Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          V3NK80ZwMZcaLoPQSdVSFw9hQvnaqBOHToYVrV8beAk=
Subject key identifier:   F2:9B:B0:DA:D3:5C:51:15:FF:1A:DA:5D:C9:26:BC:C4:5C:7A:B2:26
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0F716B7AB28663DC33FA5345D75FDBF3F4E764E6
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
Signing time:             Wed 09 Apr 2025 08:27:22 +0000
ROA not before:           Wed 09 Apr 2025 08:22:22 +0000
ROA not after:            Wed 08 Apr 2026 08:27:22 +0000
asID:                     20454
IP address blocks:        66.225.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 22:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:71:6b:7a:b2:86:63:dc:33:fa:53:45:d7:5f:db:f3:f4:e7:64:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Apr  9 08:22:22 2025 GMT
            Not After : Apr  8 08:27:22 2026 GMT
        Subject: CN=F29BB0DAD35C5115FF1ADA5DC926BCC45C7AB226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9f:8d:d2:51:a8:86:8c:c9:7a:a7:df:3a:32:
                    68:5e:a8:75:ea:58:45:3c:93:02:2e:c2:49:9b:2c:
                    1b:d0:a3:28:cc:2c:2c:19:e8:f0:5a:02:3a:8a:94:
                    62:35:4e:86:d2:31:0b:a3:e0:df:5b:38:b2:9b:59:
                    16:36:55:4e:6a:c0:e3:88:f1:d6:39:52:55:27:60:
                    38:2f:ae:c5:89:c3:2c:1e:f1:73:82:b3:26:0d:48:
                    39:57:17:4b:e5:da:c1:24:6a:b9:c9:33:d2:44:9a:
                    c7:c4:1d:9b:ca:82:54:6b:b1:9c:27:09:c1:e2:3e:
                    3c:a7:8b:16:fe:02:52:aa:68:46:a6:02:4d:a3:25:
                    d4:4e:cb:0a:99:5c:c4:06:4a:90:ae:fe:fa:67:9e:
                    53:78:ec:02:42:c7:73:63:8e:2f:36:85:6c:a2:3b:
                    b0:28:74:dd:03:b4:10:89:e8:ea:4a:d3:27:97:2e:
                    23:cb:e5:24:0f:72:55:55:20:31:c2:22:9e:92:e7:
                    d5:64:87:ff:22:58:c5:2e:7e:0a:26:28:47:71:ad:
                    d6:32:ae:e7:c3:81:af:67:1d:4b:4d:5a:11:ab:da:
                    ae:d2:b6:97:d9:6c:dc:15:d6:c8:d4:66:a8:fc:dc:
                    55:a2:a9:53:81:df:18:ec:71:00:d5:52:b6:8e:8f:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9B:B0:DA:D3:5C:51:15:FF:1A:DA:5D:C9:26:BC:C4:5C:7A:B2:26
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:e8:21:d4:0a:4b:eb:1f:a3:91:a9:ca:bc:42:96:8c:56:
         02:85:be:3a:83:2a:29:b5:cb:ae:0e:3e:d3:81:63:6c:89:17:
         3b:b7:bb:b5:f7:fb:05:13:4e:87:84:bf:87:d3:9b:de:80:70:
         7f:05:e3:71:73:75:13:25:53:bd:62:e8:c2:56:20:4e:d7:90:
         ec:ed:ba:dc:9d:8a:cd:5a:6a:59:f2:ba:99:4d:10:75:7b:e9:
         a7:4d:be:e5:f4:fc:93:ce:b1:8d:5c:12:bc:a8:61:b8:6a:0e:
         87:3c:f4:fc:23:71:e6:2b:6e:41:13:a6:9b:6e:d2:c6:d5:09:
         a7:6b:cc:70:e2:db:20:93:89:0e:0c:42:2b:73:56:bd:42:f4:
         71:66:f4:2d:4a:da:a4:84:5b:86:73:e8:ca:4f:d9:f5:28:c5:
         10:b6:f2:3e:8d:3b:fa:51:00:06:da:fa:ff:5c:1b:5d:5d:3b:
         67:61:b2:9e:0c:7d:94:06:e4:51:99:60:09:bc:10:6d:de:92:
         f6:fb:18:78:e7:d8:83:f4:e7:04:e1:f7:27:58:0a:dd:f3:c7:
         33:ff:7f:17:58:41:01:7b:7c:11:d5:97:1d:3e:3d:65:79:53:
         99:7d:2c:89:5d:8e:cd:fa:47:79:16:dc:d6:7b:68:28:a8:a9:
         14:a1:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:56:43 2025 by rpki-client