Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22761.roa
File:                     AS22761.roa (raw, json)
Hash identifier:          1/MdcEH37n8XqA2yE9xCCMzgbmsRP/EwRL+MQLcVedY=
Subject key identifier:   67:F7:ED:B9:CD:1E:C3:96:6B:33:19:4B:79:E2:6E:1E:2D:42:21:8E
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       0D9FF3DD54F5E540605A4DF3A27E00CBE1D7201A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22761.roa
Signing time:             Tue 04 Mar 2025 02:21:18 +0000
ROA not before:           Tue 04 Mar 2025 02:16:18 +0000
ROA not after:            Tue 03 Mar 2026 02:21:18 +0000
asID:                     22761
IP address blocks:        104.234.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 21:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9f:f3:dd:54:f5:e5:40:60:5a:4d:f3:a2:7e:00:cb:e1:d7:20:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar  4 02:16:18 2025 GMT
            Not After : Mar  3 02:21:18 2026 GMT
        Subject: CN=67F7EDB9CD1EC3966B33194B79E26E1E2D42218E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:05:62:8f:95:bd:98:f7:58:e4:76:d0:ca:
                    a1:0e:08:6d:72:b7:a4:33:30:f5:bb:c3:63:8e:ba:
                    7a:c0:24:9b:b2:1b:ed:a0:0f:4e:1a:fa:33:1d:6b:
                    bd:62:9a:b7:2f:d0:69:f1:a5:53:3a:cf:08:fe:af:
                    c4:e0:b3:27:89:88:dc:c1:65:a8:af:74:ce:a6:ea:
                    ee:ad:cf:3b:56:e4:3d:69:68:b9:2e:40:39:88:87:
                    78:fc:5b:d1:e3:79:e7:4c:95:6b:87:56:07:58:ea:
                    d1:7b:83:97:b7:75:3f:ad:b7:97:a3:e1:bf:3c:9b:
                    25:ec:36:73:74:1a:16:ad:0d:8d:d9:3f:bc:fd:4c:
                    47:90:a5:f2:5b:a3:c9:d1:26:3f:ca:07:72:0e:fd:
                    d5:dc:ee:07:55:89:66:ed:89:fe:0e:c9:a6:17:5e:
                    6a:03:e7:cb:e0:a4:6c:5a:73:cf:78:4c:4a:a8:17:
                    0a:0e:4b:c6:1b:6a:9a:fe:cd:c7:5d:54:17:68:6b:
                    56:5e:80:17:a4:d0:5a:d6:6c:d1:d5:1e:75:a4:eb:
                    25:86:78:84:f9:64:84:07:a1:af:f2:08:b8:1f:36:
                    f8:03:4b:93:73:17:0e:71:40:a3:b0:9c:d1:e5:50:
                    57:98:9e:33:1b:84:6e:d8:5e:b3:35:c2:11:71:62:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:ED:B9:CD:1E:C3:96:6B:33:19:4B:79:E2:6E:1E:2D:42:21:8E
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22761.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:1a:3f:d3:51:3a:cf:ff:53:31:21:27:af:83:7c:db:06:42:
         2d:c1:32:ca:e5:8e:0c:e2:c1:25:90:64:07:40:73:44:bb:44:
         38:4c:65:c2:f6:ae:bb:1e:31:4c:52:04:60:97:2a:a0:9f:98:
         36:32:81:3b:d8:3c:2c:a9:c5:37:64:e7:3c:56:66:2c:ce:7f:
         9f:a4:11:61:62:39:86:b5:a5:f5:48:ff:e9:56:7a:41:c5:99:
         9b:22:41:68:f2:5a:da:28:e2:e0:94:00:6d:e1:8a:8d:00:00:
         f3:80:bd:04:f3:58:ab:30:d7:3f:5b:52:83:b4:39:82:f9:50:
         7c:74:39:90:60:c6:99:6b:dc:ab:f5:21:3b:00:33:6a:24:f5:
         11:67:f8:83:48:9f:87:cb:80:1c:7b:d8:a7:39:c6:4e:01:28:
         2a:bc:7b:ec:50:70:40:98:3d:05:d1:a8:6b:44:f6:d8:24:0e:
         1c:62:5a:b9:a5:61:73:3a:c0:12:b2:86:7c:ed:e0:29:62:e6:
         b6:a2:73:f5:d5:80:28:ce:b2:19:e9:2a:1c:36:44:74:5e:c5:
         44:5a:9d:51:30:5e:06:3f:a9:16:c7:f5:79:9c:b7:42:6c:78:
         14:3e:95:dc:96:39:5c:9e:0d:64:70:e3:46:40:25:cd:3c:04:
         5f:22:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 00:28:49 2025 by rpki-client