Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa
File:                     AS211440.roa (raw, json)
Hash identifier:          2pzQgFHbVC+TbSIQSH9OJzZHptO74xlAQUym130tzcs=
Subject key identifier:   E1:2F:59:D4:51:08:10:33:8F:AF:DC:55:17:05:58:1D:EE:AB:4D:D2
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       726B0AD06726BC5AED64BC0DD3EF6D1D296E32B6
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa
Signing time:             Wed 20 Aug 2025 07:46:33 +0000
ROA not before:           Wed 20 Aug 2025 07:41:33 +0000
ROA not after:            Wed 19 Aug 2026 07:46:33 +0000
asID:                     211440
IP address blocks:        23.95.175.0/24 maxlen: 24
                          67.210.100.0/24 maxlen: 24
                          67.210.106.0/24 maxlen: 24
                          67.210.126.0/24 maxlen: 24
                          74.50.2.0/24 maxlen: 24
                          74.50.5.0/24 maxlen: 24
                          209.200.251.0/24 maxlen: 24
                          209.200.253.0/24 maxlen: 24
                          209.200.254.0/24 maxlen: 24
                          216.97.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:0a:d0:67:26:bc:5a:ed:64:bc:0d:d3:ef:6d:1d:29:6e:32:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 20 07:41:33 2025 GMT
            Not After : Aug 19 07:46:33 2026 GMT
        Subject: CN=E12F59D4510810338FAFDC551705581DEEAB4DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5b:3a:95:28:99:e4:68:9a:11:dc:e4:15:e1:
                    21:d3:65:06:a1:b3:ec:f8:f0:d1:29:d7:39:ad:65:
                    72:4b:d5:5c:11:c8:11:e3:83:49:86:9b:01:a0:ce:
                    32:90:33:3d:d2:09:37:4d:d8:d2:a9:cc:e7:2d:e3:
                    92:87:87:71:9f:23:80:ac:dc:55:21:b6:49:cd:d0:
                    22:06:24:4e:29:69:fd:77:92:be:7c:d9:9c:a8:5d:
                    be:1f:ad:85:9a:90:b6:aa:f4:2b:b3:d4:ab:d0:28:
                    d3:1f:67:4b:08:f6:ff:4e:82:1a:d3:39:dd:08:e8:
                    a5:b3:92:28:9e:7f:dd:7e:24:f4:0a:fa:ff:97:35:
                    09:7b:59:18:1a:da:b3:38:78:a4:de:4a:d5:f5:32:
                    43:d6:57:bc:f6:24:c5:dd:a8:ca:48:e9:93:26:59:
                    26:70:36:18:30:8f:8e:04:26:50:ab:da:f5:6f:63:
                    70:92:9c:89:1e:33:f0:3b:01:a2:93:81:21:08:3a:
                    14:a3:9d:c4:b4:2c:15:61:61:30:27:4b:cb:cc:6e:
                    b7:93:b3:68:f1:48:09:dc:dc:e6:96:1f:08:9d:13:
                    65:fa:43:08:ac:b4:54:2e:37:fe:08:e4:e6:26:80:
                    cb:d8:0c:2b:10:a5:aa:d8:88:df:68:37:3e:dc:e2:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2F:59:D4:51:08:10:33:8F:AF:DC:55:17:05:58:1D:EE:AB:4D:D2
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.175.0/24
                  67.210.100.0/24
                  67.210.106.0/24
                  67.210.126.0/24
                  74.50.2.0/24
                  74.50.5.0/24
                  209.200.251.0/24
                  209.200.253.0-209.200.254.255
                  216.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3f:17:c6:f2:56:e2:45:c0:a9:4a:9b:f7:9c:f9:4b:f2:f6:
         fa:c9:6b:b7:12:21:ff:d6:35:b7:fe:e8:bf:40:c3:5d:63:4c:
         26:84:6e:24:54:45:38:ce:a7:aa:fe:11:a5:36:88:66:c3:d6:
         54:ac:49:1a:7d:77:f9:56:e3:81:a0:ed:f8:bf:8b:3a:07:9e:
         63:43:e9:19:c2:c8:ed:94:d4:a1:74:2a:af:3b:2a:93:22:aa:
         89:d3:69:3e:a5:4c:8a:b7:d9:5e:a7:59:12:97:99:6f:b9:b9:
         a7:f6:de:3d:fe:a0:c3:92:a6:f9:2f:09:b3:cf:99:e9:ee:ca:
         21:e9:cf:19:cc:17:16:77:65:eb:f2:1e:2f:97:44:e8:52:f0:
         75:d5:c3:19:b5:cc:d9:84:cc:51:2c:60:a8:72:e6:37:0a:e8:
         cb:67:92:bf:eb:fc:31:6e:91:46:85:af:b2:23:15:94:46:57:
         88:09:0f:68:5c:09:02:d7:49:61:78:e4:7e:41:78:40:1a:ac:
         62:b6:c8:0b:7a:90:11:e9:16:f2:9d:96:f9:4c:70:a4:18:f2:
         5c:6c:c2:29:6b:5a:97:5d:0e:ff:8f:f6:e7:d0:9b:61:d2:1a:
         19:79:cd:fc:f3:0d:29:44:63:43:78:62:d5:f1:59:2c:77:f3:
         fe:f3:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:04:10 2025 by rpki-client