Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20001.roa
File:                     AS20001.roa (raw, json)
Hash identifier:          2K1twcqEDsjMnIuFMBcB/SyKhaRbicYms3f6EvdZ8Po=
Subject key identifier:   92:10:94:85:EA:9D:3D:75:40:19:98:05:5D:4F:CA:48:F7:F8:95:F8
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       26401D9EF54A29EF7A8C8017B947384C9EBD3EAB
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20001.roa
Signing time:             Mon 23 Jun 2025 11:39:22 +0000
ROA not before:           Mon 23 Jun 2025 11:34:22 +0000
ROA not after:            Mon 22 Jun 2026 11:39:22 +0000
asID:                     20001
IP address blocks:        75.102.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 20:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:40:1d:9e:f5:4a:29:ef:7a:8c:80:17:b9:47:38:4c:9e:bd:3e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jun 23 11:34:22 2025 GMT
            Not After : Jun 22 11:39:22 2026 GMT
        Subject: CN=92109485EA9D3D75401998055D4FCA48F7F895F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:99:59:8d:13:92:e6:85:5f:8e:d4:6a:4e:
                    8e:7f:af:8e:b4:8a:db:06:5b:7b:3e:3d:37:a3:b0:
                    1e:11:9d:1c:4e:3d:ed:82:0a:a3:80:57:03:e3:58:
                    b5:8a:93:59:73:95:c9:99:db:8b:2f:11:b5:86:39:
                    20:26:02:5c:0f:8f:80:d8:bb:58:b9:69:1b:ae:4c:
                    bd:f3:3a:6a:84:9e:53:15:4a:34:80:d9:2c:93:bb:
                    40:e2:b1:4f:17:f4:3d:77:4e:08:cc:85:e5:61:8e:
                    96:00:79:0d:38:ca:a2:18:d4:a8:11:4a:95:74:11:
                    a0:3a:37:65:cc:59:f4:ba:29:be:0a:e4:0e:61:ba:
                    b2:96:5e:22:3e:e4:35:c6:25:dc:0a:c8:39:86:a8:
                    41:93:47:1f:ff:dd:ea:fe:4e:91:c3:58:14:43:d0:
                    1d:48:20:60:01:ee:82:73:c0:3d:a4:3c:4f:18:c9:
                    91:12:90:6a:53:8c:03:de:26:f9:78:b4:35:f3:79:
                    e1:9b:1b:3c:dd:4a:cb:01:73:b5:4a:56:c0:21:25:
                    dd:8f:b3:1d:ee:cc:bf:a6:d9:00:96:ca:ff:6e:82:
                    ab:7a:72:06:f2:07:c3:b6:b2:dd:de:7b:48:43:e1:
                    73:6a:a5:59:2b:6d:cb:34:d9:94:6a:58:70:2d:e7:
                    2e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:10:94:85:EA:9D:3D:75:40:19:98:05:5D:4F:CA:48:F7:F8:95:F8
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20001.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:73:af:31:cb:c5:37:2f:28:d2:1c:1c:28:7e:7e:50:8b:42:
         1f:d9:55:47:43:86:83:1f:f7:85:88:02:16:23:38:f4:6a:2e:
         ca:fa:25:00:59:9a:86:5d:50:7f:22:91:e1:e0:f1:4d:60:c3:
         08:82:ff:9a:02:f7:38:4f:53:36:77:1c:21:35:75:4b:35:7c:
         0b:37:15:71:8a:b6:d8:12:16:8c:3b:29:39:95:40:16:d7:c7:
         bc:8c:f1:11:98:25:e0:aa:ab:a3:cd:7f:01:77:14:2a:b1:22:
         bb:7c:60:72:bf:ca:7f:73:ba:10:42:58:b1:58:e8:c4:dd:e8:
         04:21:4a:b1:05:36:eb:24:0f:40:97:51:f6:6e:68:65:94:15:
         35:dc:90:f9:74:b3:d8:84:e0:cc:5a:0f:55:69:dc:d0:91:13:
         eb:dd:1e:d1:d3:91:28:30:3c:f6:ee:70:b4:23:93:99:e7:66:
         70:01:62:13:65:bf:2a:7d:88:ef:80:96:4c:b9:52:af:97:e3:
         f6:97:ee:73:a6:ea:02:37:be:97:d7:c4:06:67:48:75:43:46:
         6d:d9:c6:b0:5e:af:c1:46:b3:db:7a:8d:5a:8e:32:35:36:83:
         9f:43:35:61:34:ec:c2:6c:21:92:1e:8e:11:21:5d:48:9b:fd:
         89:48:14:71
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUJkAdnvVKKe96jIAXuUc4TJ69PqswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwNjIzMTEzNDIyWhcNMjYwNjIyMTEzOTIy
WjAzMTEwLwYDVQQDEyg5MjEwOTQ4NUVBOUQzRDc1NDAxOTk4MDU1RDRGQ0E0OEY3
Rjg5NUY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMyZWY0TkuaF
X47Uak6Of6+OtIrbBlt7Pj03o7AeEZ0cTj3tggqjgFcD41i1ipNZc5XJmduLLxG1
hjkgJgJcD4+A2LtYuWkbrky98zpqhJ5TFUo0gNksk7tA4rFPF/Q9d04IzIXlYY6W
AHkNOMqiGNSoEUqVdBGgOjdlzFn0uim+CuQOYbqyll4iPuQ1xiXcCsg5hqhBk0cf
/93q/k6Rw1gUQ9AdSCBgAe6Cc8A9pDxPGMmREpBqU4wD3ib5eLQ183nhmxs83UrL
AXO1SlbAISXdj7Md7sy/ptkAlsr/boKrenIG8gfDtrLd3ntIQ+FzaqVZK23LNNmU
alhwLecuHwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFJIQlIXqnT11QBmYBV1Pykj3
+JX4MB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzIwMDAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2YGMA0GCSqGSIb3DQEBCwUAA4IB
AQCGc68xy8U3LyjSHBwofn5Qi0If2VVHQ4aDH/eFiAIWIzj0ai7K+iUAWZqGXVB/
IpHh4PFNYMMIgv+aAvc4T1M2dxwhNXVLNXwLNxVxirbYEhaMOyk5lUAW18e8jPER
mCXgqqujzX8BdxQqsSK7fGByv8p/c7oQQlixWOjE3egEIUqxBTbrJA9Al1H2bmhl
lBU13JD5dLPYhODMWg9VadzQkRPr3R7R05EoMDz27nC0I5OZ52ZwAWITZb8qfYjv
gJZMuVKvl+P2l+5zpuoCN76X18QGZ0h1Q0Zt2cawXq/BRrPbeo1ajjI1NoOfQzVh
NOzCbCGSHo4RIV1Im/2JSBRx
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:46:15 2025 by rpki-client