Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          RhGssKblAckrJixkRagsJ7P6bMkz9sS2L/Zn+8Vf5Bs=
Subject key identifier:   1C:D8:AC:1B:EE:15:69:CE:17:FB:6B:27:BC:83:2B:92:A2:A6:16:CD
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       70CE0450C58922D89182D4B3F2E188F96169DF40
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa
Signing time:             Thu 19 Jun 2025 08:29:44 +0000
ROA not before:           Thu 19 Jun 2025 08:24:44 +0000
ROA not after:            Thu 18 Jun 2026 08:29:44 +0000
asID:                     20473
IP address blocks:        140.99.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 02:40:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ce:04:50:c5:89:22:d8:91:82:d4:b3:f2:e1:88:f9:61:69:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jun 19 08:24:44 2025 GMT
            Not After : Jun 18 08:29:44 2026 GMT
        Subject: CN=1CD8AC1BEE1569CE17FB6B27BC832B92A2A616CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:c0:79:b7:a2:1e:19:02:48:10:a8:8b:22:
                    a6:0f:01:5f:88:33:f8:3f:74:c6:56:de:e9:9e:0c:
                    76:77:e2:44:da:f7:48:f5:e9:c9:5d:1a:a6:11:1a:
                    a4:e5:2a:2e:d2:43:ab:4b:11:d0:a2:03:f1:e8:3e:
                    bc:2f:9a:87:93:07:2a:b3:3e:4b:cc:37:9a:dc:9a:
                    a4:4e:d3:13:68:5d:91:5a:1b:95:d3:76:e6:d3:18:
                    cc:29:10:5a:b8:c0:22:8f:33:19:13:da:96:83:01:
                    48:69:e8:09:26:2f:1a:47:51:33:26:87:4a:1d:38:
                    f9:25:a4:f4:48:67:9e:98:cc:6b:21:53:b0:de:77:
                    f2:9f:b1:8e:0d:09:6d:97:ba:de:75:8e:14:85:84:
                    26:32:4c:bf:71:42:0c:96:2b:d9:5f:5d:d6:4d:15:
                    46:47:b2:f9:cf:1b:31:63:8b:b8:b6:e1:46:84:1b:
                    ee:6f:48:52:d7:64:56:e9:5f:0a:46:da:60:68:dc:
                    0c:8a:27:2a:b7:d2:62:f1:02:94:c9:18:04:bf:ae:
                    a6:23:b2:a2:22:df:48:6d:e9:8d:bc:01:39:52:f6:
                    0d:d9:03:8a:f6:f0:26:46:da:9a:b9:dc:b9:c7:3a:
                    43:25:8f:57:c3:cb:c5:9e:fd:ff:37:04:69:66:64:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D8:AC:1B:EE:15:69:CE:17:FB:6B:27:BC:83:2B:92:A2:A6:16:CD
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:44:a7:db:50:20:83:e6:00:b0:9c:0d:69:98:f6:fb:42:15:
         ad:7d:d0:e2:c1:67:b2:96:6a:16:e4:2a:a3:df:3e:ca:2e:33:
         46:f3:b7:3b:1f:85:6a:40:7b:a2:bb:ac:e4:2b:b4:07:90:18:
         e7:eb:58:02:c4:5f:fd:b5:5d:ff:97:43:af:ad:6a:33:72:1c:
         6f:62:22:2d:9f:31:1a:d3:0a:73:c6:41:35:cc:92:a6:3e:ce:
         ce:a2:ac:9d:77:8b:fa:c4:90:e8:55:77:34:59:a8:3c:f3:de:
         7c:1a:23:4c:eb:35:1f:ed:50:2a:32:70:88:9a:26:c4:83:bc:
         36:dd:fb:34:62:a6:67:6e:42:b6:df:9e:dc:a1:97:2b:28:88:
         b1:67:11:a1:24:70:65:1e:a0:fb:4e:e8:21:20:b0:e1:59:33:
         5b:79:65:fd:ea:b6:36:dd:ba:5e:ce:b4:4b:3b:ae:c9:42:a9:
         27:0d:c1:36:48:f0:53:3a:2c:23:3e:17:97:53:24:63:1d:42:
         2f:6c:24:86:e0:05:85:07:60:77:17:73:3c:41:11:e0:95:77:
         ff:a7:8e:b6:38:ef:3d:97:5d:fc:39:d0:19:8b:3b:05:35:b0:
         22:31:12:22:bf:a9:43:fb:3e:0f:8e:9a:75:03:3a:bb:9b:d6:
         18:74:fa:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:30:45 2025 by rpki-client