Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234372e302f32342d3234203d3e20313532363036.roa
File:                     32332e38382e3234372e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier:          1O6rKjZq4EvE3vijSw7I6kw3qGErr8wx0a4jJkDGFlc=
Subject key identifier:   8B:3D:87:22:BE:70:B8:81:5D:4E:36:DB:DA:E1:8D:67:75:DB:94:36
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       40197846C860D8F0F861E797AC6DEA383463F4A9
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234372e302f32342d3234203d3e20313532363036.roa
Signing time:             Sat 24 Oct 2026 17:16:11 +0000
ROA not before:           Sat 24 Oct 2026 17:11:11 +0000
ROA not after:            Sat 23 Oct 2027 17:16:11 +0000
asID:                     152606
IP address blocks:        23.88.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:19:78:46:c8:60:d8:f0:f8:61:e7:97:ac:6d:ea:38:34:63:f4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 24 17:11:11 2026 GMT
            Not After : Oct 23 17:16:11 2027 GMT
        Subject: CN=8B3D8722BE70B8815D4E36DBDAE18D6775DB9436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:85:0d:cc:6a:c2:01:2f:c6:bd:4b:0e:30:
                    6f:69:bd:c0:4a:74:97:91:ff:70:98:4e:ea:af:b6:
                    4e:48:fd:b8:e3:c9:2e:36:bc:61:17:3e:6d:5d:b2:
                    d8:cf:32:d3:ab:c6:b2:fb:b2:9a:e5:6a:1e:21:53:
                    0d:a7:8e:4d:09:87:ac:35:cb:80:74:cd:d7:fa:76:
                    47:39:2d:94:ce:8e:d1:9d:3e:51:1d:4a:47:75:bd:
                    9f:83:54:59:86:1c:7f:4f:c9:a5:22:86:f2:91:67:
                    13:e8:b1:7e:a6:8b:ca:ae:90:2b:01:54:7a:ad:88:
                    48:fd:ab:17:25:81:17:f7:10:2f:96:69:ef:1a:dd:
                    01:fd:f2:44:01:a9:44:d5:fe:a1:72:b1:88:9a:69:
                    e6:d0:1b:36:68:87:c4:c1:31:db:3c:70:a1:e6:b7:
                    2a:74:65:1b:00:a9:a4:05:67:cc:bf:0c:d8:4a:37:
                    2a:1c:f2:af:6a:45:6b:5a:f9:0c:29:50:b5:62:c8:
                    c4:38:16:02:2c:d5:fd:eb:40:e9:a8:9e:f1:19:5b:
                    a1:b8:3c:ff:ed:b3:1d:19:e0:1a:ff:67:7f:78:cc:
                    12:3c:9b:33:22:5c:e7:57:a5:32:e0:12:94:80:c5:
                    38:65:95:0d:3f:18:1a:12:37:d6:70:08:e4:5b:d2:
                    02:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3D:87:22:BE:70:B8:81:5D:4E:36:DB:DA:E1:8D:67:75:DB:94:36
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234372e302f32342d3234203d3e20313532363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:1f:74:22:c0:c4:06:6b:95:44:69:dd:4e:53:df:60:3f:
         b6:40:dc:c6:a6:88:9e:57:a3:ba:7b:20:e1:a5:c7:27:e6:67:
         5a:52:ae:45:4e:7f:88:56:5b:3e:2e:10:4f:49:a1:76:62:99:
         0a:27:34:d2:8a:f8:45:a7:d7:dc:09:09:fa:bf:49:cc:2b:01:
         0e:b9:b1:24:bf:6a:dd:00:01:53:e1:2e:61:2b:bb:7f:96:fc:
         79:2c:bb:49:a5:f9:38:b0:25:0a:27:aa:f9:32:6f:09:a5:39:
         83:75:87:4a:a7:2a:49:61:2f:6b:c0:29:6c:da:61:d0:94:4a:
         26:47:78:66:c7:39:a0:23:0f:bb:e9:0c:77:73:7e:26:5e:fb:
         ed:f5:89:81:89:8e:fd:7f:87:13:b7:38:c1:94:22:70:5c:02:
         66:4c:55:7f:f1:19:0f:f9:9f:07:46:65:b2:cc:07:b3:cf:6f:
         3d:7e:67:90:f9:3f:c3:93:50:5f:65:5c:ee:ea:d4:f0:fe:27:
         d5:5e:a2:9d:d9:da:7c:f4:0a:5b:84:f7:2b:49:e9:79:6f:33:
         f8:8d:74:08:60:95:a6:c0:80:ef:29:11:23:8e:0b:0d:b5:6d:
         5c:d6:ed:10:84:b4:86:7e:56:30:e9:21:86:c7:a5:87:a8:9a:
         1f:a9:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:39 2026 by rpki-client