Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
File:                     AS32780.roa (raw, json)
Hash identifier:          cfxL+7kSNq+9+7cUjXTjywRUd6Bumt45M1+FNduvqJA=
Subject key identifier:   1F:8F:01:DF:9F:A7:BB:F2:91:D6:C7:22:26:72:0E:C1:0B:1F:7B:D1
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       23E60CBCC001505E3B999B54208BD534A1F17E78
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa
Signing time:             Tue 02 Sep 2025 11:31:27 +0000
ROA not before:           Tue 02 Sep 2025 11:26:27 +0000
ROA not after:            Tue 01 Sep 2026 11:31:27 +0000
asID:                     32780
IP address blocks:        104.234.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e6:0c:bc:c0:01:50:5e:3b:99:9b:54:20:8b:d5:34:a1:f1:7e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  2 11:26:27 2025 GMT
            Not After : Sep  1 11:31:27 2026 GMT
        Subject: CN=1F8F01DF9FA7BBF291D6C72226720EC10B1F7BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9e:e1:ac:82:b0:13:59:50:46:e4:95:e3:c3:
                    3a:9f:bc:89:8c:0a:7f:4b:67:bf:65:93:03:04:d7:
                    5a:3f:0f:29:51:4e:72:e2:71:ab:fd:22:2c:ca:5e:
                    a6:bc:d5:35:b8:37:5c:59:07:69:23:0a:72:98:5a:
                    f1:a7:44:37:9e:44:a0:ac:f7:7a:29:88:56:1e:c1:
                    94:33:cb:36:f8:a6:27:30:de:25:ad:48:91:73:cb:
                    5d:d5:ee:35:e4:1e:38:74:22:e7:e3:c7:19:2f:73:
                    25:64:38:84:0a:f8:f7:bd:2d:d0:b7:d1:5d:18:31:
                    8a:53:fa:6b:3f:0f:32:62:ad:28:a7:a7:cc:3c:50:
                    a6:29:e6:0b:09:2f:6a:ca:21:e3:5f:2a:6b:bc:93:
                    8e:9f:16:39:22:1f:fc:6e:9e:f6:4c:96:57:66:54:
                    5c:a9:2a:f6:cc:a1:77:fc:36:86:93:49:dc:f5:c9:
                    fb:bf:50:14:bf:39:5a:32:e2:49:84:c8:7e:f9:47:
                    f3:80:92:3f:d9:94:a5:6c:84:72:78:21:3f:7d:41:
                    f6:47:e6:e5:af:74:c5:3f:4a:c3:73:3a:cc:02:c4:
                    d1:35:04:87:8d:6e:71:fb:55:23:26:05:ed:e0:2b:
                    a2:85:33:ca:6e:3d:12:e3:53:ce:e9:fe:aa:71:e7:
                    d1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:8F:01:DF:9F:A7:BB:F2:91:D6:C7:22:26:72:0E:C1:0B:1F:7B:D1
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:db:bb:c2:36:c7:d7:f4:3b:a1:ba:6f:89:7d:fb:4d:a7:d6:
         c7:85:ce:e1:ad:e3:79:c8:36:7b:df:52:d4:fd:13:d7:24:4a:
         f3:0c:76:51:53:e8:c8:c6:1b:7d:62:f3:51:ae:2c:f8:d6:28:
         67:57:b4:37:36:97:9c:e2:eb:3b:11:1d:1d:54:0e:52:d5:d4:
         38:6b:27:d8:d3:d3:0e:8d:11:cf:d6:45:8f:39:cf:f8:fc:2a:
         5a:51:05:f5:2c:3f:34:dd:c1:2f:7b:90:ea:0a:cc:4a:29:e7:
         f5:6b:a6:65:98:66:b4:21:07:c7:f0:fc:a8:7c:20:3c:47:01:
         89:41:1f:7e:99:8f:2a:62:0e:80:cb:6f:1a:5e:e2:b0:4b:8d:
         e6:b5:88:af:16:0d:f6:3f:55:71:47:d0:a6:b0:81:1d:b9:8c:
         8b:b1:d8:a7:5e:be:3e:e6:db:6d:a7:fe:c3:c2:e8:21:9c:40:
         e1:e4:4f:89:1a:b6:b5:9b:4b:ee:70:33:00:0e:8b:8c:15:d1:
         15:d9:aa:03:34:23:e6:2e:0c:87:1e:dc:8c:5e:74:76:36:bc:
         64:09:e4:6c:d4:6f:3a:45:60:82:f7:1f:00:16:6b:ce:25:56:
         01:02:61:85:fe:c8:23:cd:06:08:5f:58:1c:af:9b:4d:fc:41:
         f4:8a:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:03:49 2025 by rpki-client