Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          nVizTyAtt8u2D0ztsNLvxxSIin9pEWvp5LOUs+KNVAM=
Subject key identifier:   AA:CE:D3:A3:88:0F:1D:B4:0E:E8:6D:D0:CA:3D:FD:80:C6:76:64:17
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7811A370235A4912C9AD8599DDDBFA21E9CBDAD8
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS8075.roa
Signing time:             Tue 13 May 2025 07:00:13 +0000
ROA not before:           Tue 13 May 2025 06:55:13 +0000
ROA not after:            Tue 12 May 2026 07:00:13 +0000
asID:                     8075
IP address blocks:        67.210.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:11:a3:70:23:5a:49:12:c9:ad:85:99:dd:db:fa:21:e9:cb:da:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 13 06:55:13 2025 GMT
            Not After : May 12 07:00:13 2026 GMT
        Subject: CN=AACED3A3880F1DB40EE86DD0CA3DFD80C6766417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:af:7b:48:83:ee:61:d8:02:71:6c:4e:07:
                    38:11:08:78:6a:92:9a:25:b9:0f:2c:9a:b2:62:93:
                    94:f5:11:eb:9e:c7:2d:55:7d:98:0f:73:6f:60:2b:
                    ec:48:20:12:ea:b5:dc:cf:60:12:d9:84:a8:33:af:
                    d8:41:9d:83:99:2b:79:bf:b0:9b:e4:af:9e:0f:4e:
                    18:50:5b:c0:1e:58:ab:14:17:e5:f5:78:46:58:6c:
                    aa:fa:a8:8f:9b:b7:f2:5d:9b:c8:30:f5:50:b7:ad:
                    f1:74:2d:b9:1b:25:b5:6d:0f:89:60:cf:ef:31:10:
                    11:5b:6e:e4:88:ae:ef:64:8a:57:6c:1b:ec:d6:84:
                    d6:09:b7:b9:0b:4d:bd:61:07:3e:3b:ff:b2:80:06:
                    66:a3:66:ec:fc:37:52:c5:f2:5e:50:1d:6c:b8:00:
                    0f:61:b5:78:6d:38:39:98:0d:f7:33:bc:d0:7b:41:
                    6f:66:2e:b3:ca:9a:97:59:48:81:83:ef:5f:cc:ec:
                    66:82:4e:8e:ff:79:e8:ec:3b:0d:cf:52:21:a7:a4:
                    68:54:10:97:74:45:77:d4:23:90:88:e5:88:59:fb:
                    59:43:ad:c3:ca:cd:0c:90:56:64:80:26:e4:d7:fc:
                    7f:ba:58:58:2b:15:b4:16:af:bc:16:b7:25:7b:fe:
                    9f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:D3:A3:88:0F:1D:B4:0E:E8:6D:D0:CA:3D:FD:80:C6:76:64:17
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:c1:44:6f:1d:60:66:6d:ce:85:31:5d:80:2a:85:5d:8f:
         b4:ae:b7:c9:c5:46:4e:2c:77:f2:af:81:60:8c:24:58:5e:ab:
         a3:bd:3d:64:c4:61:37:a0:d3:5d:4f:75:8f:25:55:f6:31:3e:
         db:36:50:17:df:15:e0:c2:9f:11:a1:87:1e:d4:fa:86:ad:59:
         c7:22:86:41:af:3f:cc:41:46:07:65:47:31:44:c5:9e:c6:d8:
         b4:8c:67:fc:80:3d:ba:fb:cd:4e:71:4b:c1:2b:d5:c8:ca:3c:
         91:88:f3:88:7d:5d:bb:1d:54:0b:3c:13:84:2e:ca:ce:de:a5:
         38:da:9a:99:da:07:13:68:f5:73:a7:23:fa:5b:4d:43:f1:d3:
         97:d9:e9:17:b7:31:4d:c1:8e:ae:6f:fe:ff:ac:80:c7:db:77:
         b2:48:4d:17:f6:50:a2:69:5c:74:c6:53:eb:16:c1:3b:54:ed:
         3a:8a:22:c5:18:ae:ff:92:e6:58:91:05:14:35:95:d4:57:7c:
         1f:4a:e8:da:27:67:76:d8:29:08:56:0e:06:f3:83:c5:28:a1:
         93:a9:e9:49:af:45:69:a7:fd:0f:63:b7:f0:c1:14:2b:00:8c:
         da:1f:97:e9:5b:f4:20:ac:a1:6b:52:3e:6f:68:a4:fc:30:8b:
         5c:0b:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 21:51:06 2025 by rpki-client