Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          qRcaV7IS5HAnS0KN6PYJ1XqYnasco/Ljx9Rsz19gY0I=
Subject key identifier:   62:EE:E9:DD:CE:A4:1D:B3:7D:15:E3:E1:B0:68:E3:D5:98:77:40:D6
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0D4CF5A35FAC5C12FE27D36F611B34C0F896A2ED
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20473.roa
Signing time:             Fri 18 Sep 2026 19:36:20 +0000
ROA not before:           Fri 18 Sep 2026 19:31:20 +0000
ROA not after:            Fri 17 Sep 2027 19:36:20 +0000
asID:                     20473
IP address blocks:        205.234.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4c:f5:a3:5f:ac:5c:12:fe:27:d3:6f:61:1b:34:c0:f8:96:a2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 18 19:31:20 2026 GMT
            Not After : Sep 17 19:36:20 2027 GMT
        Subject: CN=62EEE9DDCEA41DB37D15E3E1B068E3D5987740D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:34:09:47:0d:4c:92:7b:48:df:b3:e3:69:
                    ca:6b:bf:b8:96:b6:55:50:ea:d4:c4:35:46:e9:94:
                    87:a3:15:43:8d:fd:72:60:b6:7a:24:c3:5f:5a:15:
                    7b:1c:8d:69:8f:52:e9:41:a8:d7:29:6a:ee:96:c0:
                    d6:06:89:9b:14:2a:d3:6c:3d:9b:12:cb:43:86:23:
                    9c:f5:8f:a7:9e:97:62:43:ca:3d:84:42:43:7e:bd:
                    c8:8a:df:a8:20:b2:4c:8c:b4:0e:3c:e2:d4:f1:22:
                    59:0d:64:3d:c4:ce:5c:54:74:a1:da:96:98:de:bf:
                    a6:f6:6b:46:29:a6:88:d5:3c:5f:1d:30:92:5d:e8:
                    80:ce:3b:a8:82:34:de:a1:64:a9:42:46:b7:06:ae:
                    53:b6:24:55:4b:7d:3f:f8:de:21:db:79:1a:dc:b0:
                    c8:64:e6:e0:78:ee:f8:92:9b:c8:b8:55:0c:a4:c4:
                    f9:1d:9d:39:aa:69:78:ce:2c:9b:fa:1b:90:41:42:
                    08:fe:98:6c:16:ba:1a:48:c1:ea:98:50:cd:a8:42:
                    64:74:cd:02:f9:a2:b1:3e:f8:1e:29:c2:2a:b3:ca:
                    2b:a9:5f:77:d5:57:bb:e2:9d:c3:a0:ec:c2:7d:6f:
                    ec:dd:68:5f:32:a2:60:34:25:86:16:f2:6d:1c:23:
                    13:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:E9:DD:CE:A4:1D:B3:7D:15:E3:E1:B0:68:E3:D5:98:77:40:D6
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:fb:68:48:49:09:f9:73:17:fd:1d:91:68:cb:a6:cb:fe:3b:
         3b:44:3b:2e:7e:b5:7c:ed:d9:e7:08:8c:af:aa:8b:1a:fd:bc:
         21:48:75:9e:b3:7e:a6:22:6c:ee:c8:33:10:c4:87:5c:3f:3a:
         02:c1:6e:99:a3:19:b7:90:74:f1:e0:7d:62:f8:19:16:c3:46:
         77:12:f7:11:19:99:4a:2b:55:0a:73:42:28:15:81:c7:5a:42:
         8c:b5:ab:c8:a8:c3:db:a2:64:41:17:ae:21:38:e0:04:72:63:
         d9:4b:78:7e:ef:5b:01:de:9a:38:cb:21:f2:e3:77:cd:a8:4c:
         4a:24:64:d1:c7:08:fa:97:be:1b:fa:89:e7:3f:f2:15:ae:9d:
         c3:35:c1:e0:9c:5a:4d:e6:82:4c:c0:38:78:b2:83:6d:a6:bc:
         31:53:0b:08:03:a5:9c:bc:e4:fc:6a:7f:5e:0a:fd:04:43:d3:
         c7:07:78:23:f1:61:d1:1e:06:64:20:fa:e3:23:5b:9b:29:de:
         4e:9b:ec:bb:b5:78:0f:ae:db:62:f0:d7:fe:d4:f4:16:63:36:
         de:b1:83:e4:39:9c:e8:19:72:44:69:4c:fb:b5:ae:18:53:5f:
         27:4e:66:c2:df:9c:f0:85:82:5d:3f:24:28:9c:e5:5c:d7:31:
         4e:d6:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:14:15 2026 by rpki-client