Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          i5I0s2S5Dp6Hw2QyU9+06Heef4MLd4koCqQ4xx2p748=
Subject key identifier:   91:F0:4A:E8:EE:69:8F:27:35:92:9D:5B:D6:CE:AA:95:04:A9:DC:3D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       49D9C48109640D53D53960367D11CCC6530F469D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time:             Sun 27 Jul 2025 00:02:05 +0000
ROA not before:           Sat 26 Jul 2025 23:57:05 +0000
ROA not after:            Sun 26 Jul 2026 00:02:05 +0000
asID:                     20473
IP address blocks:        23.226.140.0/23 maxlen: 24
                          23.226.143.0/24 maxlen: 24
                          64.50.190.0/23 maxlen: 24
                          66.63.167.0/24 maxlen: 24
                          72.11.136.0/23 maxlen: 24
                          96.47.228.0/24 maxlen: 24
                          96.47.231.0/24 maxlen: 24
                          96.47.236.0/23 maxlen: 24
                          104.129.44.0/24 maxlen: 24
                          104.129.55.0/24 maxlen: 24
                          107.150.28.0/23 maxlen: 24
                          167.160.163.0/24 maxlen: 24
                          167.160.172.0/24 maxlen: 24
                          167.160.174.0/23 maxlen: 24
                          173.44.37.0/24 maxlen: 24
                          173.44.42.0/23 maxlen: 24
                          173.44.45.0/24 maxlen: 24
                          173.44.47.0/24 maxlen: 24
                          173.44.48.0/22 maxlen: 24
                          173.44.52.0/23 maxlen: 24
                          173.44.54.0/24 maxlen: 24
                          173.44.56.0/23 maxlen: 24
                          173.44.59.0/24 maxlen: 24
                          173.44.63.0/24 maxlen: 24
                          216.97.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:19:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d9:c4:81:09:64:0d:53:d5:39:60:36:7d:11:cc:c6:53:0f:46:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jul 26 23:57:05 2025 GMT
            Not After : Jul 26 00:02:05 2026 GMT
        Subject: CN=91F04AE8EE698F2735929D5BD6CEAA9504A9DC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:ce:4a:bd:11:2e:23:26:e0:db:b3:c0:f3:
                    57:e7:36:52:e7:63:da:49:48:d7:6f:a8:d7:bd:ea:
                    f3:06:92:00:29:6f:b8:16:7f:96:0d:95:77:bd:4e:
                    26:90:7e:71:35:f4:c2:b9:0f:df:52:8a:3d:a6:3d:
                    d1:42:74:47:82:7f:1e:6c:0a:b5:6d:d3:25:cc:28:
                    eb:a7:a3:9b:17:24:6d:8a:80:73:56:47:27:c7:b5:
                    10:82:e1:c2:08:78:06:33:1f:5f:eb:7a:87:13:b8:
                    cb:ea:ba:82:5c:fe:1f:60:c3:c1:1e:e4:64:64:32:
                    3d:3b:9e:df:cc:12:22:c3:7a:75:02:91:df:88:f6:
                    58:4a:1d:13:76:7e:fc:09:58:eb:a2:b3:ef:4e:c9:
                    2d:4d:80:6a:0d:f0:dc:71:fd:c4:d6:98:5d:3d:7b:
                    74:8c:95:5e:32:a8:e0:eb:ae:e7:2a:6b:07:a8:cf:
                    a7:3e:88:20:ea:04:b6:8a:3e:cf:1b:b5:bb:77:0d:
                    de:53:6b:d0:c3:79:16:b2:85:0b:e6:2f:a9:9f:9b:
                    fe:20:32:ff:a9:9e:fd:94:42:0e:c0:f1:7b:e6:ee:
                    1b:20:1e:8b:e7:27:59:f6:09:6c:9a:be:24:c7:b0:
                    4e:bc:c1:40:92:6c:af:64:82:e1:ab:ca:2c:ab:e2:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F0:4A:E8:EE:69:8F:27:35:92:9D:5B:D6:CE:AA:95:04:A9:DC:3D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.140.0/23
                  23.226.143.0/24
                  64.50.190.0/23
                  66.63.167.0/24
                  72.11.136.0/23
                  96.47.228.0/24
                  96.47.231.0/24
                  96.47.236.0/23
                  104.129.44.0/24
                  104.129.55.0/24
                  107.150.28.0/23
                  167.160.163.0/24
                  167.160.172.0/24
                  167.160.174.0/23
                  173.44.37.0/24
                  173.44.42.0/23
                  173.44.45.0/24
                  173.44.47.0-173.44.54.255
                  173.44.56.0/23
                  173.44.59.0/24
                  173.44.63.0/24
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:7f:d4:49:f6:90:d3:8a:fc:66:09:f2:21:57:c0:64:8f:
         97:2a:20:27:7e:49:30:04:54:8d:8e:a4:10:80:14:d3:1c:77:
         a3:b4:18:8b:0c:f0:93:c0:25:ff:01:d0:21:1f:7f:48:3c:79:
         c9:47:ea:3b:a8:d2:2e:d7:f2:2d:bc:ac:d8:c5:bb:56:e7:5f:
         05:81:14:10:85:58:63:e9:ec:fc:6f:ab:44:73:05:14:c6:79:
         7d:0b:4d:ed:b1:5c:29:c4:d3:52:66:1a:7a:3a:67:09:1d:d3:
         68:21:fa:84:35:92:4e:20:b3:c9:c6:b8:75:67:05:9c:a7:37:
         72:48:8b:55:b5:d3:be:fa:17:9a:35:6f:ac:41:5c:61:f0:df:
         e2:37:44:70:89:30:70:7b:82:57:12:85:4d:23:83:43:dc:0c:
         6a:6d:29:bf:21:bf:72:02:e5:a5:45:c6:9f:b7:d0:7b:f6:50:
         ec:90:30:c1:24:dd:52:f2:91:8f:08:38:1e:66:b6:6b:68:0d:
         4b:a4:f1:4c:c0:f1:05:37:1a:eb:58:dc:bc:37:ff:62:d8:fb:
         21:60:dc:11:ab:16:01:fc:04:e5:9d:00:6b:ea:a2:69:ad:6f:
         a4:41:34:45:2f:e6:44:50:18:8a:2e:b9:9c:72:45:2a:5b:a6:
         4c:17:9b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:32:16 2025 by rpki-client