Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
File:                     AS20326.roa (raw, json)
Hash identifier:          rekB5hPiGLCU/r1O/9pcx5JtfhtlRae7nIkNgCLXzY4=
Subject key identifier:   4B:AF:CC:2F:A2:CA:56:6A:D2:A5:15:6A:EF:4A:1A:7F:12:E7:57:F2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6D31424BC490A8BB022CCF1CCD57393A1860603A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
Signing time:             Sat 22 Mar 2025 00:48:02 +0000
ROA not before:           Sat 22 Mar 2025 00:43:02 +0000
ROA not after:            Sat 21 Mar 2026 00:48:02 +0000
asID:                     20326
IP address blocks:        64.50.180.0/23 maxlen: 23
                          64.50.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:42:4b:c4:90:a8:bb:02:2c:cf:1c:cd:57:39:3a:18:60:60:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 22 00:43:02 2025 GMT
            Not After : Mar 21 00:48:02 2026 GMT
        Subject: CN=4BAFCC2FA2CA566AD2A5156AEF4A1A7F12E757F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:59:54:1f:b9:90:16:6a:02:da:4e:3b:d7:
                    d3:d4:0e:95:a6:14:94:8f:e9:0c:8e:66:2a:a0:0c:
                    c7:47:8c:6e:a0:8d:f8:f2:27:c2:3d:d5:ce:f0:fc:
                    f7:4b:c7:98:1b:da:2f:bb:d7:9d:74:be:0a:d2:c3:
                    93:42:e5:1b:97:5d:01:53:36:5c:14:f5:e0:8d:85:
                    54:23:11:50:75:a3:f0:65:d4:01:e0:ca:3b:d2:d3:
                    82:d5:5d:09:75:85:93:12:c3:bb:2f:c4:c0:9d:3a:
                    3e:17:c5:9c:5a:2a:e4:47:67:34:5b:3d:97:1e:83:
                    a4:08:78:b6:2c:a5:57:b7:b0:17:35:dc:22:61:3f:
                    c8:f1:2c:3e:12:63:c8:d3:3e:37:f3:3c:91:99:b5:
                    34:fe:29:a3:86:12:47:a9:4c:e2:66:e1:12:27:f2:
                    7c:b8:b8:b9:56:04:b0:fd:22:5c:1f:70:0b:d6:5e:
                    ed:3a:cf:f9:55:2d:3e:eb:0e:43:47:ba:82:c4:c5:
                    5d:38:6b:0a:87:5c:67:07:63:24:3b:06:a8:b5:31:
                    84:49:db:09:e8:89:fe:3c:12:0f:08:c3:90:33:27:
                    b5:18:ac:41:47:4e:95:70:ef:67:e0:c9:68:43:5f:
                    a6:09:b2:84:f0:b8:f0:ee:2a:c8:b7:1c:4f:55:ba:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AF:CC:2F:A2:CA:56:6A:D2:A5:15:6A:EF:4A:1A:7F:12:E7:57:F2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:e1:f6:05:e1:d3:a6:3c:b6:be:87:00:25:a1:30:fa:7b:a7:
         ba:05:d1:18:b9:5f:86:36:1d:1f:f8:b5:69:84:2d:3b:f5:73:
         2a:cd:9d:d3:07:8f:16:27:18:52:67:9b:4f:0c:2d:b7:be:6f:
         95:22:68:42:71:0e:0a:21:19:be:d9:6f:2c:82:aa:9a:01:eb:
         91:f9:40:1a:05:25:e7:8c:7b:73:cb:46:00:b8:08:2b:2b:89:
         0a:c8:2e:99:2e:2a:1e:04:24:f9:c0:3e:bc:11:eb:14:63:76:
         26:4f:a1:68:fb:bc:91:cb:3a:f5:4d:4a:1e:d0:a4:cb:b3:01:
         8c:4a:c8:0a:f6:4f:fb:57:3a:43:9b:aa:80:30:b8:c7:be:2c:
         74:20:1c:30:fd:35:38:b0:23:b7:38:b9:df:e5:6e:91:07:0c:
         36:05:78:97:b6:f6:dd:76:fd:c6:69:ab:37:1c:52:a6:68:af:
         e5:01:ec:55:d1:e3:9a:ba:25:5c:6e:9d:d3:8c:5f:85:56:06:
         6f:8b:9f:1d:d9:6d:5d:62:40:ce:33:e3:7c:95:9d:a1:d4:4f:
         dc:fc:b9:31:54:79:68:9e:8a:7b:92:7a:32:d8:c7:d0:fe:e4:
         7c:52:31:23:88:9d:f6:e9:f9:4e:0d:6f:f9:e1:27:7c:3f:2e:
         a8:60:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:01 2025 by rpki-client