Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          TlcYFDsYs+aCF9LB88ArFysjPjkqdPtqUuOM/O/MJc0=
Subject key identifier:   97:2F:1E:17:4E:1F:1D:29:E3:6A:C6:CF:8E:25:00:CF:20:7A:F2:1C
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       586AC513AE38236BB70F8D7D107D1A9281A5C658
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa
Signing time:             Thu 02 Oct 2025 10:12:43 +0000
ROA not before:           Thu 02 Oct 2025 10:07:43 +0000
ROA not after:            Thu 01 Oct 2026 10:12:43 +0000
asID:                     20454
IP address blocks:        66.225.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:6a:c5:13:ae:38:23:6b:b7:0f:8d:7d:10:7d:1a:92:81:a5:c6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct  2 10:07:43 2025 GMT
            Not After : Oct  1 10:12:43 2026 GMT
        Subject: CN=972F1E174E1F1D29E36AC6CF8E2500CF207AF21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:cc:53:b4:d0:ed:d9:ec:00:5a:d1:93:40:
                    bd:dc:cb:bb:85:57:c0:b9:98:2d:81:07:b2:eb:41:
                    3d:7d:c2:7f:a9:1d:d8:0b:a7:a8:94:8d:19:9b:38:
                    82:0b:8b:03:aa:38:69:05:ad:9e:f6:cb:d5:40:20:
                    f9:c1:20:ec:d3:f6:89:da:c0:b3:ad:cf:1e:f9:9c:
                    23:42:78:1c:e7:f2:c8:f7:a6:76:2c:27:76:55:f2:
                    81:50:8a:76:4a:cc:05:03:49:63:db:4c:42:12:2b:
                    80:94:71:7c:e9:e1:b8:27:09:b7:14:f6:8f:97:86:
                    9d:d3:54:12:33:88:17:3b:d9:d7:72:f2:04:ef:31:
                    11:e9:52:56:db:da:16:ea:0b:b0:68:46:ad:25:b8:
                    9a:bf:91:aa:33:e3:46:23:b9:e1:9c:1b:98:6a:00:
                    5e:53:f3:91:61:76:48:e7:7a:7a:ad:13:a6:ff:c4:
                    af:6b:75:90:65:df:db:2d:c5:73:dc:bd:21:af:5a:
                    71:ac:15:4e:04:d7:2c:6c:7a:e2:af:90:2b:c9:91:
                    8d:7a:1c:16:8d:d4:ee:c4:4f:13:65:22:08:34:21:
                    18:99:be:af:d1:0a:70:38:b4:1c:ff:85:54:b8:0e:
                    75:a4:54:a6:b3:c1:22:66:89:a6:43:51:ad:bd:37:
                    e8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2F:1E:17:4E:1F:1D:29:E3:6A:C6:CF:8E:25:00:CF:20:7A:F2:1C
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:98:3e:93:a0:fb:0c:27:61:5c:75:26:60:04:53:59:3f:cf:
         4e:2d:08:57:45:43:e1:bf:e3:45:96:27:fb:c7:f9:f6:c7:c1:
         fc:2d:c3:30:0e:17:f4:42:f3:7d:1e:3c:3e:a3:a5:92:0f:b1:
         bc:76:f8:c4:67:98:00:70:85:d1:f1:1c:d0:18:47:42:95:b2:
         29:62:88:7f:90:1d:96:91:81:0e:24:ba:d4:1b:7d:cf:1a:07:
         9b:c0:23:41:2b:e3:31:f7:eb:b3:48:21:e4:8a:30:09:df:e7:
         61:53:2f:02:4b:03:e9:aa:3e:cf:32:46:3f:b1:58:20:9d:c5:
         fb:6e:ee:20:16:70:e0:c4:66:44:a6:2a:90:18:b3:ac:e7:4d:
         f2:aa:13:5d:fb:ee:ba:42:47:9e:13:86:8e:82:77:f6:16:2e:
         24:d2:6f:74:2a:92:2e:8a:95:9e:f3:3f:aa:37:df:32:24:95:
         ef:0a:09:79:0a:3c:6d:fe:19:49:db:68:28:23:63:5f:d2:39:
         99:83:2b:42:51:1a:02:e4:9a:91:35:fa:c8:52:49:fb:47:19:
         50:79:0f:df:58:e8:e9:aa:06:13:04:cf:30:9b:c8:80:e3:f2:
         7e:71:02:e0:0d:42:f9:49:0d:f2:6d:7d:40:23:11:50:b5:b7:
         be:92:6a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:45 2025 by rpki-client