Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230342e302f32342d3234203d3e203233353037.roa
File:                     32332e3133332e3230342e302f32342d3234203d3e203233353037.roa (raw, json)
Hash identifier:          4933FERy7NCKyq2XwCuqswS/EqUs8cwblED9KpKgi/4=
Subject key identifier:   8B:B8:27:6E:24:6F:ED:C9:BC:38:8D:3D:4C:E2:AE:04:82:1A:4D:BD
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       3F1025EF3B51715E5EA9CE5ACA7B7D9CFD5DC1C0
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230342e302f32342d3234203d3e203233353037.roa
Signing time:             Mon 27 Oct 2025 06:46:08 +0000
ROA not before:           Mon 27 Oct 2025 06:41:08 +0000
ROA not after:            Mon 26 Oct 2026 06:46:08 +0000
asID:                     23507
IP address blocks:        23.133.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:10:25:ef:3b:51:71:5e:5e:a9:ce:5a:ca:7b:7d:9c:fd:5d:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Oct 27 06:41:08 2025 GMT
            Not After : Oct 26 06:46:08 2026 GMT
        Subject: CN=8BB8276E246FEDC9BC388D3D4CE2AE04821A4DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:bc:bc:79:07:66:ce:12:8f:ac:14:ef:3d:
                    83:f9:0c:fa:d5:0c:c0:a4:d2:fe:f2:18:58:d9:a8:
                    36:39:a7:b7:2f:da:c3:fb:c5:3d:f9:91:97:e7:07:
                    9c:86:67:84:06:18:a0:ae:3b:6e:23:62:a4:7f:ea:
                    7e:34:e5:1a:6f:92:c4:a1:af:05:20:6a:b4:b8:75:
                    8f:f6:aa:a5:6a:38:3c:16:ae:8c:4c:5c:1f:e3:2b:
                    ef:d7:20:d1:bc:29:e6:0e:25:04:57:13:e3:0b:85:
                    58:a8:2a:92:f9:1c:1f:79:5b:84:bc:67:cd:dd:c4:
                    b4:a6:c4:ea:5d:0e:15:c6:46:fa:20:ae:c4:87:cf:
                    77:d4:8f:ff:58:5b:f7:be:fe:35:2a:5a:ac:21:92:
                    46:76:2e:a6:79:c9:4e:1c:47:21:bb:56:c4:54:72:
                    50:1e:47:13:81:c7:0d:5d:2a:8e:0c:d8:d5:30:5c:
                    ee:a9:44:5c:f9:77:ca:fa:a2:46:70:cf:c3:6b:d0:
                    6e:62:c6:f4:fa:ec:44:ac:72:cc:78:2a:30:7f:0f:
                    58:d6:81:03:48:9a:79:a2:0a:77:2b:e5:61:d5:0e:
                    34:24:d6:c7:ef:00:6b:cd:ab:3c:ef:d8:b7:63:84:
                    4e:6c:d8:eb:a9:ac:5e:b0:7e:94:d2:f6:c1:b9:a3:
                    26:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:27:6E:24:6F:ED:C9:BC:38:8D:3D:4C:E2:AE:04:82:1A:4D:BD
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230342e302f32342d3234203d3e203233353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:da:c7:a6:f1:82:40:bd:5a:61:c7:c2:46:ee:f8:f5:23:
         a4:21:ab:34:81:09:18:34:ea:f4:49:21:d7:b0:c0:9b:8c:d3:
         b6:7e:f8:7c:b7:f9:4c:06:85:d7:d8:b9:de:ad:f5:c9:51:4a:
         c5:19:c1:4f:9b:58:52:ba:8d:8f:b1:d2:c7:b0:10:70:b4:ba:
         39:08:fa:c3:f8:3f:8e:7a:67:04:db:cd:5d:8a:1d:97:30:1a:
         66:9f:b9:c4:3c:3b:ee:41:72:75:f6:c7:04:10:43:4b:90:5d:
         80:ab:c5:e3:c5:1d:df:ad:ce:a8:6f:1c:41:52:54:a7:38:56:
         65:49:b8:9f:cc:95:72:45:4f:ec:5f:67:f5:4d:cd:e4:10:f7:
         c2:56:44:b4:de:a8:6c:cb:75:ce:cc:f0:74:57:e0:a5:6e:7a:
         55:52:34:00:c9:38:68:53:43:24:ad:d8:32:42:0e:53:25:10:
         68:d4:aa:fc:00:2d:cc:42:7c:ab:ac:67:54:80:58:c0:b4:c7:
         e4:61:2c:30:4d:d7:e0:e0:2a:2c:ed:2f:a6:0b:c6:d6:7a:2c:
         25:c6:fd:00:7a:10:37:ce:7e:41:97:e1:db:3c:91:80:70:ed:
         98:0a:52:20:cf:0d:97:9b:ce:87:e0:30:cf:7a:6a:7a:8b:80:
         18:a3:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:21:08 2025 by rpki-client