Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
File:                     32332e3138362e3138342e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier:          +f3DZsqGG7g9SBdDu+I2V/Nqh4EqJPfm11R+C+dCuxE=
Subject key identifier:   50:EF:52:83:A2:B6:B9:BF:1C:43:CF:C4:AC:78:AA:B3:67:D8:A6:14
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       6138E0EE9B43FEFEE64B2D1CBD1437D2CFAA0823
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa
Signing time:             Sun 19 Oct 2025 01:18:51 +0000
ROA not before:           Sun 19 Oct 2025 01:13:51 +0000
ROA not after:            Sun 18 Oct 2026 01:18:51 +0000
asID:                     11358
IP address blocks:        23.186.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:38:e0:ee:9b:43:fe:fe:e6:4b:2d:1c:bd:14:37:d2:cf:aa:08:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Oct 19 01:13:51 2025 GMT
            Not After : Oct 18 01:18:51 2026 GMT
        Subject: CN=50EF5283A2B6B9BF1C43CFC4AC78AAB367D8A614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8f:57:6d:cb:98:e9:ce:0a:94:d0:b7:b1:ce:
                    61:25:6d:7d:d4:64:cc:69:c2:e8:fa:af:71:7d:b5:
                    38:d7:f2:bd:e0:91:50:53:ca:68:fe:5a:b6:0c:e8:
                    73:7d:26:43:0d:ef:f2:14:2d:2a:99:00:1a:74:f7:
                    de:7e:24:48:c6:25:3e:3a:58:ac:f6:72:0e:58:89:
                    a4:65:d1:86:90:9a:a0:2d:8d:00:a5:74:67:fd:79:
                    bc:fb:73:8f:3d:58:ae:b2:3a:f1:10:8d:34:fc:cc:
                    ca:6a:aa:58:a8:c9:97:df:5f:81:e5:f4:3b:e0:c5:
                    19:d8:9b:71:6e:72:e0:35:63:59:45:32:d8:f6:79:
                    4a:20:8f:c8:b7:3c:37:8b:1a:3c:e0:1d:88:37:2d:
                    33:68:0a:a0:e9:fd:3a:18:7c:c1:fa:3f:14:3a:ae:
                    28:46:4c:f7:64:e8:23:23:b1:20:a3:f2:bf:d1:46:
                    c6:07:e5:02:eb:71:95:a1:56:f7:cd:83:33:13:61:
                    0f:7a:e8:4e:53:d2:8e:22:d9:19:3c:00:f7:58:85:
                    8a:95:a3:69:ef:52:d6:17:55:b2:c0:49:7d:06:7e:
                    f4:b0:ac:45:77:bb:6d:38:37:45:27:84:eb:10:74:
                    86:a6:36:25:af:07:1b:b8:dc:40:5c:4e:7f:22:2e:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EF:52:83:A2:B6:B9:BF:1C:43:CF:C4:AC:78:AA:B3:67:D8:A6:14
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/32332e3138362e3138342e302f32342d3234203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:32:73:af:66:a6:ad:b0:bb:7e:c7:bd:5c:7f:56:d8:06:11:
         73:25:37:69:ce:70:76:0d:cf:85:20:1b:4f:5a:c0:47:00:55:
         9a:45:aa:77:e3:5f:57:99:a7:63:97:b9:7f:e6:3b:59:67:4b:
         47:5c:78:c5:31:f4:40:55:51:a3:11:f8:db:5f:fe:70:b8:1f:
         15:01:f3:d5:3a:34:97:0b:70:4c:51:a8:69:84:d3:ba:06:fb:
         d3:14:30:8b:62:d9:a7:45:f7:ea:ea:a2:40:9b:dd:d4:1e:ee:
         28:ce:ee:31:64:8f:7e:63:cb:c7:71:f9:f4:bb:9a:8a:b5:20:
         d9:28:4f:98:de:7d:91:e2:11:e1:75:0b:0b:ba:0b:ea:1c:a2:
         cd:8b:93:12:35:f9:0e:70:20:f8:52:6c:87:b5:15:6e:20:87:
         da:fc:c3:de:6b:d4:0e:dd:3b:42:9c:44:0f:e7:5a:a4:9f:e0:
         34:79:49:1b:78:1a:59:4d:15:d4:74:12:2c:b4:69:6f:ae:71:
         c1:82:ca:77:15:91:ba:7e:eb:d0:b0:43:56:fe:51:ee:d4:1a:
         d6:88:ca:18:d6:b8:ba:5d:2a:12:0b:0c:07:58:90:c1:6d:b2:
         84:5f:3d:19:77:df:bc:2c:54:8f:63:b2:8e:3e:6c:0c:5a:6f:
         dd:13:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:50 2025 by rpki-client