Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS270111.roa
File:                     AS270111.roa (raw, json)
Hash identifier:          gZ4FOFjXduAtQ0Lrx1n96uPSd0+EYdQaUh/V1KPX/C4=
Subject key identifier:   B1:8A:D9:CF:C7:5B:9A:0C:3F:DC:C5:1B:F5:02:C5:36:B1:E4:0D:37
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2E12DE00292592F4A8404D7C5C4B7EF0227029E4
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS270111.roa
Signing time:             Wed 06 Aug 2025 19:55:39 +0000
ROA not before:           Wed 06 Aug 2025 19:50:39 +0000
ROA not after:            Wed 05 Aug 2026 19:55:39 +0000
asID:                     270111
IP address blocks:        209.200.233.0/24 maxlen: 24
                          209.200.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 13:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:12:de:00:29:25:92:f4:a8:40:4d:7c:5c:4b:7e:f0:22:70:29:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug  6 19:50:39 2025 GMT
            Not After : Aug  5 19:55:39 2026 GMT
        Subject: CN=B18AD9CFC75B9A0C3FDCC51BF502C536B1E40D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:b6:a8:ed:e3:7c:4d:c5:7f:9a:14:75:76:
                    9b:8a:ed:f9:10:78:0f:86:2b:1d:bf:06:ba:6c:8f:
                    84:13:1c:da:ad:49:a5:79:80:f6:d9:a9:88:bc:8c:
                    53:db:cf:29:2a:ff:64:3e:40:70:e2:1e:39:8c:fc:
                    18:38:ea:7c:ac:56:ac:7c:5d:d0:8f:f2:13:d2:98:
                    4c:ec:73:1c:1b:9e:c4:3c:12:0e:5d:54:9d:ec:62:
                    f4:c9:24:36:2d:23:92:b9:8c:2e:00:92:b0:1f:79:
                    08:ab:ee:7c:43:61:c3:c8:8c:fe:e4:a2:c2:e0:01:
                    3c:ba:5a:26:05:0b:d5:0b:64:82:18:04:86:05:a8:
                    8e:d3:d0:fb:0a:4f:a9:d7:a4:c3:1f:60:f6:ed:c6:
                    9b:e7:94:67:44:30:d8:0c:fa:d4:24:2c:e9:30:ae:
                    e7:da:a2:1f:32:ff:71:f4:ee:21:c3:43:ec:c4:a9:
                    66:04:e3:72:51:e7:2a:6b:a1:4e:1f:0d:01:48:27:
                    29:1f:3a:ba:8f:92:81:8e:c3:b2:bd:97:f7:e6:fb:
                    b2:09:28:53:83:c6:d2:08:94:48:1b:0f:28:7c:7b:
                    c6:ec:9c:5c:69:e5:d1:2c:3b:95:30:1a:39:d3:af:
                    47:a8:a6:45:05:88:80:04:53:56:ce:29:e8:cd:12:
                    e8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8A:D9:CF:C7:5B:9A:0C:3F:DC:C5:1B:F5:02:C5:36:B1:E4:0D:37
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS270111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.233.0/24
                  209.200.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b0:35:75:48:4c:be:1e:b5:5e:65:1c:8e:51:30:9e:4c:dc:
         36:65:f0:0d:cf:21:31:4c:91:44:91:5e:5a:be:72:c0:6d:f7:
         7e:4a:31:fb:d9:54:e0:0c:ff:83:94:5d:2b:09:67:ae:86:b5:
         bd:58:e9:78:46:97:bd:15:a8:52:d6:02:20:e7:c1:c2:36:e6:
         42:7d:1e:86:f5:4a:9f:1e:a8:1c:d6:c5:d8:99:ff:aa:5c:25:
         39:63:d6:bb:dd:32:b5:38:df:73:84:c4:16:9b:cd:ed:4f:27:
         1f:50:3a:81:5e:65:2d:b2:50:68:2a:68:5f:9e:44:23:d2:c9:
         71:55:eb:95:97:87:12:8c:ab:f1:5a:14:44:21:a1:0c:fc:4f:
         85:f8:a5:98:ac:7c:e4:75:e6:4a:d8:97:1b:69:b1:ce:ca:8d:
         77:03:a0:fb:b8:92:32:cc:cf:5f:29:b8:cc:31:f1:1f:b3:c4:
         6f:07:54:84:e7:7a:6a:67:33:09:b0:c4:3c:b3:85:b9:95:3c:
         7b:e9:d0:8d:67:c3:e1:1a:bd:ef:5d:df:5a:ef:5a:34:a2:92:
         7d:4d:b0:ef:21:85:07:08:88:52:e6:f8:83:05:4d:68:d9:d5:
         1f:99:d1:13:eb:30:84:bd:5c:4a:a8:3e:cb:14:6c:46:66:18:
         06:35:d3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:09 2025 by rpki-client