Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
File:                     AS394117.roa (raw, json)
Hash identifier:          R55lIwZVMxqR+rcweoAG153t4AN9EDw9LIPQJXd6iL8=
Subject key identifier:   64:B9:7D:34:E2:A3:49:44:64:DD:58:C4:44:E7:1C:0D:29:DC:A7:62
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       73F1CDD05810648C17B3D9F231F922A9C7BCD011
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
Signing time:             Mon 25 Aug 2025 18:37:13 +0000
ROA not before:           Mon 25 Aug 2025 18:32:13 +0000
ROA not after:            Mon 24 Aug 2026 18:37:13 +0000
asID:                     394117
IP address blocks:        104.234.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 12:32:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f1:cd:d0:58:10:64:8c:17:b3:d9:f2:31:f9:22:a9:c7:bc:d0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Aug 25 18:32:13 2025 GMT
            Not After : Aug 24 18:37:13 2026 GMT
        Subject: CN=64B97D34E2A3494464DD58C444E71C0D29DCA762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:aa:7a:28:7c:8f:6d:a1:fd:0a:eb:8f:fb:fc:
                    63:be:aa:5d:2e:1d:6a:f2:88:a7:4f:ec:60:26:4a:
                    cc:95:40:6d:4e:78:fb:b6:ce:1a:9a:38:47:92:b8:
                    57:d0:08:ca:6d:06:c5:f6:5e:a3:3d:15:f8:ac:7e:
                    5a:47:d3:38:d2:56:e0:c2:fb:fa:ca:94:d1:c3:44:
                    00:54:fb:0e:43:24:fd:59:ed:0f:1a:5c:d9:bd:9f:
                    ab:f1:2e:b4:13:eb:4c:6c:c7:18:9b:c2:79:49:6b:
                    83:f1:a5:0c:a4:0e:e5:84:e6:8c:28:23:d0:2d:6e:
                    af:e5:7f:c2:78:66:f9:12:de:22:fb:99:63:7a:6a:
                    3e:ab:2a:63:bb:a5:78:e3:cc:da:22:e7:75:ff:31:
                    91:42:a3:44:ee:9d:9a:d9:72:15:d7:93:ea:84:52:
                    29:a3:24:93:9b:87:2b:b9:5c:6a:5d:3f:25:b4:1f:
                    18:c1:3d:df:2b:a8:54:d7:94:c6:49:0d:d1:38:dc:
                    9c:97:e9:ed:c9:c4:e9:04:f1:fc:67:49:4a:ec:2b:
                    88:42:1c:6f:54:a6:7d:82:06:2d:54:c1:17:55:5d:
                    03:6e:39:5c:a3:5f:3a:2c:c1:4e:e1:42:9a:9e:6d:
                    9e:89:a6:c9:dc:89:e1:0a:f5:d5:3b:8a:09:ea:ea:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B9:7D:34:E2:A3:49:44:64:DD:58:C4:44:E7:1C:0D:29:DC:A7:62
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:48:be:95:3b:2e:97:a8:71:b4:f7:8d:95:a5:7d:4d:a4:92:
         a9:0f:90:43:fe:08:d7:b5:e2:16:7f:67:d5:aa:1e:c5:02:f4:
         10:5c:04:37:19:10:33:70:31:55:5d:6d:9e:7c:0f:e2:aa:3b:
         44:28:32:ac:9d:b0:96:ee:e2:a7:61:b9:92:b6:29:c0:fd:25:
         d7:94:00:82:ca:ff:c1:eb:9e:3f:85:d8:7e:03:89:f0:1d:74:
         80:e8:0b:e8:c9:9a:20:80:6a:0f:b8:62:e5:11:3c:8d:fb:2e:
         7d:32:78:a2:98:9e:6e:7a:93:36:2c:ef:a3:2a:80:64:2a:16:
         68:ac:ba:6f:cf:81:45:7e:17:35:e0:2a:b7:47:24:46:38:ba:
         d1:31:0f:43:d8:96:86:a9:b7:34:5d:0d:43:d1:24:03:e3:c4:
         39:51:41:8e:30:94:97:06:a0:38:e0:26:63:eb:8a:bd:a1:f0:
         fa:61:0f:fc:7f:8b:84:d2:82:5b:38:b4:f8:d0:96:21:22:af:
         97:37:fa:23:d5:a3:6a:27:46:f8:6b:01:5a:70:34:34:03:d2:
         40:dc:51:11:45:97:04:75:15:ab:3e:54:c7:5f:c5:a3:11:42:
         6b:b9:e7:fa:8d:5d:2a:c9:8c:c1:b3:06:69:39:c5:58:c4:9b:
         e4:29:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:36:31 2025 by rpki-client