Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207043.roa
File:                     AS207043.roa (raw, json)
Hash identifier:          SchNZvAtJPND3oQ6Hl/+z0LxTQIzIsT2aaxZvi2ntcE=
Subject key identifier:   AC:97:E9:C2:3E:E1:DC:70:AF:CA:F9:6D:54:7E:89:CE:D1:33:7B:56
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2996A4B132461B1AC69ED8E4C521A40CA1DBE5AB
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207043.roa
Signing time:             Tue 19 Aug 2025 16:48:05 +0000
ROA not before:           Tue 19 Aug 2025 16:43:05 +0000
ROA not after:            Tue 18 Aug 2026 16:48:05 +0000
asID:                     207043
IP address blocks:        23.94.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:96:a4:b1:32:46:1b:1a:c6:9e:d8:e4:c5:21:a4:0c:a1:db:e5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 19 16:43:05 2025 GMT
            Not After : Aug 18 16:48:05 2026 GMT
        Subject: CN=AC97E9C23EE1DC70AFCAF96D547E89CED1337B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b4:23:2e:d7:f3:1f:54:fa:42:93:59:fd:45:
                    2d:fa:36:c5:ce:a2:0a:74:35:ce:5c:0d:3e:e2:49:
                    cf:b8:b0:14:05:12:21:45:2a:9f:ad:21:55:2d:38:
                    2e:cf:33:2f:cc:94:a9:d0:1a:fa:ce:73:d5:6b:ad:
                    b0:18:81:ca:af:58:f8:6d:ec:52:af:de:fd:23:c7:
                    ff:69:42:f6:f4:30:f0:ff:11:98:87:57:07:f1:f7:
                    09:33:e0:9c:55:c9:79:7a:3c:50:1a:5d:3c:95:64:
                    1e:e2:42:32:7c:4e:16:e7:10:ef:d3:48:2e:c4:0e:
                    f4:df:eb:81:a4:f5:05:88:56:d9:b4:67:26:58:f8:
                    39:e0:be:3a:bd:64:f9:5b:82:f0:19:4a:8a:85:3f:
                    61:3b:4c:d9:89:f1:2f:d6:ca:49:80:3f:db:80:06:
                    ed:b6:65:fb:9a:52:13:7f:6a:92:5f:9e:20:9c:1e:
                    57:14:a8:81:74:a7:6f:d4:7f:d0:b8:c6:e1:4a:49:
                    2c:ce:06:1e:ae:72:89:e2:e8:16:99:ab:11:5b:56:
                    a4:0d:fe:87:f8:59:21:9f:3a:6a:2a:11:d8:7e:aa:
                    a0:8f:3c:15:5f:28:be:40:c8:70:c3:6a:63:5f:10:
                    56:41:0d:5a:be:c5:c2:ce:e0:01:e9:83:32:c6:e4:
                    9b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:97:E9:C2:3E:E1:DC:70:AF:CA:F9:6D:54:7E:89:CE:D1:33:7B:56
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS207043.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:33:e0:70:71:78:c1:18:91:1a:52:f9:29:bf:00:12:67:92:
         96:75:36:46:54:e0:1f:07:f6:fb:be:b2:a0:64:85:d6:0d:9a:
         28:64:26:7c:99:6b:13:ab:13:1a:9e:b7:80:3e:1d:95:30:76:
         61:28:47:6d:d9:3b:6c:bf:d3:2f:b2:e4:d8:16:d5:5b:92:4b:
         92:df:16:9a:e2:35:b3:fd:ba:44:73:e0:76:8e:57:ba:bf:80:
         89:1b:7e:47:8d:ed:fa:d8:2a:83:14:57:d1:d7:44:aa:76:b5:
         70:aa:74:b0:40:11:4e:a2:8a:51:b7:3c:40:21:f0:47:d2:72:
         d0:4c:fe:74:ba:c2:79:40:0b:a1:81:b4:40:0b:79:db:30:cc:
         a9:09:7a:c5:cd:9d:fc:3a:aa:98:0a:9c:92:a1:19:87:87:c7:
         0d:bd:f7:b4:95:e1:ad:4e:8c:95:81:df:c3:d6:4d:97:2e:b6:
         bb:b6:3f:10:b1:76:c5:a6:1c:a8:85:b1:9c:06:a8:20:47:aa:
         72:2a:e1:74:0e:82:8a:a8:9b:61:c8:74:19:be:86:77:93:3e:
         5a:86:13:a2:0d:b2:6d:3a:d2:d2:f9:d1:1d:19:39:75:e5:82:
         bd:19:79:94:ca:e4:a1:84:5b:88:74:17:d2:76:11:1e:2f:f4:
         79:98:ec:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:52:04 2025 by rpki-client