Route Origin Authorization

$ rpki-client -vvvf rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e20323130373631.roa
File:                     32332e3134342e3139362e302f32342d3332203d3e20323130373631.roa (raw, json)
Hash identifier:          mz3L4N0/yxVrf7kxmN+sAjYCZQwvX5bZmgUzSobjUdY=
Subject key identifier:   29:51:5E:DC:96:65:A7:C7:26:5F:8C:99:EA:B9:2F:38:0A:99:B2:81
Certificate issuer:       /CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
Certificate serial:       1B5FCC6272350B120A37F185569933FD077A9B85
Authority key identifier: BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e20323130373631.roa
Signing time:             Tue 08 Sep 2026 18:24:38 +0000
ROA not before:           Tue 08 Sep 2026 18:19:38 +0000
ROA not after:            Tue 07 Sep 2027 18:24:38 +0000
asID:                     210761
IP address blocks:        23.144.196.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl
                          rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5f:cc:62:72:35:0b:12:0a:37:f1:85:56:99:33:fd:07:7a:9b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8
        Validity
            Not Before: Sep  8 18:19:38 2026 GMT
            Not After : Sep  7 18:24:38 2027 GMT
        Subject: CN=29515EDC9665A7C7265F8C99EAB92F380A99B281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:1a:82:64:bc:fd:f5:86:8a:08:51:d5:69:
                    16:d0:8c:05:d2:8c:6e:8a:e4:5d:0d:6c:f8:9a:c4:
                    67:fa:2a:42:c1:54:62:09:52:33:49:46:fa:c8:23:
                    20:46:f9:46:12:32:77:46:b2:c4:27:01:e4:32:a1:
                    7e:62:d8:d2:16:e8:bc:98:08:ea:14:fc:6b:81:21:
                    cc:46:9b:a9:16:c4:4e:e0:e8:76:a2:5b:36:f0:29:
                    aa:d6:c7:16:d1:d7:bb:b2:8d:01:d6:1e:39:e3:15:
                    b9:81:0a:9d:68:55:b7:9c:c6:a7:f8:51:1b:40:8f:
                    db:db:3a:fb:2a:a0:57:da:9a:7d:c7:1e:dd:46:23:
                    67:47:9b:91:f3:30:3b:30:bb:47:a8:cf:3a:fe:68:
                    4f:0b:ff:b0:31:67:61:56:33:93:8c:f3:01:99:ae:
                    00:ce:fe:bd:33:72:2e:c6:fc:0e:b7:cc:58:74:85:
                    e4:38:03:25:2e:c6:16:97:ee:27:db:c3:de:10:fa:
                    f3:07:9f:4d:3d:d2:31:fb:76:0f:bf:80:a4:c6:d8:
                    d6:db:20:0a:45:23:2b:ec:4c:0e:c4:c9:a3:3a:ba:
                    df:86:51:fe:d6:ef:93:33:92:36:b1:66:e4:3c:b1:
                    9d:66:e7:02:7b:2d:d8:0b:3f:c1:e2:12:e9:a8:24:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:51:5E:DC:96:65:A7:C7:26:5F:8C:99:EA:B9:2F:38:0A:99:B2:81
            X509v3 Authority Key Identifier:
                keyid:BE:DC:BA:A0:D6:AC:CB:E9:7C:22:F6:0B:E3:7F:81:2B:6D:69:04:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/4/BEDCBAA0D6ACCBE97C22F60BE37F812B6D690495.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f1bd472c-b0c8-4ba0-a5d2-fffcbe4d2753/4327750a5246835f96b15ca6865f67cf2ddaed4392c0208ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/4/32332e3134342e3139362e302f32342d3332203d3e20323130373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:4b:71:2b:7d:de:d5:65:b0:6b:3c:8c:d4:70:5a:f8:a7:f5:
         3b:77:f4:ad:8e:72:e8:6d:77:30:ab:30:a7:79:51:08:13:3f:
         94:da:7a:57:31:74:61:35:51:2d:89:1f:ba:31:31:98:55:6c:
         98:53:a2:9d:02:ea:7a:e5:1b:f1:7b:55:19:66:34:d7:b3:28:
         6c:56:95:b7:74:a4:07:77:a1:c0:b1:78:db:78:10:b5:a7:2d:
         5e:2e:ce:09:70:d5:6f:c0:38:81:35:f4:c5:3e:69:cd:ce:fa:
         b3:1d:ca:a7:26:59:6c:ed:ab:f2:2e:0a:93:3d:e1:09:c4:9e:
         58:fb:1a:b8:91:ce:72:be:7d:41:12:ef:cd:e6:04:94:33:28:
         9d:78:84:fb:e2:93:53:68:ef:17:cc:3c:09:2a:bd:8a:aa:07:
         79:92:6a:a2:ca:d8:02:b7:b1:5b:9f:5b:d0:fd:cc:69:96:61:
         6f:31:1a:7e:99:25:16:37:3b:aa:55:03:6e:0c:71:23:4a:9d:
         09:0d:94:cb:10:55:2f:8d:85:a8:08:cf:bc:4e:94:cd:91:d5:
         a5:17:9f:e4:fd:23:67:a4:a3:c7:3d:f1:3b:27:bc:86:26:d3:
         a9:38:63:0f:f7:12:ef:9a:83:ec:cb:61:b6:e8:fd:72:6b:28:
         66:e9:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:30:49 2026 by rpki-client