6:ee:2c:d5:30:
         d5:70:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:04 2026 by rpki-client