Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          TAZd915VMOLZ1Vh1i2HI2a4wTl4fOt43blwZ5fnju30=
Subject key identifier:   7A:9F:5B:45:61:8B:B8:92:C4:76:11:3B:24:B1:6C:F1:B6:A3:C4:A0
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       28FF23D9C6E65E06D2113D17B6207CF6DD19138A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time:             Tue 23 Jun 2026 19:14:38 +0000
ROA not before:           Tue 23 Jun 2026 19:09:38 +0000
ROA not after:            Tue 22 Jun 2027 19:14:38 +0000
asID:                     20473
IP address blocks:        23.226.129.0/24 maxlen: 24
                          23.226.139.0/24 maxlen: 24
                          23.226.140.0/23 maxlen: 24
                          23.226.143.0/24 maxlen: 24
                          64.50.166.0/24 maxlen: 24
                          66.63.167.0/24 maxlen: 24
                          72.11.136.0/23 maxlen: 24
                          96.47.228.0/24 maxlen: 24
                          96.47.231.0/24 maxlen: 24
                          96.47.236.0/23 maxlen: 24
                          104.129.44.0/24 maxlen: 24
                          104.129.55.0/24 maxlen: 24
                          107.150.28.0/23 maxlen: 24
                          167.160.163.0/24 maxlen: 24
                          167.160.172.0/24 maxlen: 24
                          167.160.174.0/23 maxlen: 24
                          173.44.37.0/24 maxlen: 24
                          173.44.42.0/23 maxlen: 24
                          173.44.45.0/24 maxlen: 24
                          173.44.47.0/24 maxlen: 24
                          173.44.48.0/22 maxlen: 24
                          173.44.52.0/23 maxlen: 24
                          173.44.54.0/24 maxlen: 24
                          173.44.56.0/23 maxlen: 24
                          173.44.59.0/24 maxlen: 24
                          173.44.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 15:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ff:23:d9:c6:e6:5e:06:d2:11:3d:17:b6:20:7c:f6:dd:19:13:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun 23 19:09:38 2026 GMT
            Not After : Jun 22 19:14:38 2027 GMT
        Subject: CN=7A9F5B45618BB892C476113B24B16CF1B6A3C4A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:8c:30:73:13:4b:2e:69:a1:f4:e5:d8:91:
                    98:9c:01:31:c3:ee:21:78:cd:a6:d7:39:43:08:1d:
                    13:80:42:63:e0:c5:d9:ac:26:3a:a0:14:65:51:96:
                    7f:19:3c:c1:00:50:dc:fb:df:be:95:93:c3:84:b9:
                    09:a9:5c:8e:bd:21:51:a2:09:10:27:b5:75:96:0c:
                    9c:56:8c:fa:2b:ca:19:f2:50:90:4b:33:c8:3d:fb:
                    bd:79:27:bb:2c:50:58:25:11:71:39:cf:83:98:dd:
                    9d:1f:ed:58:ea:4b:e2:fa:d1:45:08:a1:44:1b:f3:
                    db:74:7d:a2:63:7e:d4:d3:6c:48:c4:5b:24:d9:71:
                    63:b4:6e:62:71:1c:2e:4b:c1:a2:f3:a8:4e:f4:26:
                    d6:ed:54:db:44:16:a7:b0:b7:b7:8d:2c:94:2f:18:
                    50:ae:81:07:4b:9a:fd:3f:db:b0:a7:e7:50:fd:4c:
                    12:4c:c2:93:ae:20:77:77:5d:c5:d5:13:8b:50:1b:
                    e5:6e:2f:fe:a3:55:e4:1f:18:67:df:02:87:d2:60:
                    fd:68:36:c5:cd:c1:d9:de:c2:1e:11:bc:d2:26:fc:
                    ea:3e:4c:c6:6d:cd:fc:0c:7d:36:9f:b4:b6:a2:cb:
                    31:c4:97:30:4d:80:ea:92:26:ea:97:8a:9a:f9:da:
                    39:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9F:5B:45:61:8B:B8:92:C4:76:11:3B:24:B1:6C:F1:B6:A3:C4:A0
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.129.0/24
                  23.226.139.0-23.226.141.255
                  23.226.143.0/24
                  64.50.166.0/24
                  66.63.167.0/24
                  72.11.136.0/23
                  96.47.228.0/24
                  96.47.231.0/24
                  96.47.236.0/23
                  104.129.44.0/24
                  104.129.55.0/24
                  107.150.28.0/23
                  167.160.163.0/24
                  167.160.172.0/24
                  167.160.174.0/23
                  173.44.37.0/24
                  173.44.42.0/23
                  173.44.45.0/24
                  173.44.47.0-173.44.54.255
                  173.44.56.0/23
                  173.44.59.0/24
                  173.44.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:17:3d:27:8b:a1:7d:19:0d:b2:fd:42:4c:bf:9c:c2:30:ff:
         08:ac:f3:a5:d9:ec:ea:b1:f4:66:53:cb:6a:ba:87:ad:a0:b7:
         67:6e:9a:a0:c2:27:4e:e3:13:5a:12:1b:e1:c2:03:24:46:c8:
         14:00:8d:e5:bf:7e:3d:7f:1a:8f:15:b5:10:01:21:60:b6:f0:
         40:2b:9c:8e:ca:c9:84:b0:9a:fd:6f:1a:d2:ba:1d:19:38:7e:
         ac:31:a0:88:dc:43:dc:f0:6f:69:37:d6:9f:29:37:18:27:4d:
         75:65:03:b1:af:5d:f2:0e:e5:ad:8c:44:0f:87:b8:ae:31:0f:
         9a:c7:89:f5:14:e0:8b:ae:f1:a8:d4:80:df:15:78:bf:17:68:
         81:a0:a2:44:34:ff:d6:2a:17:d9:29:e8:b5:00:1e:b0:13:dd:
         44:c6:cb:9d:25:f0:ba:71:70:26:27:53:65:47:c9:e7:39:ed:
         30:ed:7f:c1:9a:36:f6:f7:6c:86:97:7a:ee:22:12:86:bc:18:
         f0:d6:a7:68:27:69:7b:83:20:8c:32:2a:50:c5:01:83:14:f8:
         dd:f5:bc:a9:16:16:69:66:90:a9:df:73:3f:56:c8:4d:d0:ef:
         a9:35:91:fa:3b:9a:e0:e7:8a:50:52:11:51:c9:8c:3f:98:a4:
         59:e8:b6:22
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUKP8j2cbmXgbSET0XtiB89t0ZE4owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNjIzMTkwOTM4WhcNMjcwNjIyMTkxNDM4
WjAzMTEwLwYDVQQDEyg3QTlGNUI0NTYxOEJCODkyQzQ3NjExM0IyNEIxNkNGMUI2
QTNDNEEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA462MMHMTSy5p
ofTl2JGYnAExw+4heM2m1zlDCB0TgEJj4MXZrCY6oBRlUZZ/GTzBAFDc+9++lZPD
hLkJqVyOvSFRogkQJ7V1lgycVoz6K8oZ8lCQSzPIPfu9eSe7LFBYJRFxOc+DmN2d
H+1Y6kvi+tFFCKFEG/PbdH2iY37U02xIxFsk2XFjtG5icRwuS8Gi86hO9CbW7VTb
RBansLe3jSyULxhQroEHS5r9P9uwp+dQ/UwSTMKTriB3d13F1ROLUBvlbi/+o1Xk
Hxhn3wKH0mD9aDbFzcHZ3sIeEbzSJvzqPkzGbc38DH02n7S2ossxxJcwTYDqkibq
l4qa+do5kQIDAQABo4IDETCCAw0wHQYDVR0OBBYEFHqfW0Vhi7iSxHYROySxbPG2
o8SgMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzIwNDczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGx
BggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAAX4oEwDAMEABfiiwMEARfi
jAMEABfijwMEAEAypgMEAEI/pwMEAUgLiAMEAGAv5AMEAGAv5wMEAWAv7AMEAGiB
LAMEAGiBNwMEAWuWHAMEAKegowMEAKegrAMEAaegrgMEAK0sJQMEAa0sKgMEAK0s
LTAMAwQArSwvAwQArSw2AwQBrSw4AwQArSw7AwQArSw/MA0GCSqGSIb3DQEBCwUA
A4IBAQBeFz0ni6F9GQ2y/UJMv5zCMP8IrPOl2ezqsfRmU8tquoetoLdnbpqgwidO
4xNaEhvhwgMkRsgUAI3lv349fxqPFbUQASFgtvBAK5yOysmEsJr9bxrSuh0ZOH6s
MaCI3EPc8G9pN9afKTcYJ011ZQOxr13yDuWtjEQPh7iuMQ+ax4n1FOCLrvGo1IDf
FXi/F2iBoKJENP/WKhfZKei1AB6wE91ExsudJfC6cXAmJ1NlR8nnOe0w7X/Bmjb2
92yGl3ruIhKGvBjw1qdoJ2l7gyCMMipQxQGDFPjd9bypFhZpZpCp33M/VshN0O+p
NZH6O5rg54pQUhFRyYw/mKRZ6LYi
-----END CERTIFICATE-----
Generated at Fri Jun 26 03:01:14 2026 by rpki-client