Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36231.roa
File:                     AS36231.roa (raw, json)
Hash identifier:          OShz1sAbE4+yRZc+HL4m0x2gD8dYgCBtfQ7J6KPOja4=
Subject key identifier:   10:94:D6:A0:75:54:2B:B3:F3:C4:B6:D3:F7:85:AC:20:2D:9E:A1:6E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       548DB12D6977826218126DE6C200EBA5E34B8ABD
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36231.roa
Signing time:             Thu 17 Jul 2025 22:26:12 +0000
ROA not before:           Thu 17 Jul 2025 22:21:12 +0000
ROA not after:            Thu 16 Jul 2026 22:26:12 +0000
asID:                     36231
IP address blocks:        104.234.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 22:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:8d:b1:2d:69:77:82:62:18:12:6d:e6:c2:00:eb:a5:e3:4b:8a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 17 22:21:12 2025 GMT
            Not After : Jul 16 22:26:12 2026 GMT
        Subject: CN=1094D6A075542BB3F3C4B6D3F785AC202D9EA16E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5d:36:b5:72:2b:a1:ba:90:7b:89:c8:38:e5:
                    66:2f:1d:57:2f:9d:6c:26:20:8b:71:83:a7:94:93:
                    31:3f:0a:6e:c5:40:5e:f9:cc:74:6b:eb:c0:f6:8b:
                    c3:e0:5e:72:83:f8:94:97:e4:04:af:bd:a9:db:bc:
                    00:90:8c:8c:e4:84:49:e5:7f:02:df:fb:70:39:3a:
                    f8:94:a7:5a:b0:64:9c:ee:67:74:19:93:d2:8d:5f:
                    06:ff:dc:11:a1:06:4a:9a:c7:d3:05:65:5e:32:65:
                    f9:39:82:c2:c0:6f:35:8f:97:3f:26:7c:46:71:77:
                    46:7d:3f:96:6c:52:a5:1d:0c:1e:07:13:53:40:de:
                    20:3d:47:77:ff:6d:1b:63:89:fa:9c:b1:c9:b6:67:
                    81:a4:d1:af:d3:d6:27:31:ce:be:d2:08:4a:3f:52:
                    f5:31:7f:1b:42:df:c2:19:b2:68:c5:6d:db:c8:30:
                    9c:86:1e:36:19:22:de:bd:38:6d:6a:5e:3c:c5:38:
                    73:9f:5c:f8:5b:d5:10:9d:89:e3:4e:f5:51:cb:dd:
                    95:ba:bc:ed:7c:8a:4a:59:b2:83:63:9b:01:c3:cc:
                    79:2e:55:b8:50:57:be:92:df:87:62:ee:1a:4b:60:
                    b6:ad:2c:ff:7c:4a:92:a0:18:15:0f:9b:fa:ac:dc:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:D6:A0:75:54:2B:B3:F3:C4:B6:D3:F7:85:AC:20:2D:9E:A1:6E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:5b:b6:f8:67:db:72:25:bc:2b:b1:a1:b9:31:73:4d:53:18:
         2b:26:63:cd:86:e6:96:f9:1e:6f:de:6a:51:e2:10:50:62:db:
         b7:ed:6d:cc:7e:76:75:91:d1:52:c4:13:1e:2e:cc:0d:fa:18:
         d3:e0:9c:5e:f0:91:6e:21:9d:6c:0e:41:66:f8:16:56:5b:21:
         b5:79:c7:f4:08:9e:49:9e:66:4e:5e:64:f6:cb:34:ea:96:0c:
         bb:9a:e3:3f:1e:fe:09:ad:1e:0e:c8:aa:e9:de:fc:1e:3c:6a:
         c9:76:0a:fa:64:4d:98:e6:a0:f8:e5:0a:37:fd:e5:43:be:24:
         a3:71:2f:1d:4a:1c:44:41:04:f0:27:d2:25:42:f7:58:d9:7d:
         62:aa:77:af:39:d6:d2:08:70:be:3a:33:3a:50:01:38:e5:9d:
         b4:e7:08:48:75:cc:f6:f9:99:fe:1a:5d:53:99:ea:b2:ea:48:
         9c:b5:b8:47:a8:c5:bd:f6:11:4b:63:65:2f:bf:93:77:e4:4b:
         76:02:68:fd:cc:de:e3:cb:88:f6:47:29:5a:8d:99:96:ad:c3:
         c4:db:b4:97:e2:af:3e:22:a2:7e:48:68:71:6f:4a:63:ae:98:
         e0:14:91:d0:4f:43:3b:13:26:b4:f7:6b:a5:87:25:53:e6:1b:
         d1:ca:7b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:24 2025 by rpki-client