Route Origin Authorization

$ rpki-client -vvf rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa
File:                     32332e3133332e3230352e302f32342d3234203d3e203233353036.roa (raw, json)
Hash identifier:          AZbofACv2oLRVPtKJW+Ut0kUiIV6QY+Wa5v5BBJnN/k=
Subject key identifier:   CB:61:55:1C:9B:FE:E0:7C:B0:44:2C:6E:B4:DA:2B:D0:D8:B7:82:F1
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       084A25B8A85B600BDE6CEFCF645A1E002A7E36B8
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa
Signing time:             Mon 27 Oct 2025 06:46:28 +0000
ROA not before:           Mon 27 Oct 2025 06:41:28 +0000
ROA not after:            Mon 26 Oct 2026 06:46:28 +0000
asID:                     23506
IP address blocks:        23.133.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl
                          rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/74c5eaa7-78bb-4cca-835a-0df812ff7d87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 04:31:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4a:25:b8:a8:5b:60:0b:de:6c:ef:cf:64:5a:1e:00:2a:7e:36:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Oct 27 06:41:28 2025 GMT
            Not After : Oct 26 06:46:28 2026 GMT
        Subject: CN=CB61551C9BFEE07CB0442C6EB4DA2BD0D8B782F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:10:32:f0:49:95:9f:99:dc:b5:64:48:88:
                    e4:77:77:64:fc:65:e5:00:d3:87:a7:3f:c0:ec:b6:
                    ae:1a:a7:a7:e3:fd:15:34:d8:8e:e3:f3:19:cf:7e:
                    48:07:16:f4:b7:67:96:03:5c:28:ea:93:a0:13:46:
                    c0:9c:39:75:f4:09:cc:3c:32:25:b5:95:70:2b:c4:
                    50:a3:65:6b:9b:25:a9:11:35:20:3d:d6:51:cc:79:
                    5e:ef:3f:9d:01:09:85:22:de:c5:5d:62:8f:ee:2c:
                    57:9f:5f:d7:28:8d:4c:98:e8:0b:06:70:52:ad:ee:
                    d8:50:36:ac:71:13:60:83:93:e0:a8:8c:e9:46:3d:
                    46:8d:10:39:c0:b1:af:21:96:73:2f:de:b1:bc:87:
                    7a:58:82:68:19:86:0e:18:ea:8f:b4:27:08:d2:66:
                    ba:37:4a:f0:91:c5:92:02:d2:7e:85:25:8e:83:ca:
                    b1:36:a6:e7:80:1e:55:f8:2c:1f:60:8f:42:29:9f:
                    e6:5b:0c:87:5a:cc:c4:04:18:63:85:5a:d0:17:0a:
                    53:a7:b0:06:9e:14:75:5f:bb:25:87:00:e9:46:fa:
                    0f:15:ee:1d:30:b7:ee:6d:ec:bf:f3:2f:4e:0b:f1:
                    6b:1f:91:d8:6d:56:42:3b:cd:a9:74:df:df:51:01:
                    5b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:61:55:1C:9B:FE:E0:7C:B0:44:2C:6E:B4:DA:2B:D0:D8:B7:82:F1
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:14:5e:9f:d0:27:5e:e1:26:90:e6:d9:02:7a:a9:22:47:
         93:4a:dd:10:c5:48:e3:ba:60:a5:f3:01:3a:88:49:3d:7e:eb:
         a9:f2:60:37:aa:e5:c9:aa:d6:b5:de:29:43:60:61:30:2c:00:
         69:b4:4b:17:7f:46:be:ab:95:25:67:6b:b5:61:1d:a7:0a:dc:
         86:f9:5c:1f:f4:d3:55:10:06:87:e5:36:4a:ec:4c:5c:c7:18:
         a0:98:47:9a:d2:04:29:e1:6f:64:5d:84:8d:8b:4f:ff:dc:d3:
         39:c4:7e:3b:8f:57:a6:40:e3:11:89:14:a2:e6:a3:43:62:23:
         91:79:06:21:41:05:e6:de:9a:40:b0:40:29:a9:77:16:0a:d3:
         dd:66:bf:4a:64:80:fa:ac:d1:bd:fe:e1:fb:cb:c8:2a:43:91:
         3c:6c:e9:84:99:ef:e8:19:24:b0:d2:95:b2:d6:db:5c:14:bb:
         79:ed:c2:2f:55:fc:48:37:a3:4b:d7:69:78:c4:45:0a:0b:8e:
         a2:f3:d1:e6:c8:dd:3b:b4:d2:f4:9d:2e:1c:dc:22:4e:04:a8:
         e2:3b:2c:0b:38:f7:50:20:33:49:fb:be:26:b2:16:43:e9:cf:
         b3:b6:86:56:a6:5a:3c:a4:49:51:2b:1e:9d:7c:21:cb:fd:3b:
         25:ae:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:49:55 2025 by rpki-client