Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62579.roa
File:                     AS62579.roa (raw, json)
Hash identifier:          xUeSbMLOf/pNZGfNzuCTdPRALyYD+WHZOTT9liDMFpw=
Subject key identifier:   D1:DA:DF:CC:FB:72:2D:7E:1C:4B:6E:BD:09:30:9F:F6:6F:B3:6F:61
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0A4D797F0ACC52B0CAD34A772B2A133DBD73533C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62579.roa
Signing time:             Sun 06 Jul 2025 00:00:37 +0000
ROA not before:           Sat 05 Jul 2025 23:55:37 +0000
ROA not after:            Sun 05 Jul 2026 00:00:37 +0000
asID:                     62579
IP address blocks:        104.234.8.0/24 maxlen: 24
                          104.234.17.0/24 maxlen: 24
                          104.234.33.0/24 maxlen: 24
                          104.234.43.0/24 maxlen: 24
                          104.234.44.0/24 maxlen: 24
                          104.234.45.0/24 maxlen: 24
                          104.234.49.0/24 maxlen: 24
                          104.234.52.0/24 maxlen: 24
                          104.234.57.0/24 maxlen: 24
                          104.234.72.0/24 maxlen: 24
                          104.234.76.0/24 maxlen: 24
                          104.234.79.0/24 maxlen: 24
                          104.234.80.0/24 maxlen: 24
                          104.234.89.0/24 maxlen: 24
                          104.234.96.0/24 maxlen: 24
                          104.234.103.0/24 maxlen: 24
                          104.234.105.0/24 maxlen: 24
                          104.234.108.0/24 maxlen: 24
                          104.234.110.0/24 maxlen: 24
                          104.234.116.0/24 maxlen: 24
                          104.234.126.0/24 maxlen: 24
                          104.234.132.0/24 maxlen: 24
                          104.234.163.0/24 maxlen: 24
                          104.234.170.0/24 maxlen: 24
                          104.234.182.0/24 maxlen: 24
                          104.234.183.0/24 maxlen: 24
                          104.234.190.0/24 maxlen: 24
                          104.234.219.0/24 maxlen: 24
                          104.234.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 22:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4d:79:7f:0a:cc:52:b0:ca:d3:4a:77:2b:2a:13:3d:bd:73:53:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul  5 23:55:37 2025 GMT
            Not After : Jul  5 00:00:37 2026 GMT
        Subject: CN=D1DADFCCFB722D7E1C4B6EBD09309FF66FB36F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:49:8b:28:78:07:03:24:8d:18:00:dd:22:
                    44:eb:cb:71:ea:7a:d5:f4:d2:e2:55:e4:4a:3c:ba:
                    f2:a6:fd:eb:1b:1a:d5:3e:12:a1:33:ad:24:4d:c2:
                    bc:e4:0a:8c:0d:d5:a1:db:1d:01:c7:7c:0b:45:40:
                    ee:c5:81:ea:19:12:be:2d:82:2a:18:eb:ec:90:c2:
                    74:6a:e8:db:2f:1b:7d:c6:9a:b9:e1:c4:f1:59:21:
                    2a:f3:a5:a5:19:fc:68:76:c3:c8:58:5f:97:57:85:
                    1d:b7:59:b1:32:55:f4:ca:3b:2c:44:8f:06:37:0d:
                    9b:81:82:d2:d5:e1:5b:ac:35:f6:a2:64:85:8c:bf:
                    b9:23:12:ac:26:df:07:7d:18:12:47:a9:46:13:74:
                    89:65:34:2e:7a:89:ca:e8:80:e1:a2:0e:1e:ff:02:
                    79:73:1d:e2:ef:92:80:56:e6:f6:7c:47:07:3d:4b:
                    c2:33:69:4b:fd:31:f8:74:93:5d:79:e9:b2:52:b8:
                    8b:55:b1:88:66:f6:28:3b:33:e7:7e:4e:c9:9a:35:
                    73:61:2b:80:fb:03:f1:53:af:5d:a1:c6:b7:ea:eb:
                    e6:d3:65:f3:60:da:9f:f2:83:75:4d:71:35:ca:52:
                    be:7d:f7:a3:a8:a4:e2:71:9d:b3:7a:b1:81:54:ac:
                    52:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DA:DF:CC:FB:72:2D:7E:1C:4B:6E:BD:09:30:9F:F6:6F:B3:6F:61
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS62579.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.8.0/24
                  104.234.17.0/24
                  104.234.33.0/24
                  104.234.43.0-104.234.45.255
                  104.234.49.0/24
                  104.234.52.0/24
                  104.234.57.0/24
                  104.234.72.0/24
                  104.234.76.0/24
                  104.234.79.0-104.234.80.255
                  104.234.89.0/24
                  104.234.96.0/24
                  104.234.103.0/24
                  104.234.105.0/24
                  104.234.108.0/24
                  104.234.110.0/24
                  104.234.116.0/24
                  104.234.126.0/24
                  104.234.132.0/24
                  104.234.163.0/24
                  104.234.170.0/24
                  104.234.182.0/23
                  104.234.190.0/24
                  104.234.219.0/24
                  104.234.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:59:78:ee:86:8d:2f:a6:e9:c5:b7:9e:cc:96:a4:06:3e:54:
         3f:2d:9f:ff:c0:60:bc:31:76:11:a8:23:b9:0b:a1:55:7f:6c:
         b3:30:26:ba:ec:1a:4f:9d:e0:24:d8:a1:76:d8:be:df:1b:93:
         92:8b:45:83:06:ed:fe:cd:2b:97:85:c9:8a:44:03:d0:8c:cc:
         31:90:67:21:ee:c0:f2:b2:d0:f8:56:47:b4:89:e0:40:e7:7d:
         c0:b5:41:9b:4a:38:4e:af:29:4c:f7:09:27:30:14:28:78:fc:
         96:5a:fb:12:f7:0e:ca:d9:c5:39:67:1c:3f:16:ad:f5:fc:3c:
         ca:52:83:19:90:46:c4:17:ee:89:40:12:cd:ee:37:ba:49:ab:
         60:35:65:45:79:86:60:ab:3c:a4:16:83:ed:b0:67:a0:95:84:
         ef:0d:a3:82:c5:f2:44:b1:1e:24:fb:75:4f:7b:0c:1c:34:a0:
         ae:91:49:74:3a:67:c2:28:18:bb:9c:b5:62:3c:cd:f7:d7:88:
         21:7e:a6:9d:c9:f5:b8:b6:79:68:89:d8:01:66:d9:42:fe:dc:
         06:ec:25:7f:bf:a0:a7:ac:c1:16:b9:6a:51:0e:b0:12:74:52:
         48:da:af:c5:a6:82:a5:7d:3b:e0:06:c1:5d:f5:66:16:8f:12:
         ba:fe:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:21:59 2025 by rpki-client