Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136362e302f32342d3234203d3e203534323836.roa
File:                     32332e3234362e3136362e302f32342d3234203d3e203534323836.roa (raw, json)
Hash identifier:          LGTTDw9nItbJrimuiZO45gyYFnY6jFj/CwexBQZ4Gjs=
Subject key identifier:   4C:F6:63:ED:69:AA:D0:28:81:B0:82:07:C4:4A:68:5A:0D:80:44:67
Certificate issuer:       /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial:       437E3943CF673DD2C964781340376E1BF6D134F1
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136362e302f32342d3234203d3e203534323836.roa
Signing time:             Wed 12 Aug 2026 12:23:06 +0000
ROA not before:           Wed 12 Aug 2026 12:18:06 +0000
ROA not after:            Wed 11 Aug 2027 12:23:06 +0000
asID:                     54286
IP address blocks:        23.246.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7e:39:43:cf:67:3d:d2:c9:64:78:13:40:37:6e:1b:f6:d1:34:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
        Validity
            Not Before: Aug 12 12:18:06 2026 GMT
            Not After : Aug 11 12:23:06 2027 GMT
        Subject: CN=4CF663ED69AAD02881B08207C44A685A0D804467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:05:0c:29:d9:d5:d1:3a:1a:25:83:3f:56:36:
                    44:f8:59:10:f8:89:32:37:2f:24:40:b2:9b:cb:97:
                    68:c9:d3:3a:f7:d8:7d:84:53:44:4c:28:fe:6d:a2:
                    1b:91:09:f5:eb:99:81:fe:d4:25:21:7a:11:f9:47:
                    4a:49:1b:5f:2c:65:92:98:41:5a:ac:ee:00:d1:1a:
                    5a:fc:5e:96:ba:61:ae:c9:17:7f:5f:43:ab:ae:f9:
                    fe:29:e1:7a:54:63:e6:34:9a:27:d6:c9:9b:f7:dd:
                    4b:3c:a3:dc:9d:cd:c7:89:e6:56:44:16:99:9a:02:
                    d7:eb:3c:db:26:f1:fb:23:af:b6:f3:37:cb:30:5f:
                    8b:27:f2:1b:38:d9:8b:bd:1c:ee:49:4c:82:31:69:
                    b0:ee:d4:28:cc:80:13:5e:20:33:cd:8f:81:1a:d2:
                    1f:9a:23:c6:7a:cc:0f:b4:d1:e6:b5:58:b6:02:aa:
                    e2:85:c2:f8:de:06:dc:e9:2c:20:0e:c0:9e:24:84:
                    44:75:03:44:b2:fd:ee:79:a3:cc:b8:36:8b:c2:3c:
                    3b:95:ed:2f:a9:d6:f9:e0:3c:32:ee:2b:2f:4d:6b:
                    05:fc:b8:8d:08:38:79:a0:9e:22:a4:b9:70:3b:2e:
                    ae:88:ee:f3:c3:45:ac:a7:cc:6b:3a:55:3d:30:d2:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F6:63:ED:69:AA:D0:28:81:B0:82:07:C4:4A:68:5A:0D:80:44:67
            X509v3 Authority Key Identifier:
                keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136362e302f32342d3234203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.246.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:8d:f0:dc:4c:3b:6a:0b:c0:d6:de:34:09:50:22:d6:fc:29:
         3e:18:4b:eb:b7:30:2c:86:42:62:50:52:59:47:23:82:f0:3c:
         84:fd:f5:37:0a:6a:6b:42:96:af:b9:5e:c5:03:e8:f9:f3:10:
         d6:74:25:d7:2e:21:d3:21:9e:a0:86:35:3c:7a:4c:36:0b:c5:
         4e:9b:0b:96:14:80:20:a4:af:40:2f:72:01:01:f1:64:0a:c5:
         01:6e:6b:22:bc:14:68:9f:a2:15:0e:92:8e:de:5f:c5:80:60:
         a1:8a:c7:2f:e1:98:df:c7:35:2d:c6:c4:20:67:40:87:70:ff:
         c3:87:cf:fa:9f:a9:60:24:1c:89:70:86:18:10:e6:1e:b4:d8:
         8d:b9:b4:5d:0c:04:56:eb:82:c3:b5:af:0e:88:8a:9d:d1:1f:
         9f:37:cb:01:cc:45:d2:db:f1:3b:eb:c5:65:b3:e1:e2:59:6f:
         64:eb:55:6d:2c:7d:b4:3c:7f:2d:a8:9c:a1:ff:81:df:30:4e:
         43:03:60:ee:56:a4:2e:c5:ef:df:ac:48:22:a0:c2:6c:5f:63:
         82:fb:ef:a8:07:50:b0:5d:4a:b4:9a:44:2e:b8:fc:84:22:e9:
         81:a7:6e:ac:55:05:69:b0:f8:de:fe:72:7a:39:c5:c6:85:f8:
         d9:1d:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:49:55 2026 by rpki-client