Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa
File:                     AS397423.roa (raw, json)
Hash identifier:          D95MVmYgX9fa/IofC6PZ4jfwiOxsdeWIr7CL3QxxpSo=
Subject key identifier:   80:CD:3F:A2:8A:1A:96:71:02:08:DE:7C:73:42:0E:DA:86:D5:4B:CE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0E2B5C2933EA931E75E9AED034D73DDF9094A852
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa
Signing time:             Mon 01 Sep 2025 05:21:57 +0000
ROA not before:           Mon 01 Sep 2025 05:16:57 +0000
ROA not after:            Mon 31 Aug 2026 05:21:57 +0000
asID:                     397423
IP address blocks:        104.234.99.0/24 maxlen: 24
                          104.234.195.0/24 maxlen: 24
                          104.234.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 05:10:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:2b:5c:29:33:ea:93:1e:75:e9:ae:d0:34:d7:3d:df:90:94:a8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  1 05:16:57 2025 GMT
            Not After : Aug 31 05:21:57 2026 GMT
        Subject: CN=80CD3FA28A1A96710208DE7C73420EDA86D54BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:dd:d2:33:7e:9d:67:34:48:a0:eb:ac:33:
                    6a:f6:fb:a7:dd:46:a8:65:60:14:0f:b4:51:47:36:
                    38:97:70:07:ab:92:b6:0b:f6:8f:cb:af:b4:51:c2:
                    2d:f1:4c:4d:a1:7c:96:43:90:3e:56:a2:9d:37:99:
                    a2:32:e7:d3:e2:ef:ea:9c:d4:2f:c8:5e:0b:46:28:
                    dc:d9:05:1a:18:c8:04:9a:57:48:4e:f6:b1:cb:84:
                    f1:2c:1c:67:5a:27:2a:21:f2:2c:16:16:ae:a2:6c:
                    67:d6:48:48:2d:03:de:3c:b8:e6:e8:32:f3:b4:9d:
                    d6:10:74:6f:f5:02:8d:c7:86:7e:5a:c7:44:b2:25:
                    88:c0:c1:22:fd:69:cb:e8:45:b5:73:64:62:f0:20:
                    d9:5a:e1:a9:ee:b7:42:f9:2d:ef:e8:eb:10:36:f4:
                    50:77:1e:dc:6f:82:ed:d5:b8:c2:c3:3b:79:f5:6e:
                    15:96:c4:7c:a6:67:2f:c1:fe:65:3e:53:4e:3d:27:
                    ef:8b:c2:3b:89:88:da:1b:37:73:2e:bc:87:61:ab:
                    24:95:eb:85:ad:cb:f6:b6:b4:87:e4:9f:6a:66:d8:
                    20:00:ef:6c:79:5f:8c:46:a3:cf:4a:96:4e:a0:b8:
                    c5:6f:4c:51:14:2f:f5:a9:3a:24:ed:97:44:0a:88:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:3F:A2:8A:1A:96:71:02:08:DE:7C:73:42:0E:DA:86:D5:4B:CE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.99.0/24
                  104.234.195.0/24
                  104.234.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:f0:f0:09:77:bf:d5:e9:b2:17:0d:2a:f5:97:46:ea:0a:
         1f:14:56:6f:ea:66:b9:ed:71:2c:66:19:38:85:ed:91:2e:3e:
         38:e5:27:e5:42:4b:4b:a8:07:0c:a1:1a:28:4b:03:15:36:74:
         14:50:93:ed:92:db:ea:61:9f:68:5e:69:69:92:49:ee:84:4c:
         bd:54:24:39:e6:4c:6c:d7:1c:64:cd:c2:a4:cb:84:75:fe:f6:
         71:b5:c3:e5:16:32:1a:7d:7c:60:3b:70:f6:79:23:45:42:59:
         78:ca:e5:0d:f3:42:74:d4:c3:8c:09:18:fd:99:4b:7f:99:58:
         ea:40:ee:26:4a:21:11:7a:97:b9:f2:d5:66:b2:5d:33:26:fb:
         97:8b:70:08:db:36:58:56:a4:74:17:f5:c9:de:02:db:e5:a3:
         68:89:6b:ef:87:5d:a1:d1:9a:a7:a7:cb:10:57:f2:7c:58:d4:
         ab:78:4c:90:9a:13:77:94:f1:50:d5:ce:4c:21:17:74:fd:e2:
         e9:ce:31:f0:79:5a:0a:71:2d:5f:b4:a8:91:b8:61:bf:dc:e8:
         e5:46:8f:3f:43:37:a4:d6:02:fd:2e:13:bb:93:a2:a0:d9:12:
         64:aa:d1:f0:f7:44:eb:84:a8:12:80:e8:c9:9d:74:56:33:6e:
         f6:63:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:23:58 2025 by rpki-client