Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/32332e3133312e3137322e302f32342d3234203d3e2037303130.roa
File:                     32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (raw, json)
Hash identifier:          UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=
Subject key identifier:   87:80:46:F5:E0:F1:03:0F:64:D9:B9:50:4F:AC:E6:1F:E2:FB:88:17
Certificate issuer:       /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial:       6BEBAEC8C3113098B388AC792165CEC7016217FE
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/2/32332e3133312e3137322e302f32342d3234203d3e2037303130.roa
Signing time:             Fri 26 Jun 2026 21:03:51 +0000
ROA not before:           Fri 26 Jun 2026 20:58:51 +0000
ROA not after:            Fri 25 Jun 2027 21:03:51 +0000
asID:                     7010
IP address blocks:        23.131.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
                          rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 20:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:eb:ae:c8:c3:11:30:98:b3:88:ac:79:21:65:ce:c7:01:62:17:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
        Validity
            Not Before: Jun 26 20:58:51 2026 GMT
            Not After : Jun 25 21:03:51 2027 GMT
        Subject: CN=878046F5E0F1030F64D9B9504FACE61FE2FB8817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:6e:2d:8f:55:a7:40:b4:2b:10:27:7f:98:
                    69:6c:49:6a:a6:c0:5e:31:01:37:69:e9:d1:15:2e:
                    27:68:f1:e7:0d:6c:b7:e1:35:2b:d3:39:9e:5b:16:
                    ed:f1:51:8f:cf:9a:12:73:7d:a8:f4:5a:b8:49:b4:
                    fd:c6:e9:3e:e4:f0:b9:d7:27:94:de:94:23:6a:6b:
                    04:a7:67:21:5e:f7:1e:85:54:ff:fc:ac:a8:0c:3e:
                    5e:7b:2b:7b:a6:e6:95:90:39:68:d8:0e:33:7f:c4:
                    59:a9:11:46:75:c4:89:cd:0d:99:2d:df:36:46:f0:
                    4d:c1:0d:ee:29:83:28:1a:8e:ee:37:0b:c5:9e:4d:
                    a0:d4:91:ef:e2:ae:6b:c2:98:3f:36:7b:b9:0d:9d:
                    34:a4:54:14:3c:9f:38:87:c7:7a:97:5d:23:0f:0a:
                    f8:da:d1:a5:6b:5d:be:f3:91:4e:65:5a:22:5a:44:
                    81:5f:e6:73:84:99:67:63:23:fd:3e:2d:80:09:44:
                    9b:00:c2:35:f0:90:45:89:7c:2a:c2:4f:b7:af:a3:
                    a1:55:85:5b:34:3b:6a:e4:f6:c9:1d:2e:4d:b5:87:
                    67:f6:8c:a6:26:31:fa:c4:d9:09:74:4a:95:c5:f4:
                    56:fd:4a:93:93:2f:ae:26:f8:af:2f:41:34:8f:31:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:80:46:F5:E0:F1:03:0F:64:D9:B9:50:4F:AC:E6:1F:E2:FB:88:17
            X509v3 Authority Key Identifier:
                keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/32332e3133312e3137322e302f32342d3234203d3e2037303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:38:ec:9b:af:63:88:5c:ec:d7:8f:87:24:b1:51:87:0b:32:
         dd:48:34:0a:b9:9e:11:0b:5f:78:5d:83:fd:dc:7c:56:d4:08:
         22:41:a8:0e:ae:e2:7e:3c:4e:49:8b:57:de:d3:57:55:73:1e:
         4a:3a:27:7a:39:4f:7d:4b:b1:76:0f:f7:02:fd:b1:0d:ec:0d:
         46:9e:37:a9:c2:63:f4:ba:65:d3:0c:22:c5:60:bb:37:45:c6:
         12:f9:9f:4c:99:78:58:09:96:d4:2b:78:31:df:f0:40:30:6e:
         bc:25:f9:df:e9:cb:26:2f:70:97:64:6f:87:43:29:80:79:cc:
         c6:4e:ad:f6:ee:35:bb:0d:f7:b2:a8:a3:3e:1c:ff:a8:ba:4c:
         b7:f4:ba:7d:b2:ab:be:ff:9a:22:f7:56:ed:89:41:41:38:92:
         3d:73:9c:82:08:86:05:1e:0f:c6:1d:68:61:9f:69:43:a1:b7:
         42:4d:99:78:f6:be:82:d9:5e:7d:ef:52:67:73:43:b0:15:9e:
         2b:80:f4:ec:5c:65:a7:20:12:35:3b:fc:87:be:f9:31:03:b2:
         29:cc:cd:4a:2c:80:67:f4:24:0a:fa:43:79:c0:e6:3d:c2:4d:
         e0:2a:5b:aa:b6:c6:84:70:39:a9:ba:8e:36:6a:ca:cb:59:af:
         f4:e0:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:27:26 2026 by rpki-client