Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS269070.roa
File:                     AS269070.roa (raw, json)
Hash identifier:          CVgwTqlR3zr3J6S+0ON/bMrJBzAj6njxpoq+N0QIKKI=
Subject key identifier:   39:77:E8:B2:FA:61:4A:92:7A:C9:1E:C7:73:3D:3F:89:0D:41:3E:0F
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4FB69FD1B03A85FBB2523C0E5AD3565598DBB33F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS269070.roa
Signing time:             Wed 04 Jun 2025 19:32:15 +0000
ROA not before:           Wed 04 Jun 2025 19:27:15 +0000
ROA not after:            Wed 03 Jun 2026 19:32:15 +0000
asID:                     269070
IP address blocks:        104.234.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b6:9f:d1:b0:3a:85:fb:b2:52:3c:0e:5a:d3:56:55:98:db:b3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun  4 19:27:15 2025 GMT
            Not After : Jun  3 19:32:15 2026 GMT
        Subject: CN=3977E8B2FA614A927AC91EC7733D3F890D413E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c3:a3:a4:ef:ac:ec:97:25:bb:54:c3:80:a8:
                    9a:6e:4d:bd:f9:65:d5:27:71:fe:2c:f5:96:3a:18:
                    7f:b7:f4:84:29:24:a4:7f:f3:95:1d:55:e0:de:03:
                    51:e0:93:f5:7a:d1:21:19:0d:16:30:d9:43:2a:54:
                    af:9e:14:82:8d:f0:d9:60:41:3a:d6:be:8c:7e:78:
                    7b:98:f9:0e:15:3a:ad:14:c2:5d:a8:53:b2:76:49:
                    7b:42:35:33:d6:db:71:f3:97:55:fd:f5:a2:07:53:
                    3b:a6:a7:6b:99:98:70:88:eb:dd:6c:2a:d2:b1:27:
                    b0:c9:4a:e0:08:be:7d:01:16:b1:22:16:0b:e9:dd:
                    7c:fd:66:4d:bb:a8:db:40:0d:f8:dc:66:ef:8a:2c:
                    8a:ef:9c:71:af:61:03:a5:e5:46:e5:b4:9f:5a:96:
                    fc:b4:64:ec:40:c2:c9:36:4e:70:7f:b0:30:08:64:
                    68:b0:88:39:13:ab:71:83:4a:0c:77:78:3b:dc:8f:
                    dc:f7:26:d2:57:57:5a:84:7d:dd:4b:80:7b:83:08:
                    ed:d6:17:e9:e4:54:ce:6f:c9:72:a1:40:ec:ed:bc:
                    0b:30:0b:1e:ab:59:05:ad:2d:fc:ad:0a:46:ff:df:
                    50:e4:a6:2b:f5:6c:ab:9e:3c:56:ef:0a:5c:b0:2b:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:77:E8:B2:FA:61:4A:92:7A:C9:1E:C7:73:3D:3F:89:0D:41:3E:0F
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS269070.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ff:86:b2:fd:0b:a3:fc:51:44:44:88:3b:9c:03:46:89:83:
         e5:33:db:b8:1e:f6:73:92:db:62:4b:6a:e2:0c:ce:f7:af:3a:
         d0:7c:68:2e:90:74:f2:aa:c9:63:52:2b:26:1c:7f:7b:13:60:
         95:89:be:d4:f0:d7:74:dd:05:e4:6e:11:05:57:8f:ee:72:df:
         80:3d:38:95:cf:93:68:54:90:78:5b:7a:31:1e:b8:58:6a:06:
         f7:df:66:4f:ed:12:8e:35:0a:4e:b9:19:ec:5f:06:60:6f:33:
         97:9e:e8:ee:99:13:7f:b0:73:39:47:b4:ca:b8:79:90:99:84:
         a6:ad:3e:7d:aa:35:35:8f:15:5f:cd:98:ff:e5:60:4f:9b:3e:
         f2:a2:7c:c7:98:f5:62:5f:b6:1e:a8:0e:a4:f1:67:f4:07:58:
         fd:a0:46:d7:8f:9c:16:60:a5:b8:a6:ae:5f:b4:75:14:a9:17:
         11:c0:3c:99:22:cf:3e:d0:db:75:c0:54:f6:d5:22:42:87:b9:
         d6:21:7f:cb:25:2f:14:6c:ad:e1:92:90:ae:8c:e5:80:46:68:
         63:65:86:5d:7d:e0:8d:f9:7e:ab:8f:46:71:d3:7a:1d:de:a9:
         f8:27:ce:76:e8:6d:16:3d:dc:c4:c2:93:43:83:aa:c7:a7:3f:
         e6:f6:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:30:45 2025 by rpki-client