Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234392e302f32342d3234203d3e20313532363036.roa
File:                     32332e38382e3234392e302f32342d3234203d3e20313532363036.roa (raw, json)
Hash identifier:          BTgOK9f2PYF1SVwRsx1WKuIsgCEnrMtob3mSG9jSUBY=
Subject key identifier:   AA:12:90:B6:BA:4D:6F:32:39:AF:FC:A2:93:14:3B:C6:68:44:EF:A4
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       377E00A8B98035702F56269161D050D3CDDD2D91
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234392e302f32342d3234203d3e20313532363036.roa
Signing time:             Sat 31 Oct 2026 17:27:53 +0000
ROA not before:           Sat 31 Oct 2026 17:22:53 +0000
ROA not after:            Sat 30 Oct 2027 17:27:53 +0000
asID:                     152606
IP address blocks:        23.88.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 09:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7e:00:a8:b9:80:35:70:2f:56:26:91:61:d0:50:d3:cd:dd:2d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 31 17:22:53 2026 GMT
            Not After : Oct 30 17:27:53 2027 GMT
        Subject: CN=AA1290B6BA4D6F3239AFFCA293143BC66844EFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:00:1a:e8:60:e3:4b:3d:71:ff:5d:27:c3:
                    2c:b6:53:ce:c7:e0:64:1c:e7:d2:b2:56:4a:1c:92:
                    d3:70:85:41:e2:c3:29:1b:35:87:15:72:51:0c:15:
                    79:95:ed:f0:20:82:80:d8:c9:e5:58:1a:3c:f4:7f:
                    cf:49:46:ef:77:8a:6c:70:a2:f1:16:c0:67:3b:f7:
                    61:19:c0:f0:2f:1b:84:e7:8e:2d:07:0a:e9:20:4e:
                    b4:89:b9:e3:66:2c:7f:7b:35:f6:9b:ea:26:48:db:
                    c7:e6:23:86:19:50:7f:4c:56:6a:09:c9:38:11:5d:
                    62:13:d0:38:2b:8c:7e:c1:49:b7:ef:5f:fa:e4:a1:
                    43:8c:0e:89:78:a1:69:ee:1b:20:e0:47:9e:b5:9c:
                    05:75:e6:e0:54:e4:28:af:1d:b6:e8:cb:07:18:a9:
                    8c:82:33:43:ce:a8:25:0a:f8:5e:c3:be:5c:2d:79:
                    74:a7:cb:40:c3:c5:3a:29:a7:91:e3:89:be:a9:c0:
                    85:66:6c:c3:7c:b1:a9:20:77:99:4e:a0:83:2c:df:
                    b5:b7:c6:fd:e1:21:51:04:d8:32:e3:a3:3c:16:d7:
                    b7:06:78:06:4c:81:d6:7b:fa:de:83:12:94:8b:03:
                    cd:76:2e:b5:65:a9:43:00:0d:1c:83:e1:64:46:2a:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:12:90:B6:BA:4D:6F:32:39:AF:FC:A2:93:14:3B:C6:68:44:EF:A4
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234392e302f32342d3234203d3e20313532363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ef:f5:98:e5:8f:55:e5:70:9f:e2:0c:31:89:1b:db:88:b1:
         8b:60:9f:64:e8:0a:a6:0e:59:c7:54:f0:a0:72:44:fe:a7:f1:
         66:f3:21:6a:37:55:90:3d:84:90:7e:46:77:30:16:32:94:60:
         6a:54:5a:66:e5:bc:3d:18:44:2a:12:84:aa:2a:8b:89:c4:13:
         c9:f4:d5:9b:ae:93:73:ee:ff:c3:c0:06:1d:a9:52:3c:04:65:
         0f:ce:a6:e3:e2:70:c6:60:25:bb:64:44:88:a3:19:dd:6e:12:
         85:da:77:2c:64:3c:3e:41:96:c0:60:c8:c8:76:a6:d3:4f:2d:
         a0:a7:bd:3d:8e:60:f6:a8:a6:b3:5a:dc:71:11:ed:3d:3f:a1:
         39:b8:8d:5b:cf:1b:c1:24:8c:12:79:75:1e:8a:2b:fc:1e:db:
         70:5f:11:75:0b:70:3a:12:d3:1a:2d:91:86:48:33:76:ac:75:
         26:30:4b:de:a7:e9:1c:16:11:ed:da:07:84:e4:61:ba:ae:11:
         ed:ce:22:62:05:b3:08:51:f9:c1:73:74:7c:1e:10:47:d9:7c:
         53:09:25:1a:bc:d7:aa:66:47:33:50:7d:2f:17:a5:3a:f1:47:
         27:8e:cc:6b:13:60:ee:16:21:61:38:97:9d:c3:11:d1:02:4a:
         c0:e7:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:12:18 2026 by rpki-client