Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
File:                     AS134176.roa (raw, json)
Hash identifier:          8vPhxxWObMK5LMYDCOowqZlaCYy8uHE4wzo+AVQwo+U=
Subject key identifier:   C7:62:5E:F0:82:79:5B:04:5E:90:F5:89:4D:74:B6:46:FA:52:C4:38
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       367D82422B0D540CEEEB71F45ED2F6E1F41AA1E0
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa
Signing time:             Sun 18 May 2025 07:14:25 +0000
ROA not before:           Sun 18 May 2025 07:09:25 +0000
ROA not after:            Sun 17 May 2026 07:14:25 +0000
asID:                     134176
IP address blocks:        104.234.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7d:82:42:2b:0d:54:0c:ee:eb:71:f4:5e:d2:f6:e1:f4:1a:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: May 18 07:09:25 2025 GMT
            Not After : May 17 07:14:25 2026 GMT
        Subject: CN=C7625EF082795B045E90F5894D74B646FA52C438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:d3:d6:70:9e:12:07:7e:93:7c:c8:bb:9e:
                    0e:86:cf:f8:b6:bd:7e:e2:19:5c:cc:c5:a5:08:f0:
                    30:9d:a9:9f:ed:5a:80:02:81:8d:9f:7d:31:0b:5f:
                    05:5b:e0:1e:ee:d7:df:8f:92:e1:bf:72:9d:82:ee:
                    28:97:f7:4b:fe:24:e3:2b:ea:4c:72:34:75:06:eb:
                    04:f6:af:5c:a8:4d:18:6f:36:73:51:dc:27:08:06:
                    b1:65:6a:50:a9:c5:57:23:69:f0:e9:45:cc:a8:b6:
                    13:28:45:14:6a:91:cd:78:37:5b:c7:1c:93:6e:59:
                    65:6e:2e:f1:97:b6:13:75:12:3b:e5:81:31:38:ba:
                    95:9b:5d:6b:b7:c1:0c:cf:fb:dd:9b:35:e9:c1:c8:
                    ac:1c:f7:de:1a:80:3a:03:53:8c:57:79:6a:58:6d:
                    80:a8:52:6e:a8:12:79:43:73:39:3d:ef:d8:c9:cf:
                    3a:14:8d:b2:f2:14:43:9a:dc:66:21:f4:a7:aa:d4:
                    c0:03:63:e3:6f:c9:e5:6c:c4:7c:bf:0f:43:b8:16:
                    4e:71:ff:7c:89:1e:ad:01:c5:fc:ea:d4:a6:7c:38:
                    f7:9b:1c:3f:25:d3:aa:5b:c1:99:09:c1:31:4e:2a:
                    5d:79:9c:9e:19:03:c2:2b:50:8c:80:a9:8e:84:50:
                    20:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:5E:F0:82:79:5B:04:5E:90:F5:89:4D:74:B6:46:FA:52:C4:38
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS134176.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:1f:5a:ff:c4:0d:f0:7c:84:cc:f1:72:37:b8:a3:ea:4a:87:
         59:fc:8f:43:e1:b8:5c:b9:14:84:82:d8:30:79:7c:dd:2f:bb:
         c1:06:23:3a:90:3d:3c:a0:15:1e:dc:81:7d:96:91:00:fe:4d:
         57:fe:2c:26:38:d1:14:f9:ed:af:a4:de:2b:18:93:4b:2c:8f:
         13:83:64:80:fa:02:83:58:62:19:d0:b1:0c:9f:e2:a0:cb:3b:
         01:6d:1b:7b:1b:1c:ea:e4:2a:c0:cf:81:cf:21:3e:3e:b5:de:
         9b:aa:38:c1:d3:74:9a:1b:78:4c:b9:97:2b:aa:e6:92:ee:57:
         35:c7:c5:3e:2c:f6:86:d5:87:f4:27:7f:11:69:ba:ed:d6:69:
         26:f2:d5:28:c9:4c:2e:d3:f4:1c:56:96:7d:61:17:e7:69:8f:
         0b:98:c8:6c:da:d2:bf:7d:c2:a3:2e:c8:ac:59:e5:9a:f2:74:
         7f:24:80:b7:3d:80:42:e7:0a:be:31:5e:63:07:fd:42:24:24:
         30:ac:57:72:c0:08:64:0f:d9:da:93:73:32:fd:b7:e2:b2:9a:
         60:35:bd:81:88:13:09:c0:6a:f1:ea:72:57:7c:b6:05:6d:92:
         30:cf:93:31:42:2f:e9:1d:5d:2a:08:c8:fb:38:de:5f:b7:6f:
         f0:67:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:18:53 2025 by rpki-client