Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          Jc+MaDn4Py/77HBbaa0q2YXfBeDq3itQMmpARutHjIg=
Subject key identifier:   F3:5E:03:2A:F4:01:D5:09:F9:5F:FD:8F:77:F3:27:A2:CF:2F:95:FC
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       53C53851267103932529BC197664BBD23A9614D3
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
Signing time:             Tue 28 Jan 2025 04:42:29 +0000
ROA not before:           Tue 28 Jan 2025 04:37:29 +0000
ROA not after:            Tue 27 Jan 2026 04:42:29 +0000
asID:                     20454
IP address blocks:        66.225.227.0/24 maxlen: 24
                          205.234.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c5:38:51:26:71:03:93:25:29:bc:19:76:64:bb:d2:3a:96:14:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jan 28 04:37:29 2025 GMT
            Not After : Jan 27 04:42:29 2026 GMT
        Subject: CN=F35E032AF401D509F95FFD8F77F327A2CF2F95FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:fa:fc:ec:dd:ac:04:6d:60:8e:f2:80:af:
                    95:bf:b8:1e:81:38:10:6a:17:7b:b5:ce:90:b4:12:
                    9d:f5:86:da:5c:3b:39:52:ea:ad:eb:08:87:af:11:
                    67:7a:7d:cf:fe:12:be:c6:fb:ef:79:7e:e5:ea:4f:
                    55:b9:ec:1a:a6:37:d2:04:99:7f:23:f6:a3:51:a2:
                    fd:bd:dd:b4:d5:31:7c:65:b1:2d:e6:ff:d0:e9:5e:
                    90:30:13:a3:8c:55:33:49:60:9f:ad:28:64:46:c0:
                    01:bd:54:59:34:50:a4:32:ae:27:21:87:bd:0c:39:
                    b8:0b:06:60:e1:ad:4b:9a:27:d7:10:e6:85:ff:c2:
                    8a:83:0b:6e:9b:e1:d1:41:4e:90:ee:9c:90:24:08:
                    2b:8c:31:17:d9:ee:ea:8d:9e:6e:1d:75:e0:1c:fa:
                    3d:8c:42:e9:dd:83:2b:d9:ee:09:0a:dc:a0:e3:d0:
                    16:36:1f:39:1b:ea:0d:94:99:1d:47:ec:7b:24:b6:
                    d7:d1:3b:cb:52:e8:28:8c:b3:47:06:d6:a3:28:00:
                    3e:f4:36:af:ba:49:d1:23:e5:c8:2a:09:b5:d6:33:
                    99:1e:3d:8b:b4:cc:79:4a:c4:df:07:f5:f6:3a:92:
                    56:a2:3a:3a:83:87:57:fd:d6:ca:2b:7f:79:ca:97:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:03:2A:F4:01:D5:09:F9:5F:FD:8F:77:F3:27:A2:CF:2F:95:FC
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.227.0/24
                  205.234.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:6b:5f:df:af:bb:aa:fa:d2:45:7c:83:ac:80:ec:b4:fc:00:
         c9:90:11:4a:92:29:a4:2d:40:c8:dd:19:50:83:0a:dc:4f:5e:
         78:4f:a1:89:a1:e0:75:34:df:23:1f:64:41:34:c2:03:24:79:
         9c:e0:52:1c:6e:d3:74:ad:b6:01:db:bc:cf:0b:8d:3a:36:d3:
         5d:db:fe:87:b5:99:be:67:3a:1c:62:e2:c7:7c:31:65:1c:51:
         fa:23:ad:7b:4b:8e:97:a8:1a:42:1c:43:09:82:d8:bc:68:a3:
         e1:a8:10:a5:a4:a3:b2:68:d3:63:b3:af:65:77:65:03:52:12:
         30:9d:66:f5:05:57:41:7c:72:f8:cf:a7:81:b9:86:0c:c2:a0:
         e0:f4:54:0c:ab:a7:32:b9:d8:ac:79:7b:af:c1:c0:54:a7:3c:
         f8:78:8c:12:fb:4f:31:eb:32:16:9d:f2:cd:d9:a7:ff:50:c0:
         04:bc:d4:6e:a7:5b:79:99:c5:75:6a:5f:43:f2:5d:24:09:d1:
         0b:4e:28:44:2a:35:35:7e:3c:4a:41:18:bf:04:fe:2f:f4:d1:
         e9:45:06:7a:ca:bf:ff:89:09:ee:2a:a3:7e:5d:cd:75:2a:df:
         3d:87:35:49:5b:ae:f5:fd:1d:3f:46:e8:f7:1b:fb:ef:60:03:
         94:d7:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:16 2025 by rpki-client