Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207083.roa
File:                     AS207083.roa (raw, json)
Hash identifier:          ucJqjh3yzOd+bFOH0Mp9cCRGIMeX6P5OjkjgetDbo0Q=
Subject key identifier:   7A:B3:93:F8:3F:46:40:1F:12:80:B4:F7:20:E8:88:84:1B:F5:69:02
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       56FF703F43C9CF4FEE78033C4B7AFC907C936AAD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207083.roa
Signing time:             Fri 09 May 2025 02:11:25 +0000
ROA not before:           Fri 09 May 2025 02:06:25 +0000
ROA not after:            Fri 08 May 2026 02:11:25 +0000
asID:                     207083
IP address blocks:        66.63.169.0/24 maxlen: 24
                          66.63.170.0/24 maxlen: 24
                          69.12.83.0/24 maxlen: 24
                          72.11.156.0/23 maxlen: 24
                          104.223.80.0/24 maxlen: 24
                          104.223.81.0/24 maxlen: 24
                          155.94.209.0/24 maxlen: 24
                          216.144.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ff:70:3f:43:c9:cf:4f:ee:78:03:3c:4b:7a:fc:90:7c:93:6a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May  9 02:06:25 2025 GMT
            Not After : May  8 02:11:25 2026 GMT
        Subject: CN=7AB393F83F46401F1280B4F720E888841BF56902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:1c:e0:69:53:4a:53:5f:de:d0:c8:4c:56:
                    ec:ff:91:a6:7a:a5:7d:e0:88:ee:7a:25:8e:69:06:
                    15:bc:e2:3e:c9:d6:bf:f4:6c:d0:0c:d5:e3:bb:a3:
                    97:8b:06:5e:e8:be:33:95:4d:1c:98:44:89:42:6c:
                    4b:86:72:f6:ff:5d:97:45:70:f1:25:68:28:96:f5:
                    d9:ca:96:bc:61:2a:d0:04:0d:85:fd:2d:3e:46:82:
                    db:4a:84:58:9e:3c:0b:9d:3d:21:2a:54:00:a8:b2:
                    14:b8:cc:da:97:c4:81:d7:85:60:4b:85:ab:c0:29:
                    81:da:87:cc:a8:41:c5:4e:db:c2:9b:41:25:e8:50:
                    17:12:bf:a4:b1:dd:78:49:44:c4:f5:b2:81:7e:97:
                    dc:9a:18:04:0b:97:3c:06:ea:5f:31:02:94:f6:fd:
                    9e:a8:2e:d9:b2:e5:05:6d:44:d2:76:6c:f1:ee:d7:
                    98:01:ac:32:2f:96:0e:c6:ad:5b:28:aa:29:99:13:
                    f3:b3:00:1f:8d:d9:d6:8b:bb:88:a9:ee:2a:d7:ea:
                    8b:09:2c:6c:60:fd:4f:df:45:aa:dd:f1:50:34:96:
                    e3:78:10:e7:5d:f1:55:e9:0a:18:c6:68:17:ea:80:
                    be:a4:57:eb:5b:07:8e:82:84:20:bc:2b:94:c0:ab:
                    61:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:93:F8:3F:46:40:1F:12:80:B4:F7:20:E8:88:84:1B:F5:69:02
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207083.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.169.0-66.63.170.255
                  69.12.83.0/24
                  72.11.156.0/23
                  104.223.80.0/23
                  155.94.209.0/24
                  216.144.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:cd:34:d1:eb:b2:cc:c1:38:07:ef:53:ba:8b:09:10:12:
         fa:81:c2:c2:ad:0e:dd:3f:79:5f:a0:f9:43:c9:12:9c:8f:d7:
         3b:24:53:e9:58:8e:90:6e:63:10:dd:66:15:28:9c:9c:fa:a5:
         57:0a:00:29:5f:4c:7a:18:11:45:8e:46:be:e9:e2:e2:a7:83:
         3a:3e:36:7d:06:45:58:37:86:db:6b:c6:3a:d5:b2:f2:30:67:
         b1:2f:66:33:86:26:76:46:df:30:b6:1f:1d:37:9b:8f:17:92:
         26:35:d1:b7:80:f7:90:6a:cc:49:f7:10:39:05:c9:b6:12:7a:
         21:a3:cc:8a:17:55:3e:67:8d:b5:7a:13:33:7f:35:6b:b2:55:
         5a:57:ca:e5:81:3a:4e:3f:8a:c4:59:b6:fb:d6:8c:ee:55:4f:
         31:13:6d:a8:e7:12:58:12:c8:b3:34:4d:f6:b4:ab:21:ab:a6:
         1e:3d:9d:89:89:0e:90:3b:3a:97:5e:15:52:5b:38:18:1a:3e:
         41:85:53:e1:71:20:d7:ef:22:d6:38:90:6e:49:f4:17:da:3d:
         92:b7:40:a8:bb:ae:ec:d8:ca:1d:be:c1:b3:29:ff:cd:2b:a1:
         b9:ef:f6:7d:31:f0:05:80:5b:f7:b4:06:3e:bb:22:b7:49:a6:
         d8:5c:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:19:42 2025 by rpki-client