Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          DvU4uZLJXdTe7mQH1k02nkp0Q+aYEJRfUcqK7aDrIgo=
Subject key identifier:   0D:1D:0B:9D:40:E6:48:5C:03:C6:D4:40:F8:6B:6C:20:85:33:6D:C3
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       11468E3A7CB0FD6E777633FDAD58914AF6C46C5C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20454.roa
Signing time:             Wed 06 Aug 2025 12:29:44 +0000
ROA not before:           Wed 06 Aug 2025 12:24:44 +0000
ROA not after:            Wed 05 Aug 2026 12:29:44 +0000
asID:                     20454
IP address blocks:        104.234.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:46:8e:3a:7c:b0:fd:6e:77:76:33:fd:ad:58:91:4a:f6:c4:6c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug  6 12:24:44 2025 GMT
            Not After : Aug  5 12:29:44 2026 GMT
        Subject: CN=0D1D0B9D40E6485C03C6D440F86B6C2085336DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:8d:73:fe:55:a0:94:4c:e1:77:0d:45:48:
                    60:ff:00:2c:0b:81:e0:0b:67:b1:ae:45:a5:84:94:
                    6a:c9:15:eb:ea:ee:53:28:9b:60:f3:dc:eb:db:c0:
                    8f:a7:78:02:cc:36:e2:a7:d0:80:0a:d8:47:2d:5c:
                    b7:02:20:c5:8e:5d:72:b4:ff:26:21:17:87:a3:50:
                    00:e4:72:82:f6:26:b6:25:a8:f2:9c:90:ab:39:53:
                    e1:55:94:dd:94:d7:63:e2:01:9f:93:f6:6a:a9:40:
                    31:53:46:11:e8:08:8a:5a:0a:9a:dc:2e:8a:fe:8d:
                    a0:77:71:78:14:a5:1c:ef:8f:e8:fb:fe:2e:8e:2e:
                    a5:1e:47:e4:be:6d:1d:2f:c7:0c:56:7e:4e:af:c8:
                    68:80:41:ec:67:0c:a0:96:9a:e1:cb:2f:61:e9:a9:
                    a5:c4:df:3b:65:dd:19:c0:1c:7e:ca:6b:16:48:24:
                    84:45:55:cf:6b:c1:76:59:15:67:8c:c8:4a:25:64:
                    f4:5f:cf:2e:b9:ed:72:0a:76:d5:59:3f:a5:18:d6:
                    78:26:1e:66:54:59:43:6d:27:d0:09:92:3e:cd:de:
                    0a:9e:ab:e2:86:4f:0a:a9:8c:e9:2e:f5:4c:33:99:
                    29:c8:83:2f:40:a5:c8:af:f6:ed:bb:23:0d:9b:e0:
                    61:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1D:0B:9D:40:E6:48:5C:03:C6:D4:40:F8:6B:6C:20:85:33:6D:C3
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:a6:45:1c:e3:1d:8c:30:6c:6e:a5:45:06:c2:67:96:ff:
         1e:64:28:30:69:11:3e:ea:a1:7c:9d:7c:3e:37:38:af:01:fa:
         38:0e:f3:45:3d:37:97:2d:0c:7f:be:e7:33:e9:75:77:5d:46:
         d6:ec:35:d3:d4:78:7d:9b:aa:9c:8a:33:23:91:c6:af:ba:e2:
         5a:9f:21:5f:1b:24:c9:0c:0d:b0:62:cb:be:c9:5a:d6:06:d7:
         fd:68:20:15:2f:36:f5:a7:be:32:3f:07:74:7b:bd:1f:69:83:
         9d:02:74:4a:9d:a5:f7:d0:37:a7:9a:b4:2e:6c:c0:ff:eb:0b:
         79:02:c2:6e:06:d3:45:9e:1b:6b:b6:8f:45:5f:e7:4e:e4:15:
         72:f7:72:00:4a:a5:8a:06:96:35:b3:bc:5f:18:be:78:4f:30:
         bd:b7:96:f4:c5:32:3d:87:ce:b3:c0:2c:93:04:ce:df:89:31:
         45:4a:b5:71:3b:53:dd:2f:33:ad:b8:62:7b:2a:12:6b:11:40:
         a3:aa:dd:2b:37:91:e7:2d:04:5a:eb:20:44:7e:df:76:54:6c:
         c6:6f:de:32:a3:25:17:67:8c:46:5e:f3:e1:f3:64:04:1c:ec:
         c5:b9:24:ee:b4:43:a7:66:f8:16:9e:a0:28:4a:a3:f5:5b:3d:
         d5:db:60:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:51:35 2025 by rpki-client