Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3320.roa
File:                     AS3320.roa (raw, json)
Hash identifier:          j/wJAbHoe8ynXHBCUHCR30WSl60XfWOUlbjmNni6mt0=
Subject key identifier:   AE:26:BE:F0:B7:BC:EE:CF:7E:D2:5C:56:9A:04:E1:6B:6D:03:01:27
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1D519B2FEF4A47571D2D17D55275BB3BB0A61998
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3320.roa
Signing time:             Sun 23 Mar 2025 01:21:05 +0000
ROA not before:           Sun 23 Mar 2025 01:16:05 +0000
ROA not after:            Sun 22 Mar 2026 01:21:05 +0000
asID:                     3320
IP address blocks:        67.210.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:51:9b:2f:ef:4a:47:57:1d:2d:17:d5:52:75:bb:3b:b0:a6:19:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 23 01:16:05 2025 GMT
            Not After : Mar 22 01:21:05 2026 GMT
        Subject: CN=AE26BEF0B7BCEECF7ED25C569A04E16B6D030127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:56:0d:76:dd:15:32:ee:e2:ec:90:5d:13:
                    08:04:d5:14:11:a5:4b:58:5c:95:e4:31:94:e4:c7:
                    5d:0c:ec:c3:40:14:b6:d1:22:97:21:b2:95:38:9d:
                    bd:2c:42:58:2e:55:71:5c:08:3d:f0:00:dd:38:7d:
                    38:7b:b1:57:5c:6c:15:f9:59:f6:c5:89:55:39:4c:
                    f8:22:8d:e3:92:07:2d:48:a2:8d:72:cb:6c:ad:83:
                    d3:3f:56:1e:b4:85:cc:3a:28:d8:61:fb:fd:ff:67:
                    2a:ac:3f:53:ab:c4:10:a0:dd:5a:c5:16:59:84:47:
                    f9:6c:31:4f:9e:7a:b9:e0:fc:d2:2f:5f:9f:c6:68:
                    29:87:3a:fe:20:62:61:c1:ba:e7:92:01:84:23:99:
                    94:2c:e3:06:a8:42:0f:0f:c6:29:18:06:ac:71:5a:
                    16:d3:4f:94:ee:85:ca:50:5a:55:71:9e:00:cc:c5:
                    fb:1e:87:ec:e7:b6:1f:51:39:50:74:b4:7d:41:af:
                    4a:6d:68:07:87:f7:ad:d4:08:1c:11:79:7b:7c:29:
                    30:a4:5d:16:b1:95:8f:b4:8c:c4:9c:75:9e:7e:55:
                    9c:aa:54:46:de:54:3a:b9:3a:08:b6:57:1c:83:05:
                    09:4e:ee:0a:d0:95:23:53:7d:f5:54:37:ce:34:42:
                    8b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:26:BE:F0:B7:BC:EE:CF:7E:D2:5C:56:9A:04:E1:6B:6D:03:01:27
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3320.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:4d:17:23:24:75:98:88:99:58:a0:e7:ae:3f:63:9a:e2:
         39:83:4b:bb:7f:72:56:f7:c6:8f:36:6b:85:b4:06:0b:3f:8e:
         fe:c3:70:b8:f2:c6:e0:9b:39:3a:b9:9c:32:25:e3:0a:72:d6:
         32:db:04:92:37:65:b2:49:97:42:b5:b3:01:80:2a:a8:35:4d:
         99:4a:9d:6d:ef:1c:d4:4c:e1:11:21:56:1a:46:f4:22:b3:30:
         15:1d:a9:df:03:8d:2b:cd:92:0e:10:96:89:ec:b9:95:23:bb:
         ab:f0:19:71:85:30:26:12:0d:58:0b:3c:ce:20:ba:eb:fd:e6:
         55:92:4b:6c:f4:41:c9:6e:8e:12:3a:c8:29:51:8a:a7:3c:ec:
         16:87:6c:7c:ce:92:4f:af:e5:23:20:c1:4e:e5:4a:28:50:59:
         e9:e5:34:f8:0d:b2:46:33:4f:15:51:ea:85:0f:be:01:0b:f1:
         46:c6:ff:e4:cb:3d:c6:06:92:5c:cc:ac:ce:ef:7b:71:ff:7f:
         e5:21:fe:a2:07:7b:c0:2d:1c:be:dc:05:e2:d9:15:70:dd:7d:
         6a:e1:74:91:93:7d:d0:32:e9:9d:b3:bf:45:aa:21:c1:55:40:
         1c:0b:d3:7e:70:fe:b4:47:fc:e5:26:b4:1d:1f:ad:0d:ed:f1:
         e3:3c:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:27:10 2025 by rpki-client