Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa
File:                     AS31863.roa (raw, json)
Hash identifier:          H95eZxyoATJWSm/z0qKsy9JiNZJfdTU/1yIgOM7P3Go=
Subject key identifier:   5E:F8:E9:C3:EC:6B:9F:6F:84:38:00:73:35:18:19:20:6D:C6:DF:CD
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       4CAF15EE7F9E2791D0A7EDEB2F61AAEE32D419EA
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa
Signing time:             Fri 24 Oct 2025 04:30:39 +0000
ROA not before:           Fri 24 Oct 2025 04:25:39 +0000
ROA not after:            Fri 23 Oct 2026 04:30:39 +0000
asID:                     31863
IP address blocks:        104.234.30.0/24 maxlen: 24
                          104.234.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Oct 2025 16:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:af:15:ee:7f:9e:27:91:d0:a7:ed:eb:2f:61:aa:ee:32:d4:19:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Oct 24 04:25:39 2025 GMT
            Not After : Oct 23 04:30:39 2026 GMT
        Subject: CN=5EF8E9C3EC6B9F6F84380073351819206DC6DFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:d1:8d:30:8d:1e:7a:d0:5f:f9:ca:5a:8e:
                    8d:f4:ad:3a:d9:13:00:8a:69:18:b9:53:03:df:fc:
                    c0:ac:88:c2:af:c1:70:72:64:fa:9a:f8:b7:cc:77:
                    e2:a2:11:a3:04:8b:a4:50:f0:d5:44:8c:e6:4e:0f:
                    1d:9b:63:95:4f:3a:e2:e0:1d:7c:2e:37:fd:e2:7e:
                    13:3b:8c:38:79:7a:3a:64:6f:af:e2:fe:f6:31:f5:
                    0c:c2:60:65:08:c4:40:f3:36:21:dd:01:69:ce:27:
                    4b:1b:08:26:e3:38:74:02:2e:6f:ce:b8:ce:54:34:
                    3d:c3:7c:ea:17:d7:12:18:9c:b4:94:08:3a:19:4e:
                    84:6e:c2:c3:4b:0a:54:eb:77:a4:23:05:3c:df:31:
                    21:f0:58:53:32:4f:f2:9b:f6:34:6d:c6:74:bf:38:
                    27:91:eb:15:47:a0:20:b5:30:e6:ec:12:70:91:c6:
                    56:17:20:68:1d:17:ed:b2:80:46:84:57:e6:a2:08:
                    1c:fd:01:2a:95:14:b0:67:53:04:1b:30:97:8c:b4:
                    47:b4:29:93:4b:88:71:c7:20:bc:e0:9d:91:a2:e4:
                    36:4e:f1:0c:7c:6b:f8:7f:1a:75:a9:6c:cf:61:d7:
                    be:26:47:2d:c1:7d:d7:83:5b:b6:76:11:60:ce:ec:
                    08:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F8:E9:C3:EC:6B:9F:6F:84:38:00:73:35:18:19:20:6D:C6:DF:CD
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS31863.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.30.0/24
                  104.234.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:78:b4:cb:e2:54:4b:bc:4b:c3:82:d6:04:d2:05:3e:fb:4e:
         86:9c:ef:1c:59:95:70:1e:e0:e6:39:29:26:ba:98:6b:4d:3f:
         4a:0f:c7:e2:5f:2a:8e:ec:6f:ac:ba:4b:91:c7:2e:8b:20:f6:
         95:c9:08:02:77:6b:71:0a:2d:24:a6:24:d2:b8:07:38:64:4f:
         8c:5e:21:8a:bd:0f:8e:ca:70:d7:ae:98:af:03:4e:6c:bb:9d:
         91:8f:ef:e5:8d:d2:17:5f:bb:52:25:0f:23:00:65:e4:f8:9e:
         15:83:52:93:a1:a5:6d:67:e5:1e:b9:e2:01:d1:1b:c2:84:3f:
         84:7c:7c:c6:8d:f3:38:12:21:2c:12:79:d3:8f:15:f5:9f:1c:
         17:f8:b3:f4:03:25:3a:08:6b:ee:a8:a4:4d:28:ce:78:ba:19:
         b4:52:bb:47:fb:1d:3d:53:2c:dd:c8:b7:20:b7:c7:b5:54:70:
         46:2c:ae:0d:63:20:02:e2:ff:85:aa:f6:cd:b9:68:15:ee:c7:
         22:a7:45:4e:94:89:0a:26:df:e1:e4:d5:1a:d2:e4:12:38:dd:
         4e:57:d4:35:2e:7d:c6:e9:91:d6:f9:c1:31:47:e8:cf:e9:38:
         1e:a4:a1:d8:cb:8d:32:9f:47:00:44:b1:5b:2a:10:25:ba:1b:
         e4:2f:a7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:06:53 2025 by rpki-client