Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234382e302f32342d3234203d3e20343032363731.roa
File:                     32332e38382e3234382e302f32342d3234203d3e20343032363731.roa (raw, json)
Hash identifier:          nAwzXzYMWhmZy55HWbOnR7zFMSKJbzuyoLR810Smb4w=
Subject key identifier:   58:8A:D6:2D:8B:56:C5:C1:DE:3E:F8:37:EB:3B:01:07:2A:D6:9D:C3
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       26A74F3EEBA697D694B317AA7BE06C7B9075EC44
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234382e302f32342d3234203d3e20343032363731.roa
Signing time:             Fri 30 Oct 2026 11:57:49 +0000
ROA not before:           Fri 30 Oct 2026 11:52:49 +0000
ROA not after:            Fri 29 Oct 2027 11:57:49 +0000
asID:                     402671
IP address blocks:        23.88.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a7:4f:3e:eb:a6:97:d6:94:b3:17:aa:7b:e0:6c:7b:90:75:ec:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 30 11:52:49 2026 GMT
            Not After : Oct 29 11:57:49 2027 GMT
        Subject: CN=588AD62D8B56C5C1DE3EF837EB3B01072AD69DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e2:05:c2:5e:0e:ca:21:4d:03:d2:8f:6b:e1:
                    5e:7f:98:09:5a:fb:c0:c6:91:96:e2:16:d1:3d:ff:
                    01:97:0e:de:3c:da:65:da:3f:3a:08:f0:71:12:dd:
                    4f:7d:3b:fc:93:6a:db:90:c3:c5:ca:02:74:ba:2e:
                    6c:e1:e4:8e:74:e0:9b:29:47:e1:2f:55:a0:bb:4a:
                    3c:ad:3e:83:e2:bd:16:5d:eb:b3:cd:3a:fd:63:c8:
                    d1:ad:1a:1e:d5:90:c6:b0:b7:17:6f:4e:c8:90:c3:
                    37:0e:89:1c:49:ea:24:40:01:3c:1b:b8:5a:7f:8d:
                    d7:31:c2:d5:c6:1b:19:97:2a:4f:f2:fb:44:9a:38:
                    08:01:4b:ce:b1:0e:c6:d3:09:5c:57:51:89:5e:63:
                    ba:5f:03:cb:72:53:85:fd:4d:d4:c5:9a:9f:ca:13:
                    a5:33:ff:d4:b6:40:43:65:68:15:b8:49:cb:97:f5:
                    35:4b:d2:7c:4a:0f:e5:bb:d9:0c:ef:f8:0d:63:13:
                    51:64:02:c0:47:0a:a1:b9:f8:3f:de:ff:47:fc:33:
                    b0:65:ca:09:08:dd:2a:db:29:7e:00:47:3d:30:47:
                    d6:03:2a:76:5c:c9:d4:c9:c6:cb:2c:4c:76:23:4d:
                    bc:ca:a3:f2:45:d0:33:f8:a7:fa:7a:a9:ad:1f:ff:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8A:D6:2D:8B:56:C5:C1:DE:3E:F8:37:EB:3B:01:07:2A:D6:9D:C3
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234382e302f32342d3234203d3e20343032363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2e:87:ae:16:35:9e:3e:cb:c6:46:4e:b1:ac:42:09:7b:c1:
         44:34:16:d4:c5:0b:18:a6:48:cc:b0:72:07:35:3c:0e:57:f4:
         2a:be:d7:7e:be:23:3c:65:17:4a:19:30:3a:ba:ca:64:87:33:
         2f:f2:2d:76:bc:cc:8d:bb:48:71:63:23:c1:70:4c:a1:15:a7:
         50:bf:81:7e:d6:31:e2:62:14:09:90:9b:42:49:98:69:b0:fb:
         7d:85:e0:eb:12:36:39:dd:3c:a6:3b:36:8b:62:40:0a:bb:d8:
         78:b8:bc:1a:0b:65:4f:8b:69:6d:e3:15:19:f0:47:5d:f7:86:
         bf:5e:11:c4:d5:df:ff:80:d8:e7:ff:03:6b:71:50:87:65:71:
         fb:ee:ea:8f:f7:10:b5:b1:22:e6:44:1a:a8:45:80:48:9b:c4:
         af:24:a6:0e:88:19:5e:2c:3b:86:29:d4:e5:14:dc:53:15:54:
         ce:c1:64:60:42:b2:e9:7a:85:c3:0a:db:0a:8e:b3:a6:b0:b0:
         78:0d:46:16:94:3f:a3:63:5f:7d:14:26:d6:02:e1:be:e6:a9:
         90:bd:80:7f:09:59:ce:f8:d2:ca:cc:35:93:cb:e0:60:bc:b3:
         c7:0c:f9:3a:af:04:b9:f8:14:ce:bc:82:90:64:06:60:fe:b7:
         b0:03:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:22:11 2026 by rpki-client