Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          JHLm3uNcI9j8zP7FFCOVU7Mfjsl+D317YEBBshdkwt0=
Subject key identifier:   C2:43:A0:27:71:74:57:97:2A:43:D6:23:D7:09:4C:19:53:70:FE:A1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1C27D1828843E3F1100DD9E77429D7545258B50B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time:             Wed 05 Aug 2026 04:52:14 +0000
ROA not before:           Wed 05 Aug 2026 04:47:14 +0000
ROA not after:            Wed 04 Aug 2027 04:52:14 +0000
asID:                     20473
IP address blocks:        23.226.140.0/23 maxlen: 24
                          23.226.143.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          64.188.14.0/24 maxlen: 24
                          66.63.167.0/24 maxlen: 24
                          72.11.136.0/23 maxlen: 24
                          74.50.15.0/24 maxlen: 24
                          96.47.228.0/24 maxlen: 24
                          96.47.231.0/24 maxlen: 24
                          96.47.236.0/23 maxlen: 24
                          104.129.44.0/24 maxlen: 24
                          104.129.55.0/24 maxlen: 24
                          107.150.28.0/23 maxlen: 24
                          167.160.163.0/24 maxlen: 24
                          167.160.172.0/24 maxlen: 24
                          167.160.174.0/23 maxlen: 24
                          173.44.37.0/24 maxlen: 24
                          173.44.42.0/23 maxlen: 24
                          173.44.45.0/24 maxlen: 24
                          173.44.47.0/24 maxlen: 24
                          173.44.48.0/22 maxlen: 24
                          173.44.52.0/23 maxlen: 24
                          173.44.54.0/24 maxlen: 24
                          173.44.56.0/23 maxlen: 24
                          173.44.59.0/24 maxlen: 24
                          173.44.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 15:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:27:d1:82:88:43:e3:f1:10:0d:d9:e7:74:29:d7:54:52:58:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  5 04:47:14 2026 GMT
            Not After : Aug  4 04:52:14 2027 GMT
        Subject: CN=C243A027717457972A43D623D7094C195370FEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:e4:5c:ff:96:c4:73:cf:31:e1:a2:ad:f1:
                    ec:00:4d:60:ce:52:93:19:8a:24:70:ae:2e:af:8d:
                    1e:a7:81:a2:7a:2a:93:14:24:ef:97:06:b9:a1:66:
                    08:ce:b1:41:95:42:e5:c9:ad:6a:50:1a:14:47:a7:
                    97:98:e3:4b:96:d0:69:0a:90:51:d3:e7:5a:f2:69:
                    35:57:59:e4:32:fb:bb:32:89:1e:1f:8a:b8:59:89:
                    4d:10:9e:2f:9a:ca:fb:b1:70:20:fd:80:1d:54:81:
                    d9:c2:13:49:11:bc:98:05:83:8d:57:c3:84:15:1f:
                    94:68:e7:a7:f2:ff:c3:15:7e:b7:45:f7:3a:49:85:
                    70:c3:36:42:ab:aa:9b:30:ee:ab:db:94:3e:4b:45:
                    57:c8:35:ca:d3:13:36:1c:8a:9c:1d:db:1e:7e:06:
                    31:37:69:b3:82:1b:5e:3a:4b:64:0c:29:5b:7f:be:
                    0a:df:c6:1a:16:d6:bb:ed:1a:01:31:1f:5a:08:68:
                    f1:61:6a:c1:a3:b9:e3:12:43:59:ae:e8:d6:35:3f:
                    a0:9f:df:51:e5:a7:48:8c:64:37:16:65:aa:42:59:
                    41:4c:1e:31:48:4b:5b:29:c6:86:67:e1:6a:6d:5e:
                    0a:f4:ce:ef:bc:15:59:71:eb:da:04:08:e0:2d:c2:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:43:A0:27:71:74:57:97:2A:43:D6:23:D7:09:4C:19:53:70:FE:A1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.140.0/23
                  23.226.143.0/24
                  64.50.166.0/24
                  64.188.14.0/24
                  66.63.167.0/24
                  72.11.136.0/23
                  74.50.15.0/24
                  96.47.228.0/24
                  96.47.231.0/24
                  96.47.236.0/23
                  104.129.44.0/24
                  104.129.55.0/24
                  107.150.28.0/23
                  167.160.163.0/24
                  167.160.172.0/24
                  167.160.174.0/23
                  173.44.37.0/24
                  173.44.42.0/23
                  173.44.45.0/24
                  173.44.47.0-173.44.54.255
                  173.44.56.0/23
                  173.44.59.0/24
                  173.44.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:77:c6:a3:49:b1:35:cb:62:5b:16:70:41:92:e3:de:63:
         89:86:b6:9e:8c:13:17:c2:c0:73:2b:64:c8:b8:01:d3:78:10:
         d6:44:9a:60:55:d6:0c:87:19:5b:50:ae:60:16:f9:90:0a:d0:
         e4:98:8b:79:7e:1f:d3:c1:57:ae:42:fe:18:d1:8d:d5:65:65:
         f9:46:cd:06:1e:a3:48:f1:ef:77:04:93:92:6f:40:9c:29:2d:
         4b:cc:bc:14:5b:cd:61:bc:9c:a6:81:e0:11:34:b5:6f:51:d6:
         4e:fb:86:a5:13:6f:67:37:4c:35:2d:e5:e7:28:f2:b0:e4:93:
         6c:6a:21:5a:33:43:1e:a5:4c:a3:90:98:ef:56:36:ae:c4:6d:
         fc:0b:67:91:51:dd:24:bb:35:f3:f1:69:72:2e:10:4a:72:ab:
         35:72:b0:19:7f:f1:1b:b2:e8:90:62:c7:4c:55:7b:c2:8a:de:
         d7:b0:29:b3:fa:44:2b:07:17:38:05:f8:f2:52:ab:64:07:dc:
         3c:b1:4e:cb:62:4f:ea:13:63:53:1b:6b:8c:b7:3c:bd:26:7b:
         df:a3:fd:60:f9:c5:82:e3:da:0a:09:f0:ae:b0:fc:89:09:0c:
         a3:29:74:4e:25:c0:9a:82:a7:ba:72:35:d7:36:c7:74:31:83:
         6e:b6:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 20:18:56 2026 by rpki-client