Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          9+x7xkrAj4WOWj5G6feDZZAS2FMVT18kEWHgEvNks9E=
Subject key identifier:   A3:CE:F5:CF:90:9F:6F:24:18:50:1F:06:6D:FB:06:3A:E8:51:79:FE
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       E1E9B6DFA6E12FEBDB3813658AEA0DE82A5136
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
Signing time:             Thu 18 Jul 2024 07:48:59 +0000
ROA not before:           Thu 18 Jul 2024 07:43:59 +0000
ROA not after:            Thu 17 Jul 2025 07:48:59 +0000
asID:                     20473
IP address blocks:        140.99.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e1:e9:b6:df:a6:e1:2f:eb:db:38:13:65:8a:ea:0d:e8:2a:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul 18 07:43:59 2024 GMT
            Not After : Jul 17 07:48:59 2025 GMT
        Subject: CN=A3CEF5CF909F6F2418501F066DFB063AE85179FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:d9:26:31:6a:1c:39:32:bc:3a:78:75:59:
                    cd:e0:5f:04:ef:c2:9b:5a:d0:73:a7:bd:22:1b:33:
                    a7:7c:f0:ee:84:24:d3:7b:14:da:19:e2:16:d4:bc:
                    8f:55:2a:2c:4c:d2:76:58:76:8e:3c:e5:e7:07:6e:
                    9f:96:09:68:2b:5a:65:7a:63:49:77:7d:b2:7e:bd:
                    16:c0:ad:39:57:7d:46:e4:8c:72:29:79:88:a9:d6:
                    9b:45:15:9c:92:0e:bd:a6:07:8a:c8:9d:05:70:03:
                    3f:c1:fb:55:00:70:43:07:d7:8d:0f:03:4c:2b:12:
                    3e:84:58:c7:6d:ad:54:5b:33:6f:23:55:66:40:da:
                    ce:32:38:30:25:54:b5:1d:1e:cf:66:9a:8e:21:67:
                    85:0b:fd:8c:3e:a4:7b:41:27:a3:54:f9:30:ee:38:
                    1e:b4:4e:16:c7:26:47:b5:60:9c:2f:aa:03:8f:c4:
                    bf:c4:9b:b3:ab:17:ea:54:60:41:e8:e7:08:4d:8b:
                    43:b9:19:69:8a:cb:83:14:e1:da:00:f7:a3:bb:4a:
                    e7:55:08:77:91:42:f2:8b:88:c1:8f:10:48:39:4b:
                    8d:42:d4:44:92:92:3a:81:45:1a:44:dc:27:f3:b2:
                    1f:59:71:1b:dc:77:12:91:81:18:09:6f:11:5a:4a:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CE:F5:CF:90:9F:6F:24:18:50:1F:06:6D:FB:06:3A:E8:51:79:FE
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:cf:0c:6c:1b:93:c5:db:eb:a6:61:fa:e0:7e:eb:67:0e:53:
         60:6b:3e:21:ec:b8:5a:87:c9:3c:5b:26:46:cb:cb:6a:75:71:
         a1:8e:6d:75:c6:56:24:bf:cb:2d:0a:ac:ac:ee:0e:c6:b4:b8:
         d6:b5:a9:47:64:1d:8d:a6:21:00:c8:7a:59:78:64:2e:c2:54:
         c1:b6:8b:e0:10:e0:af:2e:10:b8:2f:8a:a5:54:07:dc:24:35:
         92:e9:b2:c4:39:ed:eb:28:ed:d3:ef:07:b0:3e:29:e5:5f:5b:
         7f:2d:41:ee:f4:16:14:3c:d9:7c:69:b6:68:56:b8:0b:e8:d7:
         a5:a1:d2:0d:1e:04:a1:34:c7:48:e1:e0:99:77:65:d1:c2:0b:
         b7:e2:18:f8:88:a3:11:c1:d6:9a:c8:a3:43:62:a1:f6:28:68:
         73:66:85:98:78:e8:03:89:3d:7f:e6:21:2a:d4:8d:77:6f:86:
         1e:c2:f2:7e:77:37:e4:cb:c5:c0:a5:fe:c9:6f:0f:1f:cf:84:
         e0:2e:32:29:87:93:d6:df:e7:da:8f:69:fd:4c:d1:25:77:aa:
         2c:b7:db:4a:a6:25:a0:ca:58:7b:d4:f4:7d:ce:7c:56:e8:ae:
         f0:1a:6c:57:b4:da:c3:d6:96:e3:56:19:b5:de:04:5f:85:19:
         4a:f1:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:58 2025 by rpki-client