Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7922.roa
File:                     AS7922.roa (raw, json)
Hash identifier:          U8R2NcophoWCvXzxqkFVnw9EiP+TAiBFvPJa9GaZtNk=
Subject key identifier:   0F:D1:27:E8:22:FF:5B:B3:4B:AC:9C:88:84:8C:AE:4C:39:63:74:FF
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       04F8B4917A294683DFDE1FB5AEF09E7D4E195000
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7922.roa
Signing time:             Tue 26 Nov 2024 11:09:06 +0000
ROA not before:           Tue 26 Nov 2024 11:04:06 +0000
ROA not after:            Tue 25 Nov 2025 11:09:06 +0000
asID:                     7922
IP address blocks:        204.93.173.0/24 maxlen: 24
                          205.234.162.0/24 maxlen: 24
                          205.234.234.0/24 maxlen: 24
                          216.246.7.0/24 maxlen: 24
                          216.246.28.0/24 maxlen: 24
                          216.246.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f8:b4:91:7a:29:46:83:df:de:1f:b5:ae:f0:9e:7d:4e:19:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Nov 26 11:04:06 2024 GMT
            Not After : Nov 25 11:09:06 2025 GMT
        Subject: CN=0FD127E822FF5BB34BAC9C88848CAE4C396374FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:df:a9:c8:3b:3e:d1:70:86:25:04:29:da:
                    fd:55:76:2d:33:d7:39:bd:91:11:58:f5:fc:fe:73:
                    a0:96:3f:be:33:54:9b:17:e1:04:46:6c:72:f0:2f:
                    ff:58:c7:d6:16:28:1a:ce:e1:d6:da:54:06:8d:79:
                    6b:d2:4a:7b:ca:ce:3f:21:c2:52:ac:26:9e:4f:a9:
                    20:66:36:16:ef:d2:3e:27:15:20:9a:50:08:d2:87:
                    31:47:57:e8:b9:82:9d:6b:f6:a4:e2:fd:fe:1c:e2:
                    1b:c6:f0:54:60:34:56:23:aa:c8:ac:71:16:fe:93:
                    f9:05:05:a2:c7:59:f9:2e:c1:38:39:4e:6d:df:7e:
                    3e:28:b0:72:45:4d:f6:54:9f:7b:4f:70:bb:c6:1b:
                    ec:e3:0d:cd:c0:32:7d:bb:b6:98:b6:0b:a8:f2:1c:
                    97:9c:4f:2b:aa:b4:52:28:e5:da:33:bf:b1:3d:07:
                    f6:d9:88:0a:ba:90:59:ed:1a:6b:97:04:ac:30:1b:
                    b4:9f:c7:3a:eb:54:eb:16:ee:bf:27:40:7d:3d:3f:
                    26:29:0e:cb:fa:15:ce:17:c7:07:d6:6f:c7:35:97:
                    ab:65:52:a7:ca:65:2a:7a:8c:97:d7:fd:c2:61:58:
                    09:e2:1d:26:33:62:db:e2:20:b6:c5:a9:9a:fd:53:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D1:27:E8:22:FF:5B:B3:4B:AC:9C:88:84:8C:AE:4C:39:63:74:FF
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS7922.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.93.173.0/24
                  205.234.162.0/24
                  205.234.234.0/24
                  216.246.7.0/24
                  216.246.28.0/24
                  216.246.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:86:3e:85:23:d0:40:54:b6:55:fc:f4:f1:74:9f:ac:24:
         db:16:77:20:87:87:ba:07:31:e0:03:2d:9b:ef:b9:3e:f2:35:
         7e:8e:35:f4:a9:64:f8:80:01:cc:76:f4:a3:95:71:33:ef:91:
         eb:06:2c:8b:c4:3b:80:a0:db:dc:0c:af:9d:91:f8:c7:65:19:
         9d:92:98:9f:67:19:ac:e9:52:cb:e4:9f:25:d3:a3:a9:82:ce:
         74:4a:4a:c1:fb:8c:c3:f0:75:cd:1b:26:35:75:9c:40:2d:40:
         9a:46:43:5b:6c:8a:ec:0d:51:75:f0:f2:98:11:50:e3:66:7a:
         a0:e2:fd:c7:a2:95:31:6e:1a:35:70:94:9f:68:61:ec:28:3b:
         d3:ba:44:f2:eb:e6:69:3c:66:7c:27:fd:a5:cd:83:c7:e6:c3:
         28:61:b2:73:d7:00:1e:0a:97:b9:6c:06:ca:c5:fd:57:43:4a:
         f0:66:2e:85:fc:42:d6:2c:de:89:59:e2:f3:fc:6a:af:b4:cc:
         c2:1d:2f:df:78:57:48:4f:85:2d:b8:f4:12:38:17:a1:d3:6b:
         0d:71:03:5b:4f:df:df:8f:2a:ac:63:61:a3:7e:9a:38:5b:86:
         28:da:dd:41:ca:56:00:ce:09:7d:a0:00:ca:45:e6:0d:2d:94:
         19:c1:2a:e3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:26 2025 by rpki-client