Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          wCMilpUMYdU7rVELArt9CT1QxPVSEhJbqbcd4Fmz5z8=
Subject key identifier:   8C:A8:A2:48:CE:BB:CC:7C:D3:4C:6F:35:B8:1C:50:B6:AF:43:60:AC
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       62901D190624E40DB05CBD39AFE9493DA5723514
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time:             Fri 12 Sep 2025 05:01:37 +0000
ROA not before:           Fri 12 Sep 2025 04:56:37 +0000
ROA not after:            Fri 11 Sep 2026 05:01:37 +0000
asID:                     174
IP address blocks:        104.234.12.0/24 maxlen: 24
                          206.53.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 21:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:90:1d:19:06:24:e4:0d:b0:5c:bd:39:af:e9:49:3d:a5:72:35:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep 12 04:56:37 2025 GMT
            Not After : Sep 11 05:01:37 2026 GMT
        Subject: CN=8CA8A248CEBBCC7CD34C6F35B81C50B6AF4360AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:b6:df:c4:f9:e7:60:51:61:34:9e:c6:cb:
                    91:61:34:16:ef:d8:bf:28:a1:aa:67:95:8b:4a:2b:
                    66:cf:18:f2:bc:37:9e:87:a2:94:3a:26:10:e2:1e:
                    be:72:80:c2:9b:33:40:97:00:29:e1:d6:36:86:33:
                    63:a2:9b:6f:b1:51:4f:b4:33:e4:95:5c:3e:ea:9c:
                    4d:67:20:63:fd:a0:af:e1:f7:37:6b:a9:71:33:70:
                    d5:fd:4b:7e:43:ed:06:da:96:88:dd:16:a5:30:73:
                    93:7f:dd:a2:73:56:a9:88:4c:b7:a5:52:4f:a2:dc:
                    b0:50:f2:84:bc:02:59:86:99:e9:67:bc:88:26:ff:
                    5e:9c:8c:cf:69:fc:19:85:50:44:50:1a:89:40:cc:
                    9b:0e:3a:59:f7:a9:ef:4c:a2:ba:a7:29:92:6c:bd:
                    15:18:f3:04:b7:43:b5:64:fc:85:24:22:31:05:bb:
                    d4:b3:4f:2d:0b:1a:0d:fb:94:9f:b0:6c:68:aa:62:
                    4b:19:a2:44:df:4d:3f:85:98:65:ae:1f:8e:e3:aa:
                    b9:ac:14:2c:68:df:4a:5a:df:af:07:e7:26:bd:77:
                    30:50:25:30:f7:5f:55:4e:7e:35:7d:b7:19:3c:48:
                    80:42:78:9e:ad:a7:f2:4c:56:72:9f:f5:d9:35:5d:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A8:A2:48:CE:BB:CC:7C:D3:4C:6F:35:B8:1C:50:B6:AF:43:60:AC
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.12.0/24
                  206.53.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:dd:ab:0a:de:36:94:f5:b4:02:a2:0a:c5:37:4e:4f:3b:1f:
         46:f0:02:51:32:25:09:e7:1f:5a:e3:71:76:1f:91:64:2c:f4:
         10:e2:a8:49:f0:77:e5:b5:46:3a:29:60:97:99:2a:38:36:1e:
         88:bb:56:d6:02:5d:89:77:b7:a8:9e:51:dc:d7:6c:e8:44:f3:
         1f:52:1b:60:1e:ef:a6:12:31:e8:88:2c:a8:a5:5c:ac:0f:5e:
         9c:3d:bb:55:d3:fa:4e:cb:5d:d2:9c:b0:95:87:a4:43:03:98:
         85:ce:eb:e5:d9:44:47:58:a9:30:fc:e8:a3:6d:d8:e4:66:8f:
         05:10:2e:2b:87:4c:58:8b:6d:ba:a8:f3:6d:48:7e:1e:d0:49:
         46:2c:09:69:20:5e:84:a1:8e:8e:f3:46:d9:39:ed:4f:24:5d:
         0c:b8:27:5b:37:9d:78:97:64:e2:5e:cd:b5:2b:de:c0:76:28:
         4b:e8:da:f0:1b:08:2e:36:7b:70:2e:ff:a4:93:5a:c0:eb:bf:
         95:d1:fc:a6:0d:1a:db:84:ec:f3:26:ad:88:00:de:6e:b5:3c:
         f5:8b:e2:28:74:ab:23:59:69:0b:9c:71:8f:15:52:ff:59:7c:
         5e:38:f7:57:26:39:33:ff:22:58:dd:a3:c8:2f:58:41:2d:93:
         c8:1a:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:22:22 2025 by rpki-client