Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa
File:                     AS65123.roa (raw, json)
Hash identifier:          Lv3culxp6B0QhZlQ5dW/R+augNS9HxVjODzoV8RbsYc=
Subject key identifier:   E4:88:75:C8:28:E0:EA:B8:5D:8C:4E:D4:7C:BB:09:DA:64:5C:53:41
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       7E71951580FA9F973F557886CF68F5D109224D74
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa
Signing time:             Wed 16 Jul 2025 09:13:48 +0000
ROA not before:           Wed 16 Jul 2025 09:08:48 +0000
ROA not after:            Wed 15 Jul 2026 09:13:48 +0000
asID:                     65123
IP address blocks:        45.54.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:71:95:15:80:fa:9f:97:3f:55:78:86:cf:68:f5:d1:09:22:4d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jul 16 09:08:48 2025 GMT
            Not After : Jul 15 09:13:48 2026 GMT
        Subject: CN=E48875C828E0EAB85D8C4ED47CBB09DA645C5341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bc:1b:26:92:29:40:d4:41:74:77:80:a7:19:
                    b3:b0:13:5f:b0:95:d4:78:4b:68:73:95:b8:0e:e8:
                    e8:1e:95:64:bf:99:1c:4a:b1:d3:ac:24:6f:8b:a0:
                    bb:9d:f8:c0:54:b5:bf:c8:9c:93:8e:65:f6:fe:e7:
                    86:29:71:ba:da:7e:68:64:6e:65:09:44:6c:f1:d2:
                    8c:2e:c3:ac:6c:5d:06:95:7e:21:66:a4:4e:96:0a:
                    be:e3:d6:6c:93:3f:71:bd:70:d6:1a:42:27:3f:88:
                    ef:80:28:1e:89:5e:78:a1:43:be:f1:38:21:89:c8:
                    bd:ef:c9:0e:8a:04:b8:b6:4a:1b:19:2a:f7:56:b4:
                    88:fe:d7:47:53:3d:27:4f:ee:3f:1a:8c:34:4d:f1:
                    1d:37:e0:c5:d2:dc:95:fd:6a:75:0b:1e:71:f6:6f:
                    d2:26:1c:56:ee:3e:74:fe:63:6f:54:2e:be:64:4c:
                    af:d8:b0:f9:e3:ac:5e:34:4c:fa:33:2f:be:5e:14:
                    8a:e3:20:4d:89:0e:32:a7:a7:f9:54:ba:ba:ec:48:
                    2a:34:46:a8:13:56:1b:b4:b3:98:18:e4:cd:17:ff:
                    60:ee:fb:de:bf:46:c0:cb:55:83:44:64:cc:1a:9c:
                    31:b0:0c:e1:94:17:39:4b:3d:da:9d:c0:27:1a:53:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:88:75:C8:28:E0:EA:B8:5D:8C:4E:D4:7C:BB:09:DA:64:5C:53:41
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS65123.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:11:10:b1:ef:8e:1b:15:2a:be:b9:76:29:ee:ee:5c:85:
         05:26:24:b1:3f:62:fd:42:24:1d:2a:21:25:ad:cd:4f:c7:0a:
         28:a7:97:66:df:1e:1a:4a:d3:51:2c:89:94:3b:c2:05:62:6a:
         16:d9:b6:54:2c:15:43:e5:ca:ef:37:d2:48:21:32:b1:cb:7f:
         6b:ff:88:4e:e4:f5:32:ab:3a:47:5e:3f:07:d2:02:d8:ce:8d:
         c4:cb:64:54:2e:32:93:32:0b:84:11:af:f4:01:34:c6:9f:c0:
         b2:cc:8e:af:dd:f7:31:8e:18:2b:eb:b3:b4:0c:b6:4d:65:73:
         a9:1c:0e:cf:1c:d4:e8:28:d3:67:12:8b:c2:76:83:53:32:02:
         d1:4f:6b:64:dc:6f:d0:36:79:23:e5:e8:9b:58:32:48:10:4e:
         70:22:ce:67:aa:2f:80:55:48:b4:38:8d:bf:01:7f:90:73:fd:
         94:d9:ec:13:9b:3d:aa:a5:11:02:d8:b4:5e:e1:80:46:8e:8a:
         33:70:32:21:33:ff:f1:6a:5a:7a:ac:d6:ce:ab:81:4d:fb:80:
         dd:3c:1f:87:f1:63:0b:9a:a2:56:ec:82:57:a8:7d:5b:7d:0b:
         02:5e:62:6d:1a:a2:e7:fa:60:42:09:22:ab:6c:2c:a0:75:dd:
         e5:d2:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:21:29 2025 by rpki-client