Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          16bkUEjnf69PEzyD/ojGqF005+n8Pwd++sztXfX5U3Y=
Subject key identifier:   7E:58:7E:60:E2:38:C4:F2:FF:5F:FF:7C:6C:1B:65:D4:33:B9:80:7A
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       0B19CA1BABB82214F765525608737194C0AADF10
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS20473.roa
Signing time:             Fri 03 Jul 2026 08:39:40 +0000
ROA not before:           Fri 03 Jul 2026 08:34:40 +0000
ROA not after:            Fri 02 Jul 2027 08:39:40 +0000
asID:                     20473
IP address blocks:        216.75.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 08:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:19:ca:1b:ab:b8:22:14:f7:65:52:56:08:73:71:94:c0:aa:df:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Jul  3 08:34:40 2026 GMT
            Not After : Jul  2 08:39:40 2027 GMT
        Subject: CN=7E587E60E238C4F2FF5FFF7C6C1B65D433B9807A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ee:43:c1:8e:e9:e3:0b:0f:f9:9b:fa:d9:19:
                    8d:d9:5f:dd:89:f7:a2:af:00:e7:01:ce:4f:0a:4b:
                    c3:e8:a0:eb:98:c2:0c:42:d0:0e:9f:a3:bf:09:7d:
                    16:d2:7a:24:42:68:64:c8:6c:4f:23:00:7a:b4:ba:
                    cc:70:37:1b:6a:8e:99:40:bc:fe:e8:2e:d3:2a:30:
                    af:b7:5f:1a:17:49:0b:66:10:d4:18:8c:22:63:4f:
                    28:05:de:d1:5b:93:90:a8:35:35:ec:27:99:50:7d:
                    e1:4e:c0:51:05:d7:2f:e8:aa:9b:d8:c8:2d:71:62:
                    45:1d:81:ae:d9:7a:87:30:5d:6f:b1:d8:7c:bd:0f:
                    a4:04:5a:72:7b:9c:9e:8b:e5:7c:e9:26:8b:77:d7:
                    03:43:97:f9:7f:b5:1b:90:00:e5:be:92:bb:62:4a:
                    51:82:23:35:86:40:ba:a9:05:6b:6d:35:4e:2e:93:
                    c0:59:83:82:96:57:34:06:a9:23:dc:56:ad:58:a8:
                    29:9c:b5:f6:40:ea:1d:d3:c4:bd:5b:ad:30:49:d6:
                    5b:e6:e7:c6:e8:be:65:3e:1e:55:5f:82:7f:ac:a2:
                    f7:e2:03:c2:ab:7c:b3:db:bb:1d:31:96:89:79:07:
                    1b:30:3f:eb:4f:4e:73:d6:82:26:97:ec:35:a1:51:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:58:7E:60:E2:38:C4:F2:FF:5F:FF:7C:6C:1B:65:D4:33:B9:80:7A
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:fa:92:a9:ec:54:71:6d:ef:c7:6f:82:9b:78:9b:3b:73:c8:
         be:1b:c5:b9:9b:5a:9d:dd:2f:de:1d:04:a2:76:32:3a:80:60:
         8b:e4:c0:64:80:09:bf:0b:1e:1b:3c:ff:17:9f:bb:49:82:be:
         1a:bf:67:0c:33:a6:6b:98:bc:bf:03:0c:be:e6:0d:b4:f4:02:
         14:95:56:06:7d:6a:f4:5d:34:4b:6d:f9:cf:d4:0f:99:b0:e1:
         bf:71:94:36:b6:a4:f7:1d:ae:a2:f6:a9:1d:c9:11:f7:3b:ec:
         cc:d3:89:92:e9:0e:d2:44:39:7f:cf:7e:6a:71:13:5c:79:ba:
         77:b8:ad:fa:b3:4a:12:42:6c:96:b5:db:d6:75:7a:75:4f:75:
         38:f7:95:1f:bd:f8:4e:01:75:f2:93:11:6d:6b:eb:3b:f4:26:
         a4:66:de:cd:a2:de:e6:3f:46:09:83:48:1e:ae:a3:cf:14:9f:
         c5:d8:66:37:01:e7:bc:22:a9:bd:01:93:62:bf:37:c4:28:e0:
         c9:ca:41:20:05:a1:ec:a3:73:cb:d0:b0:e5:4c:e5:a8:9e:6f:
         68:d0:90:e7:d5:ba:d2:37:dc:fb:3e:90:04:b2:42:f3:bb:05:
         f8:6c:cb:28:db:60:65:b8:b2:9a:8e:ae:13:f4:c5:9b:30:28:
         95:6f:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:48 2026 by rpki-client