Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53616.roa
File:                     AS53616.roa (raw, json)
Hash identifier:          Gk20Rnmm4Lvoyus6Pm2J2jwUX+3dC6J0Pag3Ejdmcds=
Subject key identifier:   FF:B0:E0:0D:0F:8D:26:BD:AB:BF:F8:33:14:44:84:C9:0A:AB:C4:F7
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       080E0B0B7D9E9D859C7C3586D4655207BCD9201D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53616.roa
Signing time:             Wed 16 Jul 2025 23:29:44 +0000
ROA not before:           Wed 16 Jul 2025 23:24:44 +0000
ROA not after:            Wed 15 Jul 2026 23:29:44 +0000
asID:                     53616
IP address blocks:        104.234.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0e:0b:0b:7d:9e:9d:85:9c:7c:35:86:d4:65:52:07:bc:d9:20:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 16 23:24:44 2025 GMT
            Not After : Jul 15 23:29:44 2026 GMT
        Subject: CN=FFB0E00D0F8D26BDABBFF833144484C90AABC4F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:90:ea:97:b0:02:65:50:d4:7c:38:dc:52:
                    68:71:d4:ba:16:fa:04:89:5c:fb:b0:6f:64:8b:e3:
                    2a:c4:24:ec:a9:97:15:db:26:d8:ae:36:71:5f:83:
                    a5:30:dc:37:8a:8e:a6:be:23:e3:55:ed:08:f4:7f:
                    8a:c1:f1:15:53:c8:c7:e8:a4:10:8b:c8:28:e1:a5:
                    35:68:e7:85:32:30:05:75:9c:3e:0e:a0:1e:2b:d6:
                    5c:54:14:5b:ea:84:11:bd:b1:19:ad:34:45:c9:5d:
                    c7:f6:93:79:34:6f:71:83:b8:b7:6b:38:08:a9:8b:
                    d4:35:26:c4:48:d0:d9:19:99:8e:84:9a:f3:2e:5d:
                    d5:dd:50:dc:8d:4e:11:5a:69:88:36:2c:60:62:6f:
                    38:32:a5:4d:a2:bb:4f:d4:64:b7:9b:f8:6d:62:da:
                    6e:b2:30:d2:c7:1b:67:a1:7f:dc:06:35:15:08:bf:
                    a5:f9:95:f0:fa:25:37:1a:38:a1:b7:a8:66:a7:36:
                    bb:ab:2b:18:a0:4b:d5:6b:b1:e0:82:61:88:7a:03:
                    9a:1d:ff:ac:aa:fc:6e:5f:b8:01:3d:c1:9b:18:0c:
                    11:5c:51:76:59:33:cc:a0:a8:3c:12:79:b0:b5:ea:
                    c6:cd:f5:01:66:11:42:93:4f:5a:2a:55:8a:3a:b9:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B0:E0:0D:0F:8D:26:BD:AB:BF:F8:33:14:44:84:C9:0A:AB:C4:F7
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS53616.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:19:1e:98:1b:c0:57:22:c7:e8:93:3c:ee:21:f6:61:49:
         2a:e3:95:6c:53:11:65:94:ef:24:57:9f:5f:33:6f:f4:8e:2f:
         3b:84:89:54:65:c7:08:d4:10:4c:3b:a7:58:2a:b1:1d:48:5b:
         99:78:1c:fd:44:4e:45:43:86:8a:1b:b8:99:4d:b7:33:f7:78:
         d7:70:ee:7a:2f:be:a5:6f:99:0d:f4:3f:20:dd:ff:55:30:04:
         4c:ab:cc:3e:9f:76:da:32:78:88:59:57:be:89:73:92:c2:fe:
         cb:90:66:85:ff:b6:a6:30:ac:f0:30:34:fa:5f:47:7e:44:00:
         c8:25:85:7f:d0:1d:40:e6:ef:91:a1:bf:1d:29:04:95:6e:e4:
         7e:17:70:4c:3e:16:1b:4b:6b:86:a9:0f:45:5a:ec:70:f1:9e:
         69:49:b2:cf:28:84:63:c1:95:c2:c1:22:f6:ca:db:36:ee:88:
         97:91:02:81:a5:4a:fa:0d:53:da:e4:c2:c2:70:bf:4e:a8:30:
         05:d3:3f:80:a7:0f:6b:2d:4c:e8:da:2b:30:93:89:f9:cb:ca:
         6b:4e:e3:0c:6d:42:40:e7:d6:43:85:3f:c2:4b:fb:13:9f:48:
         60:1f:29:87:e1:fb:12:27:e8:91:ef:2a:60:83:d8:c3:31:d6:
         7b:86:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:07:45 2025 by rpki-client