Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213465.roa
File:                     AS213465.roa (raw, json)
Hash identifier:          VUCuQPvDjxPOBwRELLO+YOFEtufh9uQhQ5STtgdW1rI=
Subject key identifier:   FF:6F:8B:80:B6:45:3F:F5:A4:67:B1:31:FF:1D:4B:F9:C5:1A:76:85
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       59D70CB6B0E2C8D7B49B6C40D76001D6AC05D9D5
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213465.roa
Signing time:             Sat 12 Jul 2025 14:08:34 +0000
ROA not before:           Sat 12 Jul 2025 14:03:34 +0000
ROA not after:            Sat 11 Jul 2026 14:08:34 +0000
asID:                     213465
IP address blocks:        67.210.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 10:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d7:0c:b6:b0:e2:c8:d7:b4:9b:6c:40:d7:60:01:d6:ac:05:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 12 14:03:34 2025 GMT
            Not After : Jul 11 14:08:34 2026 GMT
        Subject: CN=FF6F8B80B6453FF5A467B131FF1D4BF9C51A7685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:39:30:39:11:fd:23:9d:cd:20:7e:eb:2d:
                    9f:cc:fc:e9:c5:d7:88:cf:f5:24:23:4f:ef:2c:d7:
                    c5:47:17:d2:ac:62:b8:db:2b:0a:72:51:3c:53:6a:
                    a6:2c:31:a7:ed:01:99:3e:ad:a6:25:70:45:47:c8:
                    af:a3:a2:1a:a8:86:13:f4:ba:a7:1a:d8:30:0f:bb:
                    00:a0:25:1e:50:3c:43:0d:65:18:7d:60:56:9c:44:
                    00:38:98:95:c8:e7:0d:96:2d:4e:7b:1c:64:9a:5f:
                    fb:36:9f:14:b3:ed:d5:00:5c:a8:82:d4:b9:c2:ba:
                    93:ac:37:9b:17:77:40:da:1f:55:25:e7:9c:30:36:
                    25:38:e7:7b:f5:29:7c:de:72:18:79:67:6e:82:05:
                    ba:df:c4:4b:b6:7a:1f:53:92:51:89:f9:3a:06:a1:
                    ec:32:ee:36:04:65:bb:eb:11:07:20:48:19:5c:4d:
                    fd:c6:ce:e6:f2:a0:56:ed:a8:c3:1a:a3:b8:09:41:
                    1c:8e:4c:5c:e4:a9:e6:43:3d:f4:66:e9:cc:fa:ef:
                    4a:b5:76:17:33:a8:6a:20:4c:b0:d9:72:b2:82:c8:
                    9c:03:ab:57:1d:6e:77:dc:c9:eb:0d:8e:6c:28:a4:
                    86:56:cb:43:fa:4a:8e:31:cd:a0:33:ca:bd:2c:1f:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:6F:8B:80:B6:45:3F:F5:A4:67:B1:31:FF:1D:4B:F9:C5:1A:76:85
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS213465.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:6a:6d:bc:a4:86:88:ad:ba:7f:80:0a:f7:ba:31:78:69:65:
         63:7e:3e:e6:03:8c:16:a3:f5:36:48:a4:6f:3d:8a:41:7b:7e:
         0b:55:f7:ff:3c:09:75:4c:fc:a1:24:cc:32:3b:17:d1:a4:e3:
         5d:5f:4b:83:71:7f:fb:a0:c1:3f:de:12:56:5e:f3:b7:d9:c5:
         72:03:47:2f:c2:08:35:0c:cf:aa:dd:df:80:49:b0:02:be:28:
         74:f4:ca:ab:9d:9b:5d:b2:0c:dc:39:79:df:9e:76:2d:67:0c:
         13:5b:96:f7:70:62:f3:5b:a9:34:25:74:9e:43:d4:8a:ea:15:
         6e:5a:9c:b8:8c:5a:74:1c:d8:43:67:e2:2e:72:fd:9f:cc:19:
         a6:e8:5e:f2:b7:e5:e0:a3:29:e5:0a:d5:08:ad:85:e3:e2:b8:
         ba:00:2d:0d:7a:08:47:d0:e8:63:b9:0c:1f:af:d7:9c:9b:47:
         6f:ae:73:2a:5a:d8:2f:6c:b3:22:24:61:dd:1b:47:94:99:94:
         b4:dd:a9:38:e8:ab:06:22:88:eb:07:dd:de:fe:54:59:0f:36:
         99:d1:47:e0:b2:97:b7:80:79:cd:52:ff:56:aa:3c:91:6f:ba:
         02:c8:14:c2:59:0e:fc:59:03:5d:1b:4b:67:d9:a8:ac:cf:fd:
         e8:d3:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 02:45:58 2025 by rpki-client