Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
File:                     AS200325.roa (raw, json)
Hash identifier:          QwMkWbIsZlOBedZLerIDD/8X86XpLuCw1dU+H4A2ukg=
Subject key identifier:   F4:A6:36:24:10:94:BD:F7:46:97:BD:AF:46:3F:4B:6E:08:E4:D7:8C
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       58DF3A10C5A8821F3D625A7D3AB26D4E02DE767C
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa
Signing time:             Mon 04 Aug 2025 23:13:59 +0000
ROA not before:           Mon 04 Aug 2025 23:08:59 +0000
ROA not after:            Mon 03 Aug 2026 23:13:59 +0000
asID:                     200325
IP address blocks:        157.53.226.0/24 maxlen: 24
                          2607:f740:e00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:df:3a:10:c5:a8:82:1f:3d:62:5a:7d:3a:b2:6d:4e:02:de:76:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Aug  4 23:08:59 2025 GMT
            Not After : Aug  3 23:13:59 2026 GMT
        Subject: CN=F4A636241094BDF74697BDAF463F4B6E08E4D78C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b2:ee:4d:77:a8:82:74:de:d4:7e:f9:55:58:
                    35:0e:65:10:86:a2:e3:6d:18:69:bf:84:f5:9a:a3:
                    d2:71:8a:e9:58:1c:18:91:61:9c:70:13:28:97:27:
                    8f:11:5d:06:dc:88:73:c8:aa:f5:0c:8c:b3:5c:83:
                    d8:60:11:db:28:e4:85:74:2d:e7:3d:ec:17:c9:9d:
                    b8:de:76:a2:a3:b0:93:57:e8:99:63:b4:47:90:3c:
                    5e:2f:c0:ff:39:80:34:a2:3c:b7:47:a2:c2:b9:db:
                    b3:5a:ae:0c:25:7c:82:9b:89:bf:b7:be:53:6f:92:
                    70:b7:69:ea:f2:c6:2a:01:11:61:e4:dd:82:0d:46:
                    6f:97:9a:7b:c8:b0:5b:bc:15:d2:9a:0f:24:5a:40:
                    65:4e:8b:01:db:f3:05:6f:09:eb:91:45:06:64:51:
                    73:59:d9:fc:d2:a6:fe:e0:09:c6:59:db:be:7b:70:
                    0f:c0:b9:4d:a8:c8:52:8e:14:7c:83:0e:ea:6e:08:
                    b7:76:fe:08:f6:0b:b1:f2:6f:dc:b3:45:0f:e6:ca:
                    68:94:73:63:07:85:f1:c4:7f:39:19:c3:8a:31:0d:
                    81:c9:5d:c1:3f:1e:5a:6b:72:dd:d9:12:4c:6e:dc:
                    8e:4c:6c:27:ea:ad:4f:31:91:ec:06:ee:b1:67:d8:
                    e8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A6:36:24:10:94:BD:F7:46:97:BD:AF:46:3F:4B:6E:08:E4:D7:8C
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.53.226.0/24
                IPv6:
                  2607:f740:e00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:19:db:90:fe:8f:94:06:ef:be:1d:be:d3:d2:76:82:46:
         bb:5f:b2:3d:bb:3e:41:30:99:a5:d6:56:b0:bf:be:fd:7a:45:
         8d:2d:3e:0e:86:c5:88:66:e4:5b:82:15:f2:a0:82:68:1a:64:
         bb:38:c6:1c:e6:03:04:1b:40:fc:19:42:11:2f:eb:fb:71:e5:
         c2:fa:46:3a:a4:e0:e6:42:b6:0d:fc:c2:c7:5e:31:60:89:e0:
         b6:e2:59:94:77:cd:05:8d:a6:3f:76:0b:fb:fb:fa:6f:98:91:
         8f:eb:a2:93:b1:da:b5:49:43:5f:49:5a:1a:93:01:0b:ff:ed:
         68:f6:9b:d2:0f:ed:d9:a7:05:c2:a3:f8:b2:4e:82:a9:32:5d:
         94:ee:d0:53:37:bf:9f:ab:62:0c:32:7e:ab:c0:40:ec:de:25:
         ac:2c:d2:1a:62:28:be:a8:f1:c2:ea:fa:d3:13:7f:20:ed:cb:
         01:b5:ac:30:a8:94:3f:f4:73:2a:c2:d3:d0:a8:51:e6:25:20:
         86:b5:be:f2:9b:e7:9f:16:a0:c1:75:d1:01:f0:7a:4a:29:de:
         94:10:b9:ec:d0:12:16:f9:20:7f:98:ff:64:7b:98:5f:24:a5:
         f1:5e:c8:05:1e:dd:0c:1a:84:95:9a:c4:36:8a:b3:18:19:4f:
         5b:10:61:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:31 2025 by rpki-client