Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa
File:                     AS20001.roa (raw, json)
Hash identifier:          0iijKFUg41M4/E//iWk7SFacQDIhyRP0vvG0sMiT2yM=
Subject key identifier:   B7:7A:18:EE:7E:EE:B6:3E:E7:EC:58:7F:0A:1D:3C:A1:64:36:66:52
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0ABABDE9F77AD1E57350E1FB0F816479C36F296C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa
Signing time:             Mon 07 Jul 2025 12:04:08 +0000
ROA not before:           Mon 07 Jul 2025 11:59:08 +0000
ROA not after:            Mon 06 Jul 2026 12:04:08 +0000
asID:                     20001
IP address blocks:        104.234.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 22:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ba:bd:e9:f7:7a:d1:e5:73:50:e1:fb:0f:81:64:79:c3:6f:29:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  7 11:59:08 2025 GMT
            Not After : Jul  6 12:04:08 2026 GMT
        Subject: CN=B77A18EE7EEEB63EE7EC587F0A1D3CA164366652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:67:17:8c:97:b8:0b:a7:50:73:37:9c:64:41:
                    fb:fd:1b:f8:1a:5c:57:47:dc:a2:fe:a0:45:88:c2:
                    6a:62:34:8c:f2:22:44:85:1d:31:0e:cb:a5:73:23:
                    b8:9e:83:49:4c:42:08:4f:28:d7:bd:06:95:a6:52:
                    a4:2c:85:cc:c3:a7:e1:c4:f4:b3:47:46:99:54:43:
                    2b:02:77:ec:4f:57:6b:2b:35:d1:a7:4d:18:68:8a:
                    1b:75:67:83:17:6e:5c:7e:97:e2:23:a1:02:00:c0:
                    a5:84:28:9f:65:b9:6f:80:2c:07:a1:64:58:2f:46:
                    76:c9:b5:5d:73:0f:1d:ac:7e:91:c9:e3:28:10:6c:
                    f5:06:2f:4d:13:fd:5f:9a:76:28:ec:c6:14:73:b3:
                    59:bb:35:91:ed:55:77:68:6a:09:74:ce:6d:cd:9b:
                    19:6f:c4:13:3c:b5:15:f9:aa:8b:8a:ed:03:e1:5f:
                    d9:3e:49:62:85:14:df:4e:fd:a4:2c:ef:87:07:de:
                    27:24:3b:f7:8d:d8:b6:61:fc:3f:84:f4:9f:52:40:
                    32:71:6d:80:6a:b7:d1:62:19:ed:f0:d2:a3:77:42:
                    82:c7:78:b3:28:d3:a5:ce:15:e0:77:2c:38:0c:61:
                    91:48:00:53:36:72:52:72:0b:29:66:b1:17:ec:14:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7A:18:EE:7E:EE:B6:3E:E7:EC:58:7F:0A:1D:3C:A1:64:36:66:52
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a6:ed:6b:fb:d0:d8:85:bc:5c:08:02:e8:06:ed:16:33:6d:
         af:89:45:cf:44:11:74:f9:cc:3a:93:f6:fa:b4:16:8f:36:b0:
         ac:21:99:b9:c6:8e:e7:36:63:0e:08:11:82:fb:56:49:11:5f:
         84:68:e0:50:7b:30:8c:5c:e1:26:d4:76:a5:dc:21:88:e2:5b:
         cf:b7:af:ca:9d:c3:d9:0d:8d:21:df:11:78:89:ab:89:c4:e5:
         b3:c6:de:4d:90:53:d8:51:14:a0:01:a6:21:e5:13:9f:1b:52:
         a0:45:7d:04:a7:ef:62:df:87:89:01:fa:91:95:09:a6:1b:20:
         7d:0e:f5:47:ce:85:76:06:79:73:e5:c5:ad:6d:45:ac:a2:09:
         b5:72:83:c1:d8:0a:7a:fb:98:e0:1b:ec:4b:43:32:9d:0b:b1:
         61:74:34:bf:ee:80:80:ac:43:b6:8c:0a:76:10:c7:8c:a9:b1:
         25:a1:5d:02:33:96:d0:16:c3:83:de:dd:f9:04:82:ce:4f:94:
         68:9e:72:f9:29:4c:13:57:8c:31:71:5e:26:b4:65:c6:d1:a9:
         c2:b6:1a:db:73:f3:ca:c4:7f:59:b5:54:17:a6:32:54:d0:66:
         0c:d0:1a:b9:cd:45:97:7f:fe:19:01:b2:2f:6b:61:06:d0:91:
         f3:1c:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:30 2025 by rpki-client