Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264971.roa
File:                     AS264971.roa (raw, json)
Hash identifier:          MwsHsYNPyDMbzg2BRc200b9X4bPq5DlsvoiwHpVp0hw=
Subject key identifier:   C5:B8:14:C4:44:ED:25:B0:DE:F5:47:B1:5F:65:90:C5:14:49:5F:71
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0CAD29D5A699BED451449F5EA211EE12216227E3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264971.roa
Signing time:             Tue 08 Jul 2025 20:38:36 +0000
ROA not before:           Tue 08 Jul 2025 20:33:36 +0000
ROA not after:            Tue 07 Jul 2026 20:38:36 +0000
asID:                     264971
IP address blocks:        104.234.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 01:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ad:29:d5:a6:99:be:d4:51:44:9f:5e:a2:11:ee:12:21:62:27:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  8 20:33:36 2025 GMT
            Not After : Jul  7 20:38:36 2026 GMT
        Subject: CN=C5B814C444ED25B0DEF547B15F6590C514495F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:cd:a1:08:07:67:fa:ad:e1:45:f9:e3:81:
                    1b:69:06:2c:65:6d:62:3b:63:d3:c9:24:4e:31:20:
                    fe:87:1d:6c:06:4c:fe:23:92:5b:94:71:54:6c:5d:
                    11:04:66:60:02:52:fc:d4:f6:e9:fa:3e:8a:6f:1b:
                    b1:4f:74:a8:00:4b:12:fb:f6:b6:be:b0:3f:5f:13:
                    c7:79:d7:a8:55:d6:9c:be:47:f8:c9:5f:52:f5:ae:
                    ab:f8:53:98:f9:7a:f9:ee:77:4c:be:e3:c7:21:c2:
                    57:6e:a2:11:b0:93:2e:90:f3:da:6b:a1:de:71:64:
                    e1:f4:65:f0:a7:a5:07:d2:c2:8b:9c:ac:a5:56:6d:
                    18:e3:d6:be:65:d7:7e:42:03:83:65:74:21:22:21:
                    cb:d4:df:32:68:2b:2f:3f:2f:ee:5c:33:74:c4:8b:
                    43:bb:08:a9:83:be:3a:8f:c6:33:c6:67:24:c9:3e:
                    ff:e4:3f:8b:2f:50:eb:98:bb:0e:1f:59:05:a3:bd:
                    38:9c:97:15:84:ba:b5:5c:b9:58:4d:95:08:e3:70:
                    61:7e:79:b9:72:ed:ea:8f:19:29:92:65:e1:4c:5e:
                    3c:e5:7c:8a:7a:fb:6e:3b:6a:6e:20:d8:5d:51:69:
                    50:9d:b6:d3:4a:4d:db:62:a0:e8:fa:62:35:1b:fd:
                    b2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B8:14:C4:44:ED:25:B0:DE:F5:47:B1:5F:65:90:C5:14:49:5F:71
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS264971.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:85:ff:a8:fe:dc:15:b6:00:26:0e:f0:d4:3f:ad:14:6c:ab:
         41:e0:cf:fa:1c:03:a1:e4:6b:32:6f:ee:aa:d6:5f:45:db:b5:
         c7:30:d6:7f:7c:09:4a:12:f3:2d:d6:2d:82:66:7d:82:6d:00:
         d9:56:5d:29:3a:de:ef:c4:c1:1d:5d:02:4b:f8:5a:aa:8d:a1:
         a0:bc:2d:50:f5:d3:4b:16:b2:b1:66:f5:81:9e:c1:6c:f3:b1:
         3f:19:82:11:b6:ba:57:86:78:2e:c6:3e:6a:10:54:0e:e4:ff:
         eb:4e:45:08:0b:97:31:3d:0d:8e:a3:41:6e:c3:ef:21:78:bb:
         72:94:c1:09:a4:88:8a:35:5f:1b:2c:70:14:f1:0c:83:de:14:
         0f:47:ba:7b:a3:92:51:9b:e3:6f:6e:78:04:37:d7:2c:5d:3b:
         aa:c5:bf:78:31:c8:f7:ec:fc:db:b6:b7:5c:ae:5c:54:eb:b2:
         74:7e:45:a7:cb:fe:3e:07:4e:9e:4b:a2:fc:d3:69:3f:24:fc:
         11:67:e6:9f:35:48:a7:6e:c8:2b:5d:da:1a:ff:65:ac:64:a9:
         be:b7:9c:65:6f:44:5e:bc:8d:08:3f:3d:22:12:00:06:eb:59:
         19:2a:a8:f1:06:0a:38:78:af:0e:d4:f9:99:6d:b3:4f:72:b6:
         81:94:7f:25
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUDK0p1aaZvtRRRJ9eohHuEiFiJ+MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzA4MjAzMzM2WhcNMjYwNzA3MjAzODM2
WjAzMTEwLwYDVQQDEyhDNUI4MTRDNDQ0RUQyNUIwREVGNTQ3QjE1RjY1OTBDNTE0
NDk1RjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgvNoQgHZ/qt
4UX544EbaQYsZW1iO2PTySROMSD+hx1sBkz+I5JblHFUbF0RBGZgAlL81Pbp+j6K
bxuxT3SoAEsS+/a2vrA/XxPHedeoVdacvkf4yV9S9a6r+FOY+Xr57ndMvuPHIcJX
bqIRsJMukPPaa6HecWTh9GXwp6UH0sKLnKylVm0Y49a+Zdd+QgODZXQhIiHL1N8y
aCsvPy/uXDN0xItDuwipg746j8YzxmckyT7/5D+LL1DrmLsOH1kFo704nJcVhLq1
XLlYTZUI43Bhfnm5cu3qjxkpkmXhTF485XyKevtuO2puINhdUWlQnbbTSk3bYqDo
+mI1G/2yPwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMW4FMRE7SWw3vVHsV9lkMUU
SV9xMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzI2NDk3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq9zANBgkqhkiG9w0BAQsFAAOC
AQEAloX/qP7cFbYAJg7w1D+tFGyrQeDP+hwDoeRrMm/uqtZfRdu1xzDWf3wJShLz
LdYtgmZ9gm0A2VZdKTre78TBHV0CS/haqo2hoLwtUPXTSxaysWb1gZ7BbPOxPxmC
Eba6V4Z4LsY+ahBUDuT/605FCAuXMT0NjqNBbsPvIXi7cpTBCaSIijVfGyxwFPEM
g94UD0e6e6OSUZvjb254BDfXLF07qsW/eDHI9+z827a3XK5cVOuydH5Fp8v+PgdO
nkui/NNpPyT8EWfmnzVIp27IK13aGv9lrGSpvrecZW9EXryNCD89IhIAButZGSqo
8QYKOHivDtT5mW2zT3K2gZR/JQ==
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:05:50 2025 by rpki-client