Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272887.roa
File:                     AS272887.roa (raw, json)
Hash identifier:          oEx5nTf8hq9e032YNhXMh2xMY3QZJ9rjQEacFQODuaA=
Subject key identifier:   B8:BF:88:C8:71:7E:A5:10:C8:4D:38:67:09:F0:C1:B6:A1:93:47:08
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       425141A9414098886E113D3E347783701EAF4786
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272887.roa
Signing time:             Tue 15 Apr 2025 16:23:03 +0000
ROA not before:           Tue 15 Apr 2025 16:18:03 +0000
ROA not after:            Tue 14 Apr 2026 16:23:03 +0000
asID:                     272887
IP address blocks:        104.234.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:41:a9:41:40:98:88:6e:11:3d:3e:34:77:83:70:1e:af:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 15 16:18:03 2025 GMT
            Not After : Apr 14 16:23:03 2026 GMT
        Subject: CN=B8BF88C8717EA510C84D386709F0C1B6A1934708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:62:47:b9:d9:b7:5c:42:0e:61:61:54:64:42:
                    c3:01:98:6c:11:34:00:5b:77:6c:c2:b0:8e:69:11:
                    17:54:a1:1a:13:a7:65:74:2f:83:ce:ac:33:2a:30:
                    3c:d1:98:3b:f4:08:bb:eb:ea:a4:16:43:7a:04:49:
                    8e:62:41:cb:c2:67:c8:27:52:df:ef:e3:28:49:9d:
                    01:28:fb:ff:59:d7:a6:9e:bc:29:c3:9e:46:aa:ab:
                    cb:7c:74:a8:2b:19:17:48:fc:7f:99:55:db:70:28:
                    fd:5b:56:d5:f3:25:77:39:17:46:d9:93:91:98:3a:
                    99:57:ba:af:4a:1c:03:a9:04:7c:4d:08:a1:65:3f:
                    57:6d:f0:13:a1:18:a2:3c:8e:dc:f4:e2:c5:f4:7f:
                    4c:ab:49:92:60:26:a8:e6:03:5f:02:cc:c9:33:f8:
                    00:07:2b:60:63:56:fe:01:fa:49:3a:e8:51:ae:06:
                    23:6b:d5:22:af:97:6e:18:06:19:29:f8:60:56:e8:
                    3f:3d:ab:43:a9:2c:c8:37:5b:d9:00:ab:32:7c:a0:
                    28:43:bb:11:87:6a:06:e9:51:07:42:84:3e:a5:89:
                    27:75:22:3e:cb:88:58:ee:0b:d6:c2:02:0b:db:86:
                    08:63:34:5a:d1:be:70:0a:41:f5:66:07:3e:96:21:
                    04:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:88:C8:71:7E:A5:10:C8:4D:38:67:09:F0:C1:B6:A1:93:47:08
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS272887.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:91:2e:8c:db:55:e6:7d:bd:d3:0d:aa:83:56:29:77:56:a9:
         73:9f:f2:94:c9:d8:44:8a:75:1c:a3:cb:08:91:1e:be:87:1e:
         04:68:60:f2:07:42:7e:6a:84:bd:39:79:4b:90:bc:80:6a:68:
         69:b8:d8:0a:cb:8f:1f:2c:47:f6:bf:ce:45:9d:e6:e2:75:e0:
         7a:cc:db:5c:b2:de:23:97:02:b9:8c:ee:a4:85:bd:dc:af:ae:
         56:a2:1b:3d:fb:06:a2:ab:46:97:e6:a4:40:a6:5f:4f:8c:5b:
         9d:c9:6c:b2:4e:45:ea:9a:22:ac:35:c9:ae:9a:7e:e4:dd:1f:
         a2:e6:75:0a:05:e3:98:30:45:92:58:79:12:6e:fc:a4:f7:30:
         bd:30:94:ae:2e:d6:5c:c0:cb:4c:bb:e7:8f:a7:ec:2a:67:2f:
         31:b8:37:01:f0:d7:fb:bd:d4:65:a7:ee:b8:13:b6:ec:b6:ec:
         4c:9d:69:13:8a:9f:67:7a:fd:4f:f1:38:d4:bc:f1:88:dc:8d:
         a8:6b:ef:cb:70:3d:99:fd:13:65:33:85:d8:d1:a6:58:fa:a7:
         23:61:50:98:e2:c9:40:c3:f9:26:1d:68:19:ef:60:be:1a:0e:
         ac:c3:94:fa:5d:83:26:65:3a:c9:df:de:a0:46:5f:85:84:46:
         3d:79:a5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:48:56 2025 by rpki-client