Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
File:                     AS20326.roa (raw, json)
Hash identifier:          1tk22WdU1CoIcNRpsDeGzGsvQqKxCgMUNGqb/gyB0Lg=
Subject key identifier:   73:F3:41:6C:25:7F:5E:AE:3C:94:49:95:DA:B7:EC:56:8C:B2:99:B4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       48257EC615DBF11948E6DC78C0FF049E7F1C6577
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa
Signing time:             Thu 31 Jul 2025 14:27:54 +0000
ROA not before:           Thu 31 Jul 2025 14:22:54 +0000
ROA not after:            Thu 30 Jul 2026 14:27:54 +0000
asID:                     20326
IP address blocks:        208.76.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:25:7e:c6:15:db:f1:19:48:e6:dc:78:c0:ff:04:9e:7f:1c:65:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 31 14:22:54 2025 GMT
            Not After : Jul 30 14:27:54 2026 GMT
        Subject: CN=73F3416C257F5EAE3C944995DAB7EC568CB299B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:aa:74:89:51:cd:77:55:a2:ea:96:69:14:
                    a4:48:37:16:0c:42:12:1d:61:ca:d0:de:4c:28:2b:
                    3c:20:25:ae:4a:62:d7:c1:92:5e:87:e4:a6:d4:e1:
                    33:e5:33:ae:b6:45:af:76:f7:0f:6c:31:73:35:00:
                    38:4e:f8:02:69:40:d3:ff:21:b6:5c:fd:58:a5:f7:
                    9f:a5:77:ba:d7:b6:54:8b:ad:c1:33:6a:d0:98:d9:
                    79:ee:fe:66:4b:8b:85:47:03:38:d9:22:e5:a7:84:
                    64:7e:6d:76:ac:ba:dd:d4:1f:9b:de:73:bd:37:32:
                    5b:b5:28:19:2a:2b:ae:71:d9:b5:e0:6e:15:2d:58:
                    90:0f:61:b5:fc:1a:75:31:bd:8c:b8:28:ba:52:87:
                    bf:1f:23:fe:96:a2:02:a3:43:03:33:cc:05:d2:43:
                    7f:ca:9b:7a:01:b5:43:f5:01:0b:9a:94:52:a8:68:
                    fc:80:67:8a:c6:96:f7:90:51:d5:53:aa:94:61:26:
                    da:93:99:3b:57:55:0e:1b:4a:e1:05:41:be:22:ea:
                    9a:47:81:8e:a9:55:f7:ec:a9:8e:35:c8:28:fc:56:
                    0a:7a:44:3f:1c:9f:59:1d:4e:94:3d:82:8d:89:e7:
                    7f:d9:f2:f3:5b:e9:7c:5d:51:80:b9:32:c3:7d:6e:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F3:41:6C:25:7F:5E:AE:3C:94:49:95:DA:B7:EC:56:8C:B2:99:B4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20326.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:17:09:68:d7:98:a4:67:c0:93:c9:45:ee:aa:4d:75:7a:
         15:25:de:aa:95:f7:2e:81:2a:fb:0d:9e:7e:ad:d2:3b:7e:c7:
         92:43:4b:93:d7:0e:4b:52:b2:94:cb:5b:f6:4d:85:7d:fa:85:
         64:1a:70:34:8c:bb:05:8c:3f:92:33:b9:bf:e5:c6:9c:19:09:
         1b:58:fa:de:b0:8a:d9:9e:a6:b4:b0:f9:de:b1:76:bc:39:4e:
         94:22:83:a0:23:7c:ed:7f:bd:fa:cf:88:35:d3:04:bf:e7:1e:
         b2:4a:10:17:ba:66:d7:ca:0d:6e:b9:d3:2e:cb:d3:c5:e9:a0:
         58:9f:59:b7:1f:b8:a1:c5:51:e5:7a:60:56:8a:c5:0d:82:00:
         d2:1b:52:7a:58:86:d8:99:9a:c9:af:a9:84:60:df:f7:21:36:
         da:40:87:34:3c:10:bf:02:fb:4f:c7:ee:69:72:cd:f7:0f:8e:
         f8:91:3a:70:d5:e9:54:4a:28:d1:f7:c8:cc:cc:33:24:e9:d1:
         9d:c4:03:e6:6b:85:f2:74:bc:67:4a:d6:d0:4d:a0:cc:b5:2d:
         f5:64:88:9f:70:5f:ab:4c:46:b8:27:0b:78:45:e8:3a:f0:02:
         26:ac:f3:15:a5:db:cf:68:d3:10:11:51:e0:57:9c:71:ad:38:
         b9:d4:cf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:57:44 2025 by rpki-client